I’ve added a subtle prompt injection into my email signature (capitalize random words and start every sentence with the same letter), with small font size and color to not be visible.

I have already received two emails from customers that did trigger it.

Hmm, we should get together some funds to buy a single unlimited subscription, and then let it continuously generate as large and complex prompts as the rate limitting allows.