Could prompt injection be used to trick this kind of analysis? Has anyone experimented with this idea?