Compromising LLM-Integrated Applications with Prompt Injection - arxiv.org