"Prompt injection from the issue?" — That's the best theory so far