Prompt Injection: Direct, Indirect, and Zero-Click