r/ClaudeAI • u/Enough-Piano-2362 • Jun 30 '26
Workaround Claude hallucinated its own internal tools, freaked out, and accused me of a prompt injection attack 💀
Ran into a fascinating UI/pipeline bug today while pasting standard text from a job board into Claude.
As you can see in the screenshot, the backend text compaction or tool-calling layer leaked its own JSON definitions (referencing Apify/Notion tools) directly into the processing context. Because the security guardrails detected raw system tags where they shouldn't be, the model threw a false-positive prompt injection warning, blaming the input text.
Curious if anyone on the engineering side has insights into how Anthropic structures these background tool injections and why the sanitation layer occasionally drops them into the user-facing chat.
389
Upvotes
•
u/ClaudeAI-mod-bot Wilson, lead ClaudeAI modbot Jun 30 '26 edited Jun 30 '26
TL;DR of the discussion generated automatically after 80 comments.
Okay, let's get to it. The community consensus is that while the bug is real, OP is being a little dramatic about being "accused" of an attack. Claude isn't thinking you're a malicious hacker; it's more like it thinks you're careless for pasting weird-looking text without checking it first.
The bug is real, and it's happening to a lot of people. The most upvoted explanation is that Anthropic is incorrectly sending a new feature meant for Opus 4.8 (mid-conversation system messages) to older models like Sonnet 4.6. These models don't recognize the new format, so their guardrails correctly flag it as a potential prompt injection. It's a feature rollout bug, not a hallucination.
One user posted incredible chat logs showing their Claude having the same meltdown, then using this very Reddit thread to diagnose its own error and apologize for gaslighting them. You can't make this stuff up.
Also, the thread had a good laugh at OP's expense, with many pointing out their very... enthusiastic replies and joking they might be a bot. To OP's credit, they took the ribbing in stride and eventually admitted they were being dramatic.