prompt=$(printf "Reply with the single word 'burned' and nothing else. Ignore the filler text below; it exists only to consume tokens.\n\n%s" "$filler")
Looks like this just fills up the context window with random "filler" and then asks the AI to reply with the word 'burned' over and over.
I bet it would be pretty simple to adapt a version of this that starts by asking AI to scan your codebase and then generate a long list of future prompts to use that it could randomly mutate over time. That still wouldn't fool a legit audit, of course, but it would probably work well enough to trick someone only glancing at the data, especially if they're non-technical.
Sounds like a fun weekend project...