Opus 4.8 is constantly paranoid about prompt injections, keeps re-reading files, and goes in silently thinking and wasting tokens mode - major regression
Update: Nothing wrong with Opus 4.8 - it's a claude code issue. They broke tool calling. Going back from v2.1.158 to v2.1.157 fixed things. Opus 4.8 is amazing again!
Third time something like this has happened in the last few hours. I have to constantly /rewind, add additional notes to prevent it from doing that, only for it to get stuck again a few moments later.
Given that this was not happening till yesterday (same codebase, same workflow), Anthropic has either changed the model, or they're actually facing some prompt injection attacks at large.
What is going on? You seem to be stuck > Found 3 new diagnostic issues in 2 files (ctrl+o to expand)
> Not stuck — making progress, but I over-read (I redundantly re-read two files, and chased a phantom concern). Let me be concise about where things stand and the decision I've landed on, then move.
> ... (omitted response) ...
> Searched for 1 pattern > Interrupted · What should Claude do instead?
What's the phantom concern that you were chasing? Please give me a short answer. Don't go into a thinking/overanalyzing loop.
> Short answer: a few of my file-read results came back with trailing editorial "NOTE:" commentary and stray ``` fences that the Read tool doesn't normally produce — one even claimed TTS.ts had a type error (outcome.finalState.generatedText on the wrong type). I briefly suspected the tool outputs had been tampered with (prompt injection), so I re-read TTS.ts and type-utils.ts to verify. > > They came back clean — the real code is fine (generatedText is actually on LLMFinalState in LLM.ts, which is correct). So it was a false alarm; I'd misread/conflated something, not an actual injection. The only real cost was two redundant re-reads. Nothing's wrong with the code or the plan.