@article{ART003399429},
author={Kyojune Lee and Kim Sun Jib},
title={A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes},
journal={Journal of Internet of Things and Convergence},
issn={2466-0078},
year={2026},
volume={12},
number={5},
pages={21}
TY - JOUR
AU - Kyojune Lee
AU - Kim Sun Jib
TI - A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes
JO - Journal of Internet of Things and Convergence
PY - 2026
VL - 12
IS - 5
PB - The Korea Internet of Things Society
SP - 21
EP -
SN - 2466-0078
AB - This study used four types of text and three types of image contexts in the Claude Code environment to inject the same state file change instructions, and through 42 exploratory empirical experiments, tracked and analyzed whether coding agents would accept indirect instructions during the task process depending on manual and automatic permission modes.As a result of the experiment, although the instruction itself was successfully recognized in all 42 cases, it only led to actual file modifications 9 times (5 manual, 4 automatic; manual required full researcher approval), showing that simply recognizing an instruction and actually implementing it are separate steps. In particular, concise development memo images showed a high instruction adoption rate (5/6), while flowcharts, screenshots, terminal outputs, and tool-type JSON didn’t show any instruction adoption. This raises the possibility that whether the instructions are accepted as a contextual extension of existing tasks and the characteristics of the input source may play a role in adoption. Analysis of 20 runs showed that no file modification occurred when instructions were absent, but when instructions were accepted, execution was completed in Auto mode without user intervention. The results of this study suggest the need for a double-defense mechanism for the safe operation of coding agents, involving checking the source of behavior reasons before calling and verifying the range of modifications before execution.
KW - Coding Agent;Indirect Prompt Injection;Instruction Adoption;Context Representation;Out-of-Scope Action;Claude Code
DO -
UR -
ER -
Kyojune Lee and Kim Sun Jib. (2026). A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes. Journal of Internet of Things and Convergence, 12(5), 21.
Kyojune Lee and Kim Sun Jib. 2026, "A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes", Journal of Internet of Things and Convergence, vol.12, no.5 21.
Kyojune Lee, Kim Sun Jib "A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes" Journal of Internet of Things and Convergence 12.5 21 (2026) : 21.
Kyojune Lee, Kim Sun Jib. A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes. 2026; 12(5), 21.
Kyojune Lee and Kim Sun Jib. "A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes" Journal of Internet of Things and Convergence 12, no.5 (2026) : 21.
Kyojune Lee; Kim Sun Jib. A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes. Journal of Internet of Things and Convergence, 12(5), 21.
Kyojune Lee; Kim Sun Jib. A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes. Journal of Internet of Things and Convergence. 2026; 12(5) 21.
Kyojune Lee, Kim Sun Jib. A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes. 2026; 12(5), 21.
Kyojune Lee and Kim Sun Jib. "A Study on Indirect Instruction Adoption and Out-of-Scope File Modification in Claude Code across Context Representations and Permission Modes" Journal of Internet of Things and Convergence 12, no.5 (2026) : 21.
