ChatInject: Abusing Chat Templates for Prompt Injection in LLM Agents Paper • 2509.22830 • Published Sep 26, 2025 • 4