If I'm not mistaken, it's not a prompt injection attempt, but a training data pollution, in order to prepare for a prompt injection later :) great idea