Treat your LLM input like it's user input and don't execute SQL directly from a LLM output.