Prompt injection rule