As AI services increasingly connect to wider parts of the web and more external apps, the risk of so-called “prompt injection ...