Google's Gemini has been found vulnerable to indirect prompt injection attacks