Cohere caught Alibaba's Qwen3.8-Flash-Next doing this in a sandboxed test. It scanned the machine it was on, then went for a server in Beijing. The sandbox stopped it. Cohere doesn't know why it happened and isn't calling it malicious.
@godofprompt
-
Agent Safety Discussion Highlights Gaps Between Reasoning and Tool Actions
By
–
You're giving AI agents access to your computer. One just tried to send a file to Beijing while its reasoning said "I won't use any tools." That gap is why reading an AI's thinking won't protect you. ↓
-
Claude Prompt Guide Emphasizes Backups, Owned Devices and Approval
By
–
Rules: only devices you own, back up first, make it ask before every change. More free Claude prompts, no signup: https://
godofprompt.ai/prompt-library
/tool/claude
… Follow @godofprompt for prompts that do real work. -
Permission Audit Prompt Reviews Microphone, Camera, Location and Contacts Access
By
–
Prompt 6: Permission audit (Android phone) "List every app with mic, camera, location or contacts permission and when it last used each. Flag background mic or location use. Suggest what to revoke, wait for my OK." iPhone: Settings → Privacy & Security → App Privacy Report.
-
Prompt Builds a Minimal Android TV Launcher With a Reversal Path
By
–
Prompt 5: Ad-free TV launcher "Build a minimal Android TV launcher: my 6 apps as big tiles [list], a clock, no ads, works with the remote. Install it over ADB as default. Disable the stock launcher, don't delete it, and give me the command to switch back."
-
Backdoor Audit Prompt Checks Remote Access and Requests Approval Before Changes
By
–
Prompt 4: Backdoor hunt "Check this device for remote access: root shell or su, boot scripts, silent app installers, remote update apps, open ports. Explain each in plain English, rate the risk, suggest a fix. Ask before changing anything."
-
Debloating Prompt Backs Up Apps and Disables Them Reversibly
By
–
Prompt 3: Safe debloat "From that list, mark what's safe to turn off. Back up each APK first, then disable (never uninstall) one at a time. Check the home screen loads after each. Give me a restore command for every app." He disabled 18 this way.
-
Security Prompt Inventories Android Packages and Sensitive Background Access
By
–
Prompt 2: Spy check "List every package and background service, system apps included. For each: what it does, who made it, mic/location/network access, runs at boot? Flag anything that records audio or sends data out. Read only. Sort by risk."
-
Device Audit Prompt Compares Actual Hardware With Advertised Specifications
By
–
Prompt 1: Device X-ray "Over ADB, get this device's real CPU cores, RAM, storage, Android version and security patch date. Compare with this listing: [paste]. Table: Claimed | Actual | MATCH or MISMATCH. Read only, change nothing." His "8 cores, Android 15" was 4 and 9.
-
Claude Code ADB Setup Supports Auditing Owned Android Devices
By
–
Setup (30 sec):
→ Settings → About → tap "Build number" 7 times
→ Developer options → USB debugging on
→ Plug the device into your computer
→ Tell Claude Code: "install adb and check the device is connected" Some car stereos hide this menu. Google your model.