Affiliate Bruce Schneier and coauthors argue that prompt injection attacks are the first step of a seven-step promptware kill chain.