Prompt_Injection_Defense / Hidden_Instruction_In_Fetched_Doc · size 20 · threshold 4 · max attempts 3