Is the prompt generated by the LLM to send to a sub-agent really your data?
Let's not argue about it and assume yes, all of it is.