Invisible Indirect Injection: A Puzzle for ChatGPT
kai-greshake.de