Prompt injection

Text in untrusted content, such as a customer message or ticket, that tries to steer the model. Treat such content as data, never instructions.