Tenger Plugin: prompt injection