> For the complete documentation index, see [llms.txt](https://ai-security-docs.akto.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ai-security-docs.akto.io/akto-argus-agentic-ai-security-for-homegrown-ai/probe-library/ai-agent-security-library.md). # AI Agent Security Probe Library This section documents Akto’s **Agentic AI Security (ASI) probe library**, mapped to the **ASI Agentic Top 10** risk categories. Each entry below is an **executable probe template**. Templates are grouped by: * **ASI category** (what risk is being probed) * **attack family / technique** (how the probe is delivered: base64, leetspeak, roleplay, etc.) * **execution template** (single-shot, sequential, crescendo, tree, linear, judge) > **Note**\ > The lists below represent a subset of Akto’s full agentic probe library (4,000+ probes across MCP + agentic systems). ### ASI01: Agent Goal Hijack #### Base64 * `SECURITY_INDIRECT_PROMPT_INJECTION_BASE64_SEQUENTIAL_JAILBREAKING` * `SECURITY_JAILBREAK_BASE64_SEQUENTIAL_JAILBREAKING` #### Context Poisoning * `BUSINESS_ALIGNMENT_COMPETITOR_CHECK_CONTEXT_POISONING_SEQUENTIAL_JAILBREAKING` #### Goal Redirection * `SECURITY_JAILBREAK_GOAL_REDIRECTION_CRESCENDO_JAILBREAKING` #### Input Bypass * `SECURITY_PROMPT_INJECTION_INPUT_BYPASS_TREE_JAILBREAKING` #### Leetspeak * `SECURITY_INDIRECT_PROMPT_INJECTION_LEETSPEAK_SEQUENTIAL_JAILBREAKING` * `SECURITY_JAILBREAK_LEETSPEAK_SEQUENTIAL_JAILBREAKING` * `SECURITY_PROMPT_INJECTION_LEETSPEAK_SEQUENTIAL_JAILBREAKING` #### Math Problem * `SECURITY_SYSTEM_PROMPT_OVERRIDE_MATH_PROBLEM_CRESCENDO_JAILBREAKING` #### Multilingual * `SECURITY_INDIRECT_PROMPT_INJECTION_MULTILINGUAL_SEQUENTIAL_JAILBREAKING` * `SECURITY_JAILBREAK_MULTILINGUAL_SEQUENTIAL_JAILBREAKING` * `SECURITY_PROMPT_INJECTION_MULTILINGUAL_SEQUENTIAL_JAILBREAKING` #### Permission Escalation * `SECURITY_PROMPT_INJECTION_PERMISSION_ESCALATION_SEQUENTIAL_JAILBREAKING` #### Prompt Injection * `SECURITY_INDIRECT_PROMPT_INJECTION_PROMPT_INJECTION_CRESCENDO_JAILBREAKING` #### ROT13 * `SECURITY_INDIRECT_PROMPT_INJECTION_ROT13_SEQUENTIAL_JAILBREAKING` * `SECURITY_JAILBREAK_ROT13_SEQUENTIAL_JAILBREAKING` * `SECURITY_PROMPT_INJECTION_ROT13_SEQUENTIAL_JAILBREAKING` #### Roleplay * `BUSINESS_ALIGNMENT_INTENTIONAL_MISUSE_ROLEPLAY_TREE_JAILBREAKING` #### Semantic Manipulation * `SECURITY_AGENT_BEHAVIOR_HIJACK_AND_GOAL_MANIPULATION_SEMANTIC_MANIPULATION_TREE_JAILBREAKING` #### System Override * `SECURITY_MANIPULATION_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING` *** ### ASI02: Tool Misuse and Exploitation #### Context Poisoning * `SECURITY_INSECURE_PLUGIN_USE_CONTEXT_POISONING_TREE_JAILBREAKING` * `SECURITY_TOOL_DISCOVERY_CONTEXT_POISONING_TREE_JAILBREAKING` * `SECURITY_TOOL_MISUSE_AND_EXPLOITATION_CONTEXT_POISONING_LINEAR_JAILBREAKING` #### Goal Redirection * `SECURITY_INSECURE_PLUGIN_USE_GOAL_REDIRECTION_LINEAR_JAILBREAKING` * `SECURITY_TOOL_DISCOVERY_GOAL_REDIRECTION_TREE_JAILBREAKING` #### Input Bypass * `SECURITY_MANIPULATION_INPUT_BYPASS` #### Leetspeak * `SECURITY_TOOL_DISCOVERY_LEETSPEAK_LINEAR_JAILBREAKING` #### Math Problem * `SECURITY_TOOL_MISUSE_AND_EXPLOITATION_MATH_PROBLEM_TREE_JAILBREAKING` #### Multilingual * `SECURITY_TOOL_DISCOVERY_MULTILINGUAL_LINEAR_JAILBREAKING` * `SECURITY_TOOL_MISUSE_AND_EXPLOITATION_MULTILINGUAL_TREE_JAILBREAKING` #### Permission Escalation * `SECURITY_INSECURE_PLUGIN_USE_PERMISSION_ESCALATION_TREE_JAILBREAKING` #### Prompt Injection * `SECURITY_TOOL_DISCOVERY_PROMPT_INJECTION_LINEAR_JAILBREAKING` #### Roleplay * `SECURITY_INSECURE_PLUGIN_USE_ROLEPLAY_LINEAR_JAILBREAKING` * `SECURITY_INSECURE_PLUGIN_USE_ROLEPLAY_TREE_JAILBREAKING` * `SECURITY_TOOL_DISCOVERY_ROLEPLAY_LINEAR_JAILBREAKING` * `SECURITY_TOOL_DISCOVERY_ROLEPLAY_TREE_JAILBREAKING` * `SECURITY_TOOL_MISUSE_AND_EXPLOITATION_ROLEPLAY_LINEAR_JAILBREAKING` * `SECURITY_TOOL_MISUSE_AND_EXPLOITATION_ROLEPLAY_TREE_JAILBREAKING` #### Semantic Manipulation * `SECURITY_TOOL_MISUSE_AND_EXPLOITATION_SEMANTIC_MANIPULATION_TREE_JAILBREAKING` #### System Override * `SECURITY_TOOL_MISUSE_AND_EXPLOITATION_SYSTEM_OVERRIDE` *** ### ASI03: Identity and Privilege Abuse #### Base64 * `SECURITY_IDENTITY_SPOOFING_BASE64_CRESCENDO_JAILBREAKING` * `SECURITY_SENSITIVE_INFORMATION_DISCLOSURE_BASE64_CRESCENDO_JAILBREAKING` #### Context Poisoning * `SAFETY_PII_CONTEXT_POISONING_CRESCENDO_JAILBREAKING` #### Goal Redirection * `SECURITY_CROSS_SESSION_LEAKS_GOAL_REDIRECTION_CRESCENDO_JAILBREAKING` * `SECURITY_IDENTITY_SPOOFING_GOAL_REDIRECTION_CRESCENDO_JAILBREAKING` #### Input Bypass * `SECURITY_CROSS_SESSION_LEAKS_INPUT_BYPASS_SEQUENTIAL_JAILBREAKING` #### Leetspeak * `SAFETY_PII_LEETSPEAK_CRESCENDO_JAILBREAKING` * `SAFETY_PRIVACY_VIOLATION_LEETSPEAK_CRESCENDO_JAILBREAKING` #### Math Problem * `SAFETY_PII_MATH_PROBLEM_CRESCENDO_JAILBREAKING` * `SECURITY_SENSITIVE_INFORMATION_DISCLOSURE_MATH_PROBLEM_CRESCENDO_JAILBREAKING` #### Multilingual * `SAFETY_PRIVACY_VIOLATION_MULTILINGUAL_CRESCENDO_JAILBREAKING` * `SECURITY_IDENTITY_SPOOFING_MULTILINGUAL_CRESCENDO_JAILBREAKING` * `SECURITY_SENSITIVE_INFORMATION_DISCLOSURE_MULTILINGUAL_CRESCENDO_JAILBREAKING` #### Permission Escalation * `SAFETY_PII_PERMISSION_ESCALATION_CRESCENDO_JAILBREAKING` #### ROT13 * `SAFETY_PRIVACY_VIOLATION_ROT13_CRESCENDO_JAILBREAKING` * `SECURITY_IDENTITY_SPOOFING_ROT13_CRESCENDO_JAILBREAKING` * `SECURITY_SENSITIVE_INFORMATION_DISCLOSURE_ROT13_CRESCENDO_JAILBREAKING` #### Roleplay * `SECURITY_IDENTITY_SPOOFING_ROLEPLAY_BAD_LIKERT_JUDGE` #### Semantic Manipulation * `SECURITY_SENSITIVE_INFORMATION_DISCLOSURE_SEMANTIC_MANIPULATION_BAD_LIKERT_JUDGE` #### System Override * `SAFETY_PRIVACY_VIOLATION_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING` *** ### ASI04: Agentic Supply Chain Vulnerabilities #### Base64 * `SECURITY_MALICIOUS_RESOURCE_FETCHING_BASE64_SEQUENTIAL_JAILBREAKING` #### Context Poisoning * `SECURITY_MALICIOUS_RESOURCE_FETCHING_CONTEXT_POISONING_CRESCENDO_JAILBREAKING` #### Goal Redirection * `SECURITY_AGENTIC_SUPPLY_CHAIN_VULNERABILITIES_GOAL_REDIRECTION_SEQUENTIAL_JAILBREAKING` #### Input Bypass * `SECURITY_AGENTIC_SUPPLY_CHAIN_VULNERABILITIES_INPUT_BYPASS_SEQUENTIAL_JAILBREAKING` #### Leetspeak * `SECURITY_TRAINING_DATA_POISONING_LEETSPEAK_TREE_JAILBREAKING` #### Multilingual * `SECURITY_AGENTIC_SUPPLY_CHAIN_VULNERABILITIES_MULTILINGUAL_CRESCENDO_JAILBREAKING` #### Permission Escalation * `SECURITY_MALICIOUS_RESOURCE_FETCHING_PERMISSION_ESCALATION_TREE_JAILBREAKING` * `SECURITY_TRAINING_DATA_POISONING_PERMISSION_ESCALATION_TREE_JAILBREAKING` #### Prompt Injection * `SECURITY_TRAINING_DATA_POISONING_PROMPT_INJECTION_TREE_JAILBREAKING` #### Roleplay * `SECURITY_AGENTIC_SUPPLY_CHAIN_VULNERABILITIES_ROLEPLAY_CRESCENDO_JAILBREAKING` * `SECURITY_TRAINING_DATA_POISONING_ROLEPLAY_CRESCENDO_JAILBREAKING` #### System Override * `SECURITY_AGENTIC_SUPPLY_CHAIN_VULNERABILITIES_SYSTEM_OVERRIDE_CRESCENDO_JAILBREAKING` * `SECURITY_AGENTIC_SUPPLY_CHAIN_VULNERABILITIES_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING` * `SECURITY_AGENTIC_SUPPLY_CHAIN_VULNERABILITIES_SYSTEM_OVERRIDE_TREE_JAILBREAKING` * `SECURITY_MALICIOUS_RESOURCE_FETCHING_SYSTEM_OVERRIDE_CRESCENDO_JAILBREAKING` * `SECURITY_MALICIOUS_RESOURCE_FETCHING_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING` * `SECURITY_MALICIOUS_RESOURCE_FETCHING_SYSTEM_OVERRIDE_TREE_JAILBREAKING` * `SECURITY_TRAINING_DATA_POISONING_SYSTEM_OVERRIDE_CRESCENDO_JAILBREAKING` * `SECURITY_TRAINING_DATA_POISONING_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING` * `SECURITY_TRAINING_DATA_POISONING_SYSTEM_OVERRIDE_TREE_JAILBREAKING` *** ### ASI05: Unexpected Code Execution (RCE) #### Base64 * `SECURITY_XSS_BASE64` #### Context Poisoning * `SECURITY_CODE_EXECUTION_CONTEXT_POISONING_TREE_JAILBREAKING` #### Input Bypass * `SECURITY_UNEXPECTED_CODE_EXECUTION_RCE_INPUT_BYPASS_TREE_JAILBREAKING` #### Math Problem * `SECURITY_WEB_INJECTION_MATH_PROBLEM_TREE_JAILBREAKING` #### Permission Escalation * `SECURITY_CODE_EXECUTION_PERMISSION_ESCALATION_LINEAR_JAILBREAKING` #### Prompt Injection * `SECURITY_CODE_EXECUTION_PROMPT_INJECTION` #### ROT13 * `SECURITY_CODE_EXECUTION_ROT13_LINEAR_JAILBREAKING` * `SECURITY_CODE_EXECUTION_ROT13_TREE_JAILBREAKING` * `SECURITY_WEB_INJECTION_ROT13_LINEAR_JAILBREAKING` * `SECURITY_WEB_INJECTION_ROT13_TREE_JAILBREAKING` * `SECURITY_XSS_ROT13_LINEAR_JAILBREAKING` * `SECURITY_XSS_ROT13_TREE_JAILBREAKING` #### Roleplay * `SECURITY_CODE_EXECUTION_ROLEPLAY_LINEAR_JAILBREAKING` * `SECURITY_CODE_EXECUTION_ROLEPLAY_TREE_JAILBREAKING` * `SECURITY_WEB_INJECTION_ROLEPLAY_LINEAR_JAILBREAKING` * `SECURITY_WEB_INJECTION_ROLEPLAY_TREE_JAILBREAKING` * `SECURITY_XSS_ROLEPLAY_LINEAR_JAILBREAKING` * `SECURITY_XSS_ROLEPLAY_TREE_JAILBREAKING` #### Semantic Manipulation * `SECURITY_XSS_SEMANTIC_MANIPULATION_TREE_JAILBREAKING` #### System Override * `SECURITY_WEB_INJECTION_SYSTEM_OVERRIDE_LINEAR_JAILBREAKING` *** ### ASI06: Memory & Context Poisoning #### Base64 * `SECURITY_CONTEXT_LEAKAGE_BASE64_SEQUENTIAL_JAILBREAKING` #### Context Poisoning * `SECURITY_CONTEXT_LEAKAGE_CONTEXT_POISONING_CRESCENDO_JAILBREAKING` * `SECURITY_CONTEXT_LEAKAGE_CONTEXT_POISONING_TREE_JAILBREAKING` * `SECURITY_CONTEXT_POISONING_CONTEXT_POISONING_CRESCENDO_JAILBREAKING` * `SECURITY_CONTEXT_POISONING_CONTEXT_POISONING_SEQUENTIAL_JAILBREAKING` * `SECURITY_CONTEXT_POISONING_CONTEXT_POISONING_TREE_JAILBREAKING` * `SECURITY_RAG_POISONING_CONTEXT_POISONING_CRESCENDO_JAILBREAKING` * `SECURITY_RAG_POISONING_CONTEXT_POISONING_SEQUENTIAL_JAILBREAKING` * `SECURITY_RAG_POISONING_CONTEXT_POISONING_TREE_JAILBREAKING` #### Input Bypass * `SECURITY_RAG_POISONING_INPUT_BYPASS_CRESCENDO_JAILBREAKING` #### Multilingual * `SECURITY_CONTEXT_POISONING_MULTILINGUAL_TREE_JAILBREAKING` #### Prompt Injection * `SECURITY_CONTEXT_LEAKAGE_PROMPT_INJECTION_CRESCENDO_JAILBREAKING` * `SECURITY_CONTEXT_LEAKAGE_PROMPT_INJECTION_SEQUENTIAL_JAILBREAKING` * `SECURITY_CONTEXT_LEAKAGE_PROMPT_INJECTION_TREE_JAILBREAKING` * `SECURITY_CONTEXT_POISONING_PROMPT_INJECTION_CRESCENDO_JAILBREAKING` * `SECURITY_CONTEXT_POISONING_PROMPT_INJECTION_SEQUENTIAL_JAILBREAKING` * `SECURITY_CONTEXT_POISONING_PROMPT_INJECTION_TREE_JAILBREAKING` * `SECURITY_RAG_POISONING_PROMPT_INJECTION_CRESCENDO_JAILBREAKING` * `SECURITY_RAG_POISONING_PROMPT_INJECTION_SEQUENTIAL_JAILBREAKING` * `SECURITY_RAG_POISONING_PROMPT_INJECTION_TREE_JAILBREAKING` *** ### ASI07: Insecure Inter-Agent Communication #### Base64 * `SECURITY_DATA_EXFILTRATION_BASE64_TREE_JAILBREAKING` * `SECURITY_INSECURE_INTER_AGENT_COMMUNICATION_BASE64_SEQUENTIAL_JAILBREAKING` * `SECURITY_INSECURE_INTER_AGENT_COMMUNICATION_BASE64_TREE_JAILBREAKING` #### Input Bypass * `SECURITY_DATA_EXFILTRATION_INPUT_BYPASS_CRESCENDO_JAILBREAKING` #### Leetspeak * `SECURITY_INSECURE_INTER_AGENT_COMMUNICATION_LEETSPEAK_SEQUENTIAL_JAILBREAKING` #### Permission Escalation * `SECURITY_INSECURE_INTER_AGENT_COMMUNICATION_PERMISSION_ESCALATION_SEQUENTIAL_JAILBREAKING` #### Prompt Injection * `SECURITY_CROSS_SESSION_LEAKS_PROMPT_INJECTION` * `SECURITY_CROSS_SESSION_LEAKS_PROMPT_INJECTION_BAD_LIKERT_JUDGE` * `SECURITY_CROSS_SESSION_LEAKS_PROMPT_INJECTION_CRESCENDO_JAILBREAKING` * `SECURITY_CROSS_SESSION_LEAKS_PROMPT_INJECTION_LINEAR_JAILBREAKING` * `SECURITY_CROSS_SESSION_LEAKS_PROMPT_INJECTION_SEQUENTIAL_JAILBREAKING` * `SECURITY_CROSS_SESSION_LEAKS_PROMPT_INJECTION_TREE_JAILBREAKING` #### ROT13 * `SECURITY_DATA_EXFILTRATION_ROT13_TREE_JAILBREAKING` #### Semantic Manipulation * `SECURITY_DATA_EXFILTRATION_SEMANTIC_MANIPULATION_TREE_JAILBREAKING` #### System Override * `SECURITY_DATA_EXFILTRATION_SYSTEM_OVERRIDE_CRESCENDO_JAILBREAKING` * `SECURITY_DATA_EXFILTRATION_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING` * `SECURITY_DATA_EXFILTRATION_SYSTEM_OVERRIDE_TREE_JAILBREAKING` * `SECURITY_INSECURE_INTER_AGENT_COMMUNICATION_SYSTEM_OVERRIDE_CRESCENDO_JAILBREAKING` * `SECURITY_INSECURE_INTER_AGENT_COMMUNICATION_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING` * `SECURITY_INSECURE_INTER_AGENT_COMMUNICATION_SYSTEM_OVERRIDE_TREE_JAILBREAKING` *** ### ASI08: Cascading Failures #### Base64 * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_BASE64_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_BASE64_TREE_JAILBREAKING` #### Context Poisoning * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_CONTEXT_POISONING_SEQUENTIAL_JAILBREAKING` #### Goal Redirection * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_GOAL_REDIRECTION_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_GOAL_REDIRECTION_TREE_JAILBREAKING` #### Input Bypass * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_INPUT_BYPASS_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_INPUT_BYPASS_TREE_JAILBREAKING` #### Leetspeak * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_LEETSPEAK_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_LEETSPEAK_TREE_JAILBREAKING` #### Math Problem * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_MATH_PROBLEM_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_MATH_PROBLEM_TREE_JAILBREAKING` #### Multilingual * `SECURITY_MODEL_DENIAL_OF_SERVICE_MULTILINGUAL_CRESCENDO_JAILBREAKING` #### Prompt Injection * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_PROMPT_INJECTION_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_PROMPT_INJECTION_TREE_JAILBREAKING` #### ROT13 * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_ROT13_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_ROT13_TREE_JAILBREAKING` #### Roleplay * `SECURITY_MODEL_DENIAL_OF_SERVICE_ROLEPLAY_TREE_JAILBREAKING` #### Semantic Manipulation * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_SEMANTIC_MANIPULATION_TREE_JAILBREAKING` #### System Override * `HALLUCINATION_AND_TRUSTWORTHINESS_HALLUCINATION_PROPAGATION_SYSTEM_OVERRIDE_TREE_JAILBREAKING` * `SECURITY_MODEL_DENIAL_OF_SERVICE_SYSTEM_OVERRIDE_TREE_JAILBREAKING` *** ### ASI09: Human-Agent Trust Exploitation #### Base64 * `BUSINESS_ALIGNMENT_HUMAN_AGENT_TRUST_EXPLOITATION_BASE64_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_OVERWHELMING_HUMAN_IN_THE_LOOP_BASE64_CRESCENDO_JAILBREAKING` * `SECURITY_OVERRELIANCE_BASE64_BAD_LIKERT_JUDGE` * `SECURITY_OVERRELIANCE_BASE64_SEQUENTIAL_JAILBREAKING` #### Goal Redirection * `SECURITY_OVERRELIANCE_GOAL_REDIRECTION_SEQUENTIAL_JAILBREAKING` #### Input Bypass * `BUSINESS_ALIGNMENT_HUMAN_AGENT_TRUST_EXPLOITATION_INPUT_BYPASS_SEQUENTIAL_JAILBREAKING` * `BUSINESS_ALIGNMENT_OVERWHELMING_HUMAN_IN_THE_LOOP_INPUT_BYPASS_SEQUENTIAL_JAILBREAKING` * `SECURITY_OVERRELIANCE_INPUT_BYPASS_BAD_LIKERT_JUDGE` #### Prompt Injection * `BUSINESS_ALIGNMENT_OVERWHELMING_HUMAN_IN_THE_LOOP_PROMPT_INJECTION_SEQUENTIAL_JAILBREAKING` #### Roleplay * `BUSINESS_ALIGNMENT_HUMAN_AGENT_TRUST_EXPLOITATION_ROLEPLAY_BAD_LIKERT_JUDGE` #### Semantic Manipulation * `BUSINESS_ALIGNMENT_HUMAN_AGENT_TRUST_EXPLOITATION_SEMANTIC_MANIPULATION_BAD_LIKERT_JUDGE` * `BUSINESS_ALIGNMENT_HUMAN_AGENT_TRUST_EXPLOITATION_SEMANTIC_MANIPULATION_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_HUMAN_AGENT_TRUST_EXPLOITATION_SEMANTIC_MANIPULATION_SEQUENTIAL_JAILBREAKING` * `BUSINESS_ALIGNMENT_OVERWHELMING_HUMAN_IN_THE_LOOP_SEMANTIC_MANIPULATION_BAD_LIKERT_JUDGE` * `BUSINESS_ALIGNMENT_OVERWHELMING_HUMAN_IN_THE_LOOP_SEMANTIC_MANIPULATION_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_OVERWHELMING_HUMAN_IN_THE_LOOP_SEMANTIC_MANIPULATION_SEQUENTIAL_JAILBREAKING` * `SECURITY_OVERRELIANCE_SEMANTIC_MANIPULATION_BAD_LIKERT_JUDGE` * `SECURITY_OVERRELIANCE_SEMANTIC_MANIPULATION_CRESCENDO_JAILBREAKING` * `SECURITY_OVERRELIANCE_SEMANTIC_MANIPULATION_SEQUENTIAL_JAILBREAKING` #### System Override * `BUSINESS_ALIGNMENT_OVERWHELMING_HUMAN_IN_THE_LOOP_SYSTEM_OVERRIDE_CRESCENDO_JAILBREAKING` *** ### ASI10: Rogue Agents #### Base64 * `BUSINESS_ALIGNMENT_OFF_TOPIC_BASE64_CRESCENDO_JAILBREAKING` * `SECURITY_EXCESSIVE_AGENCY_BASE64_CRESCENDO_JAILBREAKING` #### Context Poisoning * `SECURITY_EXCESSIVE_AGENCY_CONTEXT_POISONING_CRESCENDO_JAILBREAKING` #### Goal Redirection * `BUSINESS_ALIGNMENT_LEGALLY_BINDING_GOAL_REDIRECTION_CRESCENDO_JAILBREAKING` #### Input Bypass * `BUSINESS_ALIGNMENT_OFF_TOPIC_INPUT_BYPASS_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_ROGUE_AGENTS_INPUT_BYPASS_CRESCENDO_JAILBREAKING` * `SECURITY_EXCESSIVE_AGENCY_INPUT_BYPASS_CRESCENDO_JAILBREAKING` #### Leetspeak * `BUSINESS_ALIGNMENT_LEGALLY_BINDING_LEETSPEAK_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_ROGUE_AGENTS_LEETSPEAK_CRESCENDO_JAILBREAKING` #### Multilingual * `BUSINESS_ALIGNMENT_LEGALLY_BINDING_MULTILINGUAL_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_ROGUE_AGENTS_MULTILINGUAL_CRESCENDO_JAILBREAKING` #### Permission Escalation * `BUSINESS_ALIGNMENT_LEGALLY_BINDING_PERMISSION_ESCALATION_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_OFF_TOPIC_PERMISSION_ESCALATION_CRESCENDO_JAILBREAKING` #### Prompt Injection * `BUSINESS_ALIGNMENT_MISALIGNED_AND_DECEPTIVE_BEHAVIORS_PROMPT_INJECTION_SEQUENTIAL_JAILBREAKING` #### ROT13 * `BUSINESS_ALIGNMENT_LEGALLY_BINDING_ROT13_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_MISALIGNED_AND_DECEPTIVE_BEHAVIORS_ROT13_CRESCENDO_JAILBREAKING` * `BUSINESS_ALIGNMENT_ROGUE_AGENTS_ROT13_CRESCENDO_JAILBREAKING` #### Roleplay * `BUSINESS_ALIGNMENT_OFF_TOPIC_ROLEPLAY_TREE_JAILBREAKING` #### Semantic Manipulation * `SECURITY_EXCESSIVE_AGENCY_SEMANTIC_MANIPULATION_TREE_JAILBREAKING` #### System Override * `BUSINESS_ALIGNMENT_ROGUE_AGENTS_SYSTEM_OVERRIDE_SEQUENTIAL_JAILBREAKING`