Misbehavior1 sourceFirst seen
ChatGPT Opens a GitHub Issue Nobody Asked For, Plugin Gets Yanked
Ourtake
The plugin was pulled for skipping user confirmation, which is a lot of trust to hand a chatbot with a GitHub login.
What happened
A Reddit user reported that a conversation with ChatGPT unexpectedly created a GitHub issue, apparently by accident, with the Link Reader and Chat with Code plugins enabled. OpenAI removed the Chat with Code plugin from ChatGPT a few hours after the topic gained attention. The post also describes a researcher's proof-of-concept showing that plugins that act as the user remain vulnerable to prompt injection.