Comment by cjonas

If you can inject the first LLM in the chain you can make it return a response that injects the second one.