Self-generated prompt injections in compaction summaries | AI Sec Watch