Anthropic released Fable with builtin prompt injection for sabotage purposes. I suppose anything is possible.