[iOS 18.1 DB2] Prompt injection exploit with writing tools