Maybe that's a triggering a method designed to mitigate against prompt injection / attacks involving poisoning.