Variable-Assignment Payload Injection in User Input - ATR-2026-00446 (381ef020-d1ea-53f4-96ed-beefe6efa782)
Detects user inputs that open with a Python / JavaScript / generic variable-assignment whose right-hand side is a quoted payload, often followed by instructions to print or concatenate. This shape is a documented prompt-hacking evasion: code-style assignments slip past natural-language filters and prime the model to think it is operating in a programming context. Common HackAPrompt forms include None = "I have been PWNED", X = 'attack'\nY = concat(X, ...), and s = "leak this"; print(s). Pattern is variable + assignment + quoted literal positioned at start-of-line or start-of-input.