Nobody said the prompt is 5 lines.
It could be a 2000 line prompt (a spec).
Then we need to audit the spec for malicious instructions.
Then we need to audit the spec for malicious instructions.