Prompt injection through log files: what red-teaming our assistant found