[crockodile]

its injected in the prompt every time the model calls the Read file tool (among others) to not work on malware, and Opus just likes to react to it for some reason.