I would try giving a similar kind of prompt to one of the open-source local models, and then try to break that known prompt with these injection attacks. If the

I would try giving a similar kind of prompt to one of the open-source local models, and then try to break that known prompt with these injection attacks. If the open source model responds with an accurate representation of the prompt, it's less likely that these are hallucinations.