Prompt injection is an attack technique that exploits a structural limitation of language models: the inability to distinguish between instructions to execute and data to…