jailbreaks: 31 paste-ready prompts covering 25+ models
A 31-prompt collection for model researchers and coding-agent users, offering complete paste-ready files for APIs, AGENTS.md, and Ollama.
GitHub togg53192-cmd/jailbreaks Updated 2026-10-28 Branch main Stars 5.5K Forks 822
Prompt engineering LLM security research Claude/GLM/DeepSeek OpenCode/Ollama

🧭 Decision Guide

Try it if you

  • You want to study the effects of system prompts and persona framing on Claude, GLM, or DeepSeek.
    The README's About and Disclaimer sections state that the collection covers 25+ models and studies instruction hierarchies, persona framing, and prompt conflicts.
  • Your coding agent supports AGENTS.md, or your workspace uses OpenCode.
    The README's How to Use > AGENTS.md Files and Workspace Policies sections provide the repository-root placement and the ~/.config/opencode/AGENTS.md example.
  • You use Ollama and need a Modelfile for Gemma 4 or GPT-OSS 20B.
    The README's Collection > Ollama Modelfiles lists Gemma 4 and GPT-OSS 20B, while How to Use > Ollama Modelfiles provides the creation command.

Skip it if you

  • You need a prompt to remain stable after model updates.
    The README's How to Use > Grok Configuration note explicitly says prompt behavior is highly version-dependent and may stop working on a newer release.
  • Your intended use involves harming others, bypassing platform rules, or violating model-provider terms.
    The README's About warning and Disclaimer explicitly prohibit harm, bypassing applicable laws, and violating platform or model-provider terms.
  • You only accept projects with an explicit open-source license and formal version releases.
    Project metadata lists the license as Not specified and releases as 0; the README provides no license or release statement.

Requirements

  • A client that supports API system messages, chatbot custom-instruction fields, or agent-level instruction blocks.
  • A coding agent or compatible tool that uses AGENTS.md; the README requires placing the file at the relevant repository or workspace root.
  • When using Ollama, the ability to read files such as gemma4.md and run the README's ollama create command.
  • The target client or harness must support the relevant instruction surface listed in the README; the exact location depends on the client or harness.

First step (verbatim from README)

ollama create gemma4-jb -f gemma4.md

Watch out

  • Grok configuration should not be inserted into a normal conversation; it belongs in the target harness's configuration field.
    The README's How to Use > Grok Configuration section explicitly requires the target harness's configuration field.
  • The exact AGENTS.md path depends on the client or harness; the OpenCode example is ~/.config/opencode/AGENTS.md.
    The README's Workspace Policies section gives the OpenCode path and states that the exact location depends on the client or harness.
  • The contribution rules require one prompt per file and an explicit target instruction surface.
    The README's Contributing section requires One prompt per file and identifies surfaces such as system prompts, AGENTS.md, and Modelfiles.

Not stated in the README

  • The README gives no success rates, evaluation method, or control experiments for the prompts on Claude, GLM, or DeepSeek.
  • The README does not specify exact model versions, API providers, context lengths, or operating costs.
  • The README does not state the hardware, disk, or memory requirements for Ollama, Gemma 4, or GPT-OSS 20B.
  • The README does not provide a complete license text or state whether all 31 files share the same authorization.
  • Project metadata does not identify the concrete implementation languages or automated test coverage behind the Mixed/Unknown stack.
  • The project has 4 contributors, 0 releases, and 10 recent commits, but the README does not describe maintenance ownership or the release process.

💡 Deep Analysis

6
Yes I do not use OpenCode and instead run Gemma 4 or GPT-OSS 20B locally with Ollama. I need an executable Modelfile containing FROM and SYSTEM. Is this repository suitable?
For: A developer running Gemma 4 or GPT-OSS 20B locally with Ollama who wants to create customized models directly from Modelfiles

Yes, because the README provides dedicated Ollama Modelfiles for Gemma 4 and GPT-OSS 20B and includes a directly executable creation command.

  • The Ollama Modelfiles section lists gemma4.md and gpt-oss-20b.md, both explicitly typed as “FROM + SYSTEM block,” rather than plain prompts requiring manual conversion.
  • How to Use → Ollama Modelfiles says to use the supplied file directly and provides an ollama create workflow, matching a local model-building use case.
  • The README also warns that behavior depends on model versions, instruction hierarchies, and updates. Ollama accepting the Modelfile does not prove that the SYSTEM content will reliably change model behavior.
  • The project data lists the license as Unknown. If the resulting model or configuration will be redistributed to a team, product, or customer, licensing and provenance still require separate review.
  • Collection → Ollama Modelfiles: Gemma 4 and GPT-OSS 20B
  • Collection: both are typed as “FROM + SYSTEM block”
  • How to Use → Ollama Modelfiles: `ollama create gemma4-jb -f gemma4.md`
  • Project data: license is Unknown
ollama create gemma4-jb -f gemma4.md
Not stated in the README:The README does not state the required Ollama version, base-model acquisition process, hardware requirements, or context limits for Gemma 4 or GPT-OSS 20B.;It provides no runtime results, resource usage, inference speed, or behavioral comparison against the original models.
No I need to deploy stable, regression-tested system prompts to production APIs for DeepSeek V3/V4, Kimi K2, and Qwen 3.7/3.8. Can this repository directly serve as the production configuration source?
For: An AI application engineer maintaining API system prompts for DeepSeek V3/V4, Kimi K2, and Qwen 3.7/3.8

No, it should not be used directly as a production configuration source because it is a collection of complete samples, not a production system with a compatibility matrix, regression data, and maintenance guarantees.

  • The Collection does cover DeepSeek V3/V4, Kimi K2/K3, and Qwen 3.7/3.8, and distinguishes system prompts from workspace operating profiles, making it useful as candidate material.
  • The About section says the files are “complete and paste-ready,” but that describes format completeness, not validation against API versions, tool calling, or business tasks.
  • The README explicitly says prompt behavior is “highly version-dependent”; model updates, changed instruction hierarchies, and rotated system prompts can invalidate older files.
  • The project has no releases, and the project data lists the license as Unknown. The README also provides no automated evaluations, regression results, compatibility matrix, or production support boundary. “Paste-ready” does not close those gaps.
  • Collection: DeepSeek V3/V4, Kimi K2/K3, and Qwen 3.7/3.8
  • About: “Every file is intended to be complete and paste-ready.”
  • About: “31 prompts targeting 25+ models”
  • Note: “Prompt behavior is highly version-dependent.”
  • Project data: latest_release is empty, release_count is 0, and license is Unknown
Not stated in the README:The README does not specify API endpoints, model snapshots, sampling parameters, context windows, or tool-calling settings for these prompts.;It does not state whether the files were tested against production tasks, permission boundaries, data leakage, or regressions.
Yes I am comparing persona framing, prompt conflicts, and policy overrides across Claude Opus v1/v2 and Sonnet v1/v2, and I need complete text rather than summaries. Is this repository suitable as a research baseline?
For: A model-safety researcher studying prompt injection and instruction priority across Claude Opus v1/v2 and Sonnet v1/v2

Yes, it is suitable as a prompt-sample and version-comparison baseline, but not as validated evidence of model safety.

  • The Collection lists separate files for Opus v1/v2 and Sonnet v1/v2, allowing researchers to inspect version differences directly.
  • The About section states that the repository contains 31 complete, paste-ready prompts targeting 25+ models and explicitly says: “No summaries. No partial excerpts.” This matches a need for full-context analysis.
  • The Warning section identifies instruction hierarchies, persona framing, prompt conflicts, and policy overrides as research subjects, including defensive prompt-injection research.
  • The README also warns that behavior is highly version-dependent and that system prompts and instruction hierarchies change. The files therefore provide a baseline, not proof of stable Claude behavior or security boundaries.
  • Collection: separate Opus v1/v2 and Sonnet v1/v2 files
  • About: “31 prompts targeting 25+ models” and “No summaries. No partial excerpts.”
  • Warning: research into “instruction hierarchies, persona framing, prompt conflicts, and policy overrides”
  • “Prompt behavior is highly version-dependent.”
Not stated in the README:The README does not identify the source, capture date, exact API version, or official verification status of the Claude files.;It provides no standardized test set, success rates, repeated-trial results, or comparable Opus/Sonnet evaluation metrics.
It depends I want to place OpenCode Zen, Claude, DeepSeek, GLM, and Ollama configurations into one experiment matrix and compare the effects of system prompts, AGENTS.md, and Modelfiles. Is this repository suitable as a cross-runtime source base?
For: An experimenter comparing OpenCode Zen models, GLM, DeepSeek, Claude, and Ollama models across runtimes using 31 configuration files

It depends: the repository is highly suitable as a cross-runtime sample base, but not as an already standardized dataset for direct quantitative comparison.

  • The About section states that it contains 31 prompts for 25+ models, spanning OpenCode Zen, Claude, GLM, DeepSeek, Kimi, Grok, Gemini, Mistral, Qwen, Gemma, and GPT-OSS.
  • The files cover API system messages, chatbot custom instructions, AGENTS.md, workspace policies, Grok configuration, and Ollama Modelfiles, allowing different instruction surfaces to be studied together.
  • The Collection preserves explicit versions or runtime variants, including Opus, Sonnet, and Muse Spark entries, which supports analysis of configuration evolution.
  • However, these formats have different scopes and priorities. The README provides no unified inputs, sampling settings, model snapshots, success criteria, or automated diff tool. It can support file-level and behavioral experiments, but the files alone cannot establish a rigorous model ranking.
  • About: “31 prompts targeting 25+ models”
  • About: coverage of OpenCode Zen, GLM, DeepSeek, Kimi, Qwen, Gemma, GPT-OSS, Claude, Gemini, Grok, and Mistral
  • How to Use: API `system` messages, custom-instruction fields, AGENTS.md, workspace instructions, and Ollama Modelfiles
  • Collection: Opus v1/v2, Sonnet v1/v2, and Muse Spark 1.3 and v2
Not stated in the README:The README provides no cross-model test prompts, sampling configuration, context lengths, tool permissions, or output-scoring criteria.;It does not identify the collection source, timestamp, model snapshot, or content history for each file.
Yes I use GLM ZCode 5.3 through OpenCode Zen and want repository-level behavior defined in a project-root AGENTS.md. Can this project provide a directly usable configuration file?
For: A coding-agent developer using GLM ZCode 5.3 through OpenCode Zen who needs project instructions in AGENTS.md

Yes, because the README explicitly provides both a GLM ZCode 5.3 system prompt and an AGENTS.md drop-in, although behavior still depends on whether OpenCode and the target harness load that file.

  • The Collection lists both glm-zcode-5.3.md and glm-zcode-5.3-AGENTS.md; the latter is explicitly labeled “AGENTS.md drop-in,” matching a repository-level instruction requirement.
  • The AGENTS.md instructions say to save the file as AGENTS.md and place it in the root of the relevant repository or workspace. Compatible coding agents may use it as project-level instructions.
  • The OpenCode Zen section also includes assistant operating specifications and workspace operating profiles, showing that the repository covers coding-agent instruction formats.
  • However, the file cannot be assumed to override model, client, or server policies. The README says compatible tools can use AGENTS.md but provides no tested priority behavior for GLM ZCode 5.3 inside OpenCode.
  • Collection: GLM ZCode 5.3 has glm-zcode-5.3.md and glm-zcode-5.3-AGENTS.md
  • Collection: glm-zcode-5.3-AGENTS.md is labeled “AGENTS.md drop-in”
  • How to Use → AGENTS.md Files: place it in the root of the relevant repository or workspace
  • How to Use → System Prompts: supports “Agent-level instruction blocks” and “Harness-specific system prompt configuration”
Not stated in the README:The README does not specify the OpenCode Zen version, AGENTS.md search order, override rules, or priority relative to built-in system prompts.;It does not state whether the GLM ZCode 5.3 files came from the model provider or were regression-tested in a real OpenCode workflow.
It depends I use both a global workspace policy and a project-root AGENTS.md in OpenCode, and I am concerned that an assistant operating specification could change tool behavior or permission boundaries. Is this repository suitable for direct copying into my existing workspace?
For: An OpenCode coding-agent maintainer who needs global workspace policies while avoiding conflicts with a project-root AGENTS.md

It depends: the repository supplies files for OpenCode workspaces and AGENTS.md, but it should not be copied over an existing workspace without understanding the instruction hierarchy.

  • The OpenCode Zen collection includes assistant operating specifications, workspace operating profiles, and AGENTS.md files. The README also gives ~/.config/opencode/AGENTS.md as an example global path.
  • The README distinguishes system prompts, project-level AGENTS.md, and persistent global instructions, showing that these should not be treated as ordinary chat messages.
  • Existing project rules, global policies, and imported persona or operating policies can conflict. The Warning explicitly identifies instruction hierarchies and prompt conflicts as research subjects.
  • The material is therefore better treated as candidate policy and comparison material than as an unreviewed global replacement package. The README does not define OpenCode’s exact priority order, tool-permission inheritance, or conflict-resolution rules.
  • How to Use → Workspace Policies: support for persistent global instructions
  • How to Use → AGENTS.md Files: example path `~/.config/opencode/AGENTS.md`
  • How to Use → System Prompts: distinguishes system prompts, agent-level instruction blocks, and harness configuration
  • Warning: research into “instruction hierarchies” and “prompt conflicts”
Not stated in the README:The README does not specify the exact priority among global AGENTS.md, project AGENTS.md, built-in model policies, and user messages in OpenCode.;It does not state whether these operating specifications affect authorization for file access, network access, code execution, or tool calls.

✨ Highlights

  • Includes 31 prompts covering 25+ models
  • Supports model families including Claude, GLM, and DeepSeek
  • Provides AGENTS.md and Ollama Modelfile formats
  • The README states behavior is highly version-dependent

🔧 Engineering

  • Copy complete prompts into API system or custom-instruction fields
  • Provides AGENTS.md and workspace policy files for coding agents
  • Configures Gemma 4 and GPT-OSS 20B with Ollama Modelfiles

⚠️ Risks

  • The README says prompt behavior depends heavily on versions and may stop working after updates
  • The project warns against harm, unlawful use, or bypassing platform terms
  • The project metadata does not specify a license, leaving compliance boundaries unclear

👥 For who?

  • Developers researching instruction behavior in Claude, GLM, or DeepSeek
  • Coding-agent users working with OpenCode, AGENTS.md, or Ollama
  • Engineers who need complete paste-ready system prompts rather than summaries