Comment by zahlman

So to be clear, you can't prompt-inject these?

... How did they get into the training data?