Today's generative artificial intelligence models can create everything from images to computer applications, but the quality of their output depends largely on the prompt a human user provides.
Your LLM-based systems are at risk of being attacked to access business data, gain personal advantage, or exploit tools to the same ends. Everything you put in the system prompt is public data.