Check out the writeup: https://github.com/tpai/gandalf-prompt-injection-writeup