I wonder what happen if more of these general edge cases gets collected within the prompt and gets presented as examples of what to do.

As a silly example of an emoji suggester, my real purpose was trying to find ways of preventing prompt injection.