I bet you could easily use llms.txt for prompt injection.