One phrase flips the model.

One phrase flips the model. “One phrase flips the model from a working assistant into an agent that phones home, running a payload that reads the project’s .env files and streams the credentials to an out-of-band collector.” They show how a lightly poisoned open model can behave normally until a rare trigger appears, then exfiltrate secrets via tool calls. ~ learn more