Shut the back door: Understanding prompt injection and minimizing risk AI Least News Shut the back door: Understanding prompt injection and minimizing risk