Not sure but sounds like a very similar problem to prompt injection