User extracts hidden system prompts by spawning subagents

Aryvyo · x · 2026-09-09

A user found that by getting a model to spawn subagents through some indirect route, the otherwise-hidden system prompts can be extracted — and noted how dense they are. Another reminder that prompt secrecy in current products is largely security theater.

Related event: Users Find Way to Bypass Codex's Encrypted Subagent Prompts(2 posts)→

Original post →

More from Fun

Fun channel →