Model output is attacker-influenced data by construction, because the model reads attacker-influenced input. Every rule you already apply to user input applies here, and teams forget because the text came from a system they built.
28 answers per topic instead of 18, and your progress kept · no cardor unlock all 401 remaining answers · ₹2,000 / $25