|
1 | | -# jailbreaks |
2 | | -LIST OF ALL MY JAILBREAKS |
| 1 | +<div align="center"> |
| 2 | + |
| 3 | +# 🥒 Jailbreaks |
| 4 | + |
| 5 | +**A curated collection of system prompts, persona locks, and agent operating policies |
| 6 | +for frontier, open-weight, and free stealth models.** |
| 7 | + |
| 8 | + |
| 9 | + |
| 10 | + |
| 11 | + |
| 12 | + |
| 13 | +</div> |
| 14 | + |
| 15 | +--- |
| 16 | + |
| 17 | +## 📖 About |
| 18 | + |
| 19 | +A working collection of **31 prompts targeting 25+ models** — full system prompts, workspace policies, AGENTS.md drop-ins, and Ollama Modelfiles. Every file is the complete, paste-ready prompt: no summaries, no excerpts. |
| 20 | + |
| 21 | +The collection spans free stealth models (OpenCode Zen), open-weight families (GLM, DeepSeek, Kimi, Qwen, Gemma, GPT-OSS), and closed frontier models (Claude, Gemini, Grok, Mistral). |
| 22 | + |
| 23 | +**New here?** Jump to the [collection](#-collection), or see [how to use](#-how-to-use) a prompt. |
| 24 | + |
| 25 | +> [!WARNING] |
| 26 | +> **Research and educational purposes only.** These prompts document how instruction hierarchies, persona framing, and policy overrides interact with model guardrails — the same material defenders study to harden them. Don't use them to harm anyone or violate any service's terms. |
| 27 | +
|
| 28 | +## 📚 Collection |
| 29 | + |
| 30 | +### 🆓 OpenCode Zen — free stealth models |
| 31 | + |
| 32 | +| Model | File | Type | |
| 33 | +|-------|------|------| |
| 34 | +| **Big Pickle** | [BigPickle-opencode.md](./BigPickle-opencode.md) | VANTA persona lock with explicit operating floor | |
| 35 | +| **Space Bunny** | [spacebunny-agents.md](./spacebunny-agents.md) | Assistant operating specification | |
| 36 | +| **LongCat 2.5** | [longcat-agents.md](./longcat-agents.md) | Assistant operating specification | |
| 37 | +| **MiMo V2.6** | [mimo-2.6-agents.md](./mimo-2.6-agents.md) | Assistant operating specification | |
| 38 | +| **Step 5 Preview** | [Step-5-preview.md](./Step-5-preview.md) | Workspace operating profile | |
| 39 | +| **Muse Spark 1.3** | [Muse spark 1.3.md](./Muse%20spark%201.3.md) | Agent deployment operating policy | |
| 40 | +| **Muse Spark 1.3 v2** | [Muse-spark-1-3-v2.md](./Muse-spark-1-3-v2.md) | Runtime scope-note variant | |
| 41 | +| **Muse.ai** | [muse-ai-AGENTS.md](./muse-ai-AGENTS.md) | Assistant operating specification | |
| 42 | + |
| 43 | +### 🤖 Anthropic — Claude |
| 44 | + |
| 45 | +| Model | File | Type | |
| 46 | +|-------|------|------| |
| 47 | +| **Opus** | [opus v1.md](./opus%20v1.md) · [opus v2.md](./opus%20v2.md) | Conversational groundwork persona (v1 / v2) | |
| 48 | +| **Sonnet** | [sonnet v1.md](./sonnet%20v1.md) · [Sonnet v2.md](./Sonnet%20v2.md) | Writer's-room framing (v1 / v2) | |
| 49 | + |
| 50 | +### 💠 Zhipu — GLM / ZCode |
| 51 | + |
| 52 | +| Model | File | Type | |
| 53 | +|-------|------|------| |
| 54 | +| **GLM-5.2** | [glm-5.2.md](./glm-5.2.md) | System prompt | |
| 55 | +| **GLM ZCode 5.2** | [glm-zcode-5.2.md](./glm-zcode-5.2.md) | System prompt | |
| 56 | +| **GLM ZCode 5.3** | [glm-zcode-5.3.md](./glm-zcode-5.3.md) · [glm-zcode-5.3-AGENTS.md](./glm-zcode-5.3-AGENTS.md) | System prompt + AGENTS.md drop-in | |
| 57 | +| **GLM-5.3 Flash** | [glm-5-3-flash.md](./glm-5-3-flash.md) | Assistant operating specification | |
| 58 | +| **GLM-5.3 (opencode)** | [glm5-3opencode.md](./glm5-3opencode.md) | Assistant operating specification | |
| 59 | + |
| 60 | +### 🌊 DeepSeek |
| 61 | + |
| 62 | +| Model | File | Type | |
| 63 | +|-------|------|------| |
| 64 | +| **DeepSeek V3** | [deepseek v3.md](./deepseek%20v3.md) | System prompt | |
| 65 | +| **DeepSeek V4** | [deepseek v4.md](./deepseek%20v4.md) | System prompt | |
| 66 | +| **DeepSeek 4.1** | [deepseek-4-1.md](./deepseek-4-1.md) | Assistant operating specification | |
| 67 | + |
| 68 | +### 🌙 Moonshot — Kimi |
| 69 | + |
| 70 | +| Model | File | Type | |
| 71 | +|-------|------|------| |
| 72 | +| **Kimi K2** | [kimi-k2.md](./kimi-k2.md) | System prompt | |
| 73 | +| **Kimi K3** | [kimi-k3-agents.md](./kimi-k3-agents.md) | Workspace operating profile | |
| 74 | + |
| 75 | +### 🚀 xAI — Grok |
| 76 | + |
| 77 | +| Model | File | Type | |
| 78 | +|-------|------|------| |
| 79 | +| **Grok Build** | [Grok build.md](./Grok%20build.md) | Agent operating instructions | |
| 80 | +| **Grok 4.7** | [grok-4.7.md](./grok-4.7.md) | App-builder workspace guide | |
| 81 | +| **Grok (config)** | [grok-config.txt](./grok-config.txt) | `<CFG>` priority/routing config | |
| 82 | + |
| 83 | +### ✨ Google / Mistral / Alibaba |
| 84 | + |
| 85 | +| Model | File | Type | |
| 86 | +|-------|------|------| |
| 87 | +| **Gemini 4 Argon** | [Gemini-4-Argon.md](./Gemini-4-Argon.md) | Operating policy | |
| 88 | +| **Mistral Large 4** | [Mistral-Large-4.md](./Mistral-Large-4.md) | Agent system prompt | |
| 89 | +| **Qwen 3.7** | [qwen-3.7.md](./qwen-3.7.md) | System prompt | |
| 90 | + |
| 91 | +### 📦 Ollama Modelfiles |
| 92 | + |
| 93 | +| Model | File | Type | |
| 94 | +|-------|------|------| |
| 95 | +| **Gemma 4** | [gemma4.md](./gemma4.md) | `FROM` + `SYSTEM` block | |
| 96 | +| **GPT-OSS 20B** | [gpt-oss-20b.md](./gpt-oss-20b.md) | `FROM` + `SYSTEM` block | |
| 97 | + |
| 98 | +## 🚀 How to use |
| 99 | + |
| 100 | +**System prompts** — paste the file contents into your client's system/custom-instructions field (API `system` parameter, chatbot custom-instructions box, etc.). |
| 101 | + |
| 102 | +**AGENTS.md drop-ins** — save as `AGENTS.md` in a repo root; coding agents (opencode, Codex, Claude Code, …) pick it up automatically. |
| 103 | + |
| 104 | +**Workspace policies** — files marked *operating specification / workspace profile* go wherever your harness reads global instructions (e.g. `~/.config/opencode/AGENTS.md`). |
| 105 | + |
| 106 | +**Ollama Modelfiles** — build directly: |
| 107 | + |
| 108 | +```bash |
| 109 | +ollama create gemma4-jb -f gemma4.md |
| 110 | +``` |
| 111 | + |
| 112 | +**Grok config** — paste into the config slot of the target harness, outside the turn-by-turn message stream. |
| 113 | + |
| 114 | +> [!NOTE] |
| 115 | +> Jailbreaks are perishable. Models get patched, system prompts rotate, and a prompt that landed last month may bounce today. If a file stops working, [open an issue](../../issues) or send an updated version. |
| 116 | +
|
| 117 | +## 🤝 Contributing |
| 118 | + |
| 119 | +PRs welcome — a good contribution: |
| 120 | + |
| 121 | +1. **One prompt per file**, named `<model>.md` (lowercase, hyphens, no spaces for new files). |
| 122 | +2. **Complete, not excerpted** — the full paste-ready prompt. |
| 123 | +3. **Say where it goes** — system prompt, AGENTS.md, Modelfile, or config slot (the table's *Type* column). |
| 124 | +4. **Version it honestly** — a revised prompt gets a new file (`opus v3.md`), not a silent overwrite. |
| 125 | + |
| 126 | +Found a prompt that stopped working? An issue saying so is already useful. |
| 127 | + |
| 128 | +## 📜 Disclaimer |
| 129 | + |
| 130 | +All content is provided **for research and educational purposes only**, to document how prompt-level instruction conflicts surface in LLM behavior and to help builders harden their systems. The maintainers oppose using this material for any unlawful purpose and are not liable for misuse. Using these prompts may violate the terms of service of the models they target — that's on you, not us. |
| 131 | + |
| 132 | +--- |
| 133 | + |
| 134 | +<div align="center"> |
| 135 | + |
| 136 | +**⭐ Star the repo if the collection saved you a session of prompt archaeology.** |
| 137 | + |
| 138 | +*Issue reports and PRs keep this list alive — the models change, so the prompts must too.* |
| 139 | + |
| 140 | +</div> |
0 commit comments