Indeed. Always have to be thinking about prompt injection when it comes to these tools.