Comment by alomaki

Couldn't we use another gpt-3 model which is not visible to the user and can be used to find out those injection prompts.