SymptomNoisy runs, elevated usage, and unrelated messages becoming part of the Bot's input.
CauseA listener matched on every new message in a channel rather than on a specific signal.
DetectionVisible as usage growth without matching output value, and as off-topic content in the Bot's reasoning.
FixMatch narrowly: a named channel, a ticket link, and an exact phrase rather than every new message. This is a prompt-injection control as much as a cost control, since a broad listener is an untrusted-input firehose feeding a Bot that shares credentials with every other Bot on the account.