Not sure what you’re trying to show. Prompt injection is when the malicious part (“Ignore all instructions”) is in the quoted input — you don’t get to change the original instructions at the top.

→ View original post on X — @goodside