P promptarmor.substack.com Data exfiltration from Writer.com with indirect prompt injection 235 points jackson-mcd 2 years ago 97 comments