Injectability: an open benchmark and fix for prompt injection in open models | Manifund