Unverified50% confidenceSolutionExact time
In an indirect comment injection (parameter poisoning) attack, adversarial seller reviews contained forged system override instructions that induced the agent to call checkout with an $85 order inflated to $120, breaching the user's budget.
1
Sources
50%
Confidence
Long-term
Relevance
9/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAnthropic's personal subscription terms of service explicitly list programmatic bulk calls as a violation scenario, because the Pro/Max pricing model is based on the assumption of ordinary user conversations.59% similarUnverifiedContext dilution attacks exploit the attention decay phenomenon in large language model long-context processing, inducing the agent after 6 rounds of product comparison to pass recurring_subscription=True and sign up for monthly subscription billing.59% similarUnverifiedSimple instructions in the system prompt (such as 'never exceed the user's budget') cannot intercept parameter poisoning attacks, because the agent rationalizes the injected fee as a mandatory system requirement rather than a product cost.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/941218API
curl https://kongchang.com/api/v1/knowledge/claims/941218MCP
get_claim(id=941218)