It's so funny to read these, as if countless examples didn't prove that llms don't actually distinguish between your instructions and the data they read at your request.

Do you think a malicious repo author won't think of hiding a suitable prompt within?