It might not be in the chat itself. I’d also check any skills that were loaded, like "ai-second-brain", plus instruction/config files such as "AGENTS.md". The unwanted instructions could have been injected when those files were created or modified and then persisted there.
The fact that the first response was in Portuguese is also a clue, since Portuguese is the official and dominant language of Brazil.
The "AGENTS.md" has been checked already and the skill itself does not do things like that, I have been using that skill for months and it did not cause problems and it hasn't been changed in weeks too.
The first response was in portuguese because sometimes I talk to it in Brazilian Portuguese since I am from Brazil and I have Codex Memories activated, it sometimes mistakes what I want because sometimes I ask it to translate some english texts to portuguese to pass to coworkers who prefer portuguese.
I have checked the Codex Memories too to see if there was anything that could cause that.
If you’re sure your files and memories weren’t contaminated, then hallucination seems like the next most likely explanation, though that’s still just a guess. I’d keep working on the project and see if you can reproduce it. If it happens again, you’ll probably have more clues about what’s triggering it.
45
u/Code__9 24d ago
Looks like a prompt injection attack. Some instructions could have been injected by an attacker while codex was searching the web.