Gemini was the only frontier model that was susceptible to these sorts of prompt injections (Though we tested Gemini 3 & not 3.1)

→ View original post on X — @emollick