Your LLM is prompt injecting y... Note