Disclaimer: Prompt injection is an unsolved problem.