Nobody said the prompt is 5 lines.

It could be a 2000 line prompt (a spec).

Then we need to audit the spec for malicious instructions.