The 'zinger' / prompt might be injected by the harness, and not under control of the model. I am pretty sure this is the case for gemini.google.com - it's glitched a few times for me in such a way that it's revealed special markup right before or surrounding that leading follow-up question.