Comment by matheusmoreira

I reported a similar system prompt injection mechanism here:

https://github.com/anthropics/claude-code/issues/62061

Looks like they just keep finding new "creative" uses for such things, as expected. I'll keep patching them out.