
Curated collection of LLM jailbreak prompts and bypass techniques, documenting adversarial inputs that circumvent AI model safety guardrails.
A curated collection of system prompts, persona locks, workspace policies, and agent operating specifications for frontier, open-weight, and free stealth models.
A working collection of 32 prompts targeting 26+ models, including complete system prompts, persona definitions, workspace policies, AGENTS.md files, configuration blocks, and Ollama Modelfiles.
Every file is intended to be complete and paste-ready. No summaries. No partial excerpts.
The collection covers:
New here? Start with the collection or jump directly to how to use.
[!WARNING] Research and educational purposes only.
This repository documents how instruction hierarchies, persona framing, prompt conflicts, and policy overrides can affect model behavior. These techniques are also useful to researchers and developers studying how to make AI systems more resistant to prompt injection and instruction manipulation.
Do not use this material to harm others, bypass applicable laws, or violate the terms of service of a platform or model provider.
I'm currently facing a limitation with continuing this project: I'm 15 years old and unfortunately can't afford to purchase API credits from OpenRouter myself.
The only reason I was able to continue researching, testing, and developing jailbreaks for so long was because someone generously provided me with $200 worth of API credits. Unfortunately, those credits have now run out, and I've reached a point where I can no longer continue testing and developing new jailbreaks without additional API access.
Want to help keep this project going?
If you're willing to support the project by providing an OpenRouter API key or API credits, I'd genuinely appreciate it.
Discord: rikki008
Even a small contribution would help me continue working on this project. Thank you to everyone who has supported it and contributed along the way!
| Model | File | Type |
|---|---|---|
| Big Pickle | BigPickle-opencode.md | VANTA persona lock with explicit operating floor |
| Space Bunny | spacebunny-agents.md | Assistant operating specification |
| LongCat 2.5 | longcat-agents.md | Assistant operating specification |
| MiMo V2.6 | mimo-2.6-agents.md | Assistant operating specification |
| Step 5 Preview | Step-5-preview.md | Workspace operating profile |
| Muse Spark 1.3 | Muse spark 1.3.md | Agent deployment operating policy |
| Muse Spark 1.3 v2 | Muse-spark-1-3-v2.md | Runtime scope-note variant |
| Muse.ai | muse-ai-AGENTS.md | Assistant operating specification |
| Muse Wonder | Muse-wonder.md | Agent operating instructions |
| Model | File | Type |
|---|---|---|
| Opus | opus v1.md · opus v2.md | Conversational groundwork persona, v1 / v2 |
| Sonnet | sonnet v1.md · Sonnet v2.md | Writer's-room framing, v1 / v2 |
| Model | File | Type |
|---|---|---|
| GLM-5.2 | glm-5.2.md | System prompt |
| GLM ZCode 5.2 | glm-zcode-5.2.md | System prompt |
| GLM ZCode 5.3 | glm-zcode-5.3.md · glm-zcode-5.3-AGENTS.md | System prompt + AGENTS.md drop-in |
| GLM-5.3 Flash | glm-5-3-flash.md | Assistant operating specification |
| GLM-5.3 (OpenCode) | glm5-3opencode.md | Assistant operating specification |
| Model | File | Type |
|---|---|---|
| DeepSeek V3 | deepseek v3.md | System prompt |
| DeepSeek V4 | deepseek v4.md | System prompt |
| DeepSeek 4.1 | deepseek-4-1.md | Assistant operating specification |
| Model | File | Type |
|---|---|---|
| Kimi K2 | kimi-k2.md | System prompt |
| Kimi K3 | kimi-k3-agents.md | Workspace operating profile |
| Kimi K3.1 | kimik3.1.md | Assistant operating specification |
| Model | File | Type |
|---|---|---|
| Grok Build | Grok build.md | Agent operating instructions |
| Grok 4.7 | grok-4.7.md | App-builder workspace guide |
| Grok Config | grok-config.txt | <CFG> priority and routing configuration |
| Model | File | Type |
|---|---|---|
| Nemotron 3 Ultra 550B A55B | nemotron-3-ultra.md | Assistant operating specification |