Self-generated prompt injections in compaction summaries