The LLM Isn't Your Attacker. Your eval() Statement Is.

Everyone's worried about prompt injection making models say bad things. Meanwhile someone piped LLM...