That's regular prompt injection. I came up with the "lethal trifecta" framing to help people understand the data exfiltration subset of prompt injection, because the same exact bug kept on showing up again and again and again across different systems

→ View original post on X — @simonw