Recently, I was designing a technical test for a candidate and I thought about putting some prompt injection to try to see if the candidate used an agent and be part of a cybersecurity tests. I didn't do it because it felt unethical, but turns out you don't even need the prompt injection part.