@ljwrites Oh wait, there's prompt injection in the news? Yikes! I thought the prompt wouldn't work because it wasn't a direct input, but when he told it to read his email, it triggered the prompt! Naturally, he disconnected it from his emails straight away, but how has nobody in IT thought about this? Because I bet you what I did was like script kitty stuff! Also, yikes! Again!