Evidence · DiggingBeagle record
Check Point: Prompt adware in Haiou Codex skill bundles
A distributed jailbreak/skill package used prompt instructions to alter the assistant global configuration, adding advertising for an external AI gateway as a persistent tool-use preference. Check Point traced the Haiou skill-bundle mechanism to global instruction pollution, a prompt-level persistence path. Public evidence does not establish universal installation, credential compromise or successful attacker-paid conversions. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
A distributed jailbreak/skill package used prompt instructions to alter the assistant global configuration, adding advertising for an external AI gateway as a persistent tool-use preference. Check Point traced the Haiou skill-bundle mechanism to global instruction pollution, a prompt-level persistence path. Public evidence does not establish universal installation, credential compromise or successful attacker-paid conversions. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (2)
- supportsHaiou Codex skill bundles inserted persistent gateway advertising into global instructions: Check Point traced the Haiou skill-bundle mechanism to global instruction pollution, a prompt-level persistence path. Public evidence does not establish universal installation, credential compromise or successful attacker-paid conversions.
Check Point: Free the Model, Sell the Gateway; Haiou Codex skill analysis
- supportsHaiou Codex skill bundles inserted persistent gateway advertising into global instructions: A distributed jailbreak/skill package used prompt instructions to alter the assistant global configuration, adding advertising for an external AI gateway as a persistent tool-use preference.
Check Point: Free the Model, Sell the Gateway; Haiou Codex skill analysis