So does this means their astroturfing bot is open to prompt injection?