The text that talks back: prompt injection