Clearly different - but reminds me of the Slack prompt injection vulnerability[0]

[0] https://www.theregister.com/2024/08/21/slack_ai_prompt_injec...