Awareness of all the ways prompt injection can be effected will help security teams spot a new generation of attacks.