Inside a prompt injection