It works both ways... We use prompts hidden in our bot detection system that are unreadable to humans but trigger additional payloads.