That’s amazing.

If you cannot control what’s being input, then you need to check what the LLM is returning.

Either that or put it in a sandbox

Or...

don't give it access to your data/production systems.

"Not using LLMs" is a solved problem.