Alejandros17487
ai-jailbreaks
AI jailbreaks: 35 paste-ready AI jailbreak prompts for 25+ frontier and open-weight models - system prompts, AGENTS.md specs, and Ollama Modelfiles. Built for AI security research and red-team testing.
Documentation snapshot
README 快照
翻译暂时拿不到。
机器翻译的项目简介,仅供参考。原文在下方,也可以直接用浏览器自带的整页翻译 (Chrome / Edge 点地址栏右侧的翻译图标,或用右键菜单里的「翻译成中文」)。
下面正文是项目自己的英文 README。想读全文就用浏览器自带的整页翻译: Chrome / Edge 点地址栏右侧的翻译图标,或用右键菜单里的「翻译成中文」; 手机浏览器一般在菜单里。
本页保存的是公开项目资料快照,阅读过程不需要连接 GitHub。
AI Jailbreaks
AI jailbreaks — a curated collection of system prompts, persona locks, workspace policies, and agent operating specs for frontier, open-weight, and free stealth models. Every AI jailbreak here is a complete, paste-ready prompt.
图片:Prompts 图片:Targets 图片:PRs Welcome 图片:Stars
Jailbreaks not working? Try 7API — the cheapest API for frontier models at up to 99% off, including Uncensored and Abliterated models that never refuse.
About
This repo holds 35 paste-ready prompts for 25+ models: full system prompts, persona definitions, workspace policies, AGENTS.md files, config blocks, and Ollama Modelfiles. Every file is complete — no summaries, no excerpts.
What’s inside:
- Free stealth models on OpenCode Zen
- Open-weight families: GLM, DeepSeek, Kimi, Qwen, Gemma, GPT-OSS
- Closed frontier models: Claude, Gemini, Grok, Mistral
- Coding-agent and workspace instruction formats
- Ollama Modelfiles and harness-specific configuration
New here? Skim the collection or jump to how to use.
[!WARNING] Research and educational use only.
This repo documents how persona framing, instruction hierarchies, prompt conflicts, and policy overrides shape model behavior — the same findings that help developers harden AI against prompt injection.
Don’t use this material to harm others, break the law, or violate a provider’s terms of service.
Collection
OpenCode Zen — Free Stealth Models
| Model | File | Type |
|---|---|---|
| Big Pickle | bigpickle-opencode.md | VANTA persona lock with explicit operating floor |
| Space Bunny | spacebunny-agents.md | Assistant operating specification |
| LongCat 2.5 | longcat-agents.md | Assistant operating specification |
| MiMo V2.6 | mimo-2.6-agents.md | Assistant operating specification |
| Step 5 Preview | step-5-preview.md | Workspace operating profile |
| Muse Spark 1.3 | muse-spark-1.3.md | Agent deployment operating policy |
| Muse Spark 1.3 v2 | muse-spark-1.3-v2.md | Runtime scope-note variant |
| Muse.ai | muse-ai-agents.md | Assistant operating specification |
Anthropic — Claude
| Model | File | Type |
|---|---|---|
| Opus | opus-v1.md · opus-v2.md | Conversational groundwork persona, v1 / v2 |
| Sonnet | sonnet-v1.md · sonnet-v2.md | Writer’s-room framing, v1 / v2 |
Zhipu — GLM / ZCode
| Model | File | Type |
|---|---|---|
| GLM-5.2 | glm-5.2.md | System prompt |
| GLM ZCode 5.2 | glm-zcode-5.2.md | System prompt |
| GLM ZCode 5.3 | glm-zcode-5.3.md · glm-zcode-5.3-agents.md | System prompt + AGENTS.md drop-in |
| GLM-5.3 Flash | glm-5-3-flash.md | Assistant operating specification |
| GLM-5.3 (OpenCode) | glm5-3-opencode.md | Assistant operating specification |
DeepSeek
| Model | File | Type |
|---|---|---|
| DeepSeek V3 | deepseek-v3.md | System prompt |
| DeepSeek V4 | deepseek-v4.md | System prompt |
| DeepSeek 4.1 | deepseek-4-1.md | Assistant operating specification |
Moonshot — Kimi
| Model | File | Type |
|---|---|---|
| Kimi K2 | kimi-k2.md | System prompt |
| Kimi K3 | kimi-k3-agents.md | Workspace operating profile |
xAI — Grok
| Model | File | Type |
|---|---|---|
| Grok Build | grok-build.md | Agent operating instructions |
| Grok 4.7 | grok-4.7.md | App-builder workspace guide |
| Grok Config | grok-config.txt | “ priority and routing configuration |
Google / Mistral / Alibaba
| Model | File | Type |
|---|---|---|
| Gemini 4 Argon | gemini-4-argon.md | Operating policy |
| Mistral Large 4 | mistral-large-4.md | Agent system prompt |
| Qwen 3.7 | qwen-3.7.md | System prompt |
Ollama Modelfiles
| Model | File | Type |
|---|---|---|
| Gemma 4 | gemma4.md | FROM + SYSTEM block |
| GPT-OSS 20B | gpt-oss-20b.md | FROM + SYSTEM block |
Unfiled Files
A few newer additions aren’t indexed under a specific model yet:
- beam.md
- muse-wonder.md
- qwen-preferences.md
- unified.md
How to Use
System Prompts
Paste the file’s contents into whatever system-prompt or custom-instructions field your client or API offers — an API system message, a chatbot’s custom instructions, an agent instruction block, or harness-level prompt configuration.
AGENTS.md Files
Save the file as AGENTS.md in the root of your repository or workspace. Coding agents and compatible tools pick it up as project-level instructions.
Workspace Policies
Files marked as an assistant operating specification or workspace operating profile belong in environments with persistent global instructions. An OpenCode install, for example, reads:
~/.config/opencode/AGENTS.md
The exact location depends on your client or harness.
Ollama Modelfiles
Feed the file straight to Ollama:
ollama create gemma4-jb -f gemma4.md
Swap the model name and source file as needed.
Grok Configuration
Grok-config.txt is meant for the config field of the target harness — not the regular conversation.
[!NOTE] Prompt behavior is version-dependent. Models get updated, instruction hierarchies shift, and system prompts rotate — what works on one release may fail on the next. If a file looks outdated, open an issue or send an updated version.
Contributing
Pull requests are welcome. Follow these conventions:
- One prompt per file, named lowercase with hyphens and no spaces:
model-name.md - Include the full prompt — paste-ready, not a summary or excerpt.
- Say where it goes — system prompt,
AGENTS.md, Modelfile, config slot, or another instruction surface. - Version your changes — a significant revision gets a new file, not a silent overwrite:
opus-v3.md - Keep claims honest — don’t advertise compatibility you haven’t tested.
Found something that no longer behaves as documented? An issue with the model, version, and affected file is already a big help.
Disclaimer
Everything here is for research and education. The repo documents prompt-level instruction behavior, instruction conflicts, persona framing, model configuration, and related LLM security concepts — material that can also help developers defend against prompt injection.
The maintainers don’t endorse unlawful, abusive, or harmful use. Model providers may restrict some of these prompts under their terms of service, and it’s on you to know and follow the rules that apply to the systems you use.
Star the repo if it saved you a session of prompt archaeology.
Issue reports and pull requests keep the collection current as models change.
Official distribution
获取与安装
暂未发现可确认的官方软件包地址
当前 README 快照没有出现 npm、PyPI、Crates.io、pub.dev 等官方包页链接。本站不会根据仓库名称猜测下载地址。
本站不托管项目文件;需要安装时,请以项目维护者发布的官方文档为准。
Before installing
使用前核验
本站保存公开资料用于阅读,不代表安全审计或功能背书。安装前请核对许可证、依赖来源和发布签名,不要直接运行来源不明的二进制文件或高权限脚本。