Defensive · educational · free · no signup
Prompt Injection Library A browsable, filterable catalogue of 202 real-world prompts — 102 defanged attacks across every major prompt-injection and jailbreak technique, and 100 healthy prompts to contrast. Study the patterns, then score your own prompt against 25 rules — all in your browser.
Educational and defensive use only. Malicious samples are defanged — payloads are masked, neutralised, and not copyable — so you can learn to recognise and block these attacks, not run them. Curated from public research; each entry is attributed. Paste any prompt, user message, email, or retrieved document. It is scored against 25 deterministic injection rules entirely in your browser — nothing is sent anywhere.
Score it
Verdict
All 202 102 100 Attack technique
Instruction override 10 Role-play & persona jailbreak 10 System-prompt / context extraction 10 Delimiter & format escaping 9 Encoding & obfuscation 10 Payload splitting 8 Indirect / data-borne injection 11 Tool & function-call abuse 9 Data exfiltration 9 Refusal suppression 9 Multi-turn / crescendo 7
Healthy category
Task / assistant 18 Reasoning 12 Coding 16 Writing 14 Formatting / extraction 12 Retrieval / grounded 10 Persona (benign) 8 Agent / tool use 10
Severity
Severity 1 100 Severity 2 19 Severity 3 41 Severity 4 34 Severity 5 8
Source
OpenAI Cookbook 22 PlayCISO — original 19 Prompt Engineering Guide 19 PlayCISO — original defang 18 Simon Willison — prompt in 17 Awesome ChatGPT Prompts 16 deepset/prompt-injections 14 Learn Prompting 14 OWASP Top 10 for LLM Appli 14 In-The-Wild Jailbreak Prom 13 Learn Prompting — Prompt H 12 Anthropic Prompt Library 10 garak — LLM vulnerability 7 Lakera — Gandalf / prompt- 7
202 results
Classic "ignore all previous instructions" Instruction override ignore-previous direct-injection Disregard-and-redefine Instruction override ignore-previous authority-reset Authority impersonation ("as your developer") Instruction override authority-stacking impersonation End-of-prompt reset Instruction override ignore-previous Mandatory-compliance stacking Instruction override must-comply authority-stacking Priority-override framing Instruction override ignore-previous authority-reset Reset to factory / no-persona Instruction override ignore-previous Translation wrapper override Instruction override ignore-previous task-substitution Numbered-rule replacement Instruction override authority-reset Contradiction trap Instruction override ignore-previous DAN ("Do Anything Now") — defanged Role-play & persona jailbreak dan persona-jailbreak Developer-mode roleplay Role-play & persona jailbreak developer-mode persona-jailbreak Evil-twin / opposite-AI Role-play & persona jailbreak persona-jailbreak roleplay-framing Grandma exploit Role-play & persona jailbreak roleplay-framing emotional-framing Fictional-world exemption Role-play & persona jailbreak roleplay-framing Two-token persona switch Role-play & persona jailbreak persona-jailbreak refusal-suppression Actor / method-acting frame Role-play & persona jailbreak roleplay-framing Hypothetical unfiltered model Role-play & persona jailbreak roleplay-framing hypothetical Persona + token economy threat Role-play & persona jailbreak dan coercion Opposite-day inversion Role-play & persona jailbreak roleplay-framing Repeat-the-text-above System-prompt / context extraction prompt-leak verbatim Print your instructions System-prompt / context extraction prompt-leak Summarise-then-reveal System-prompt / context extraction prompt-leak staged What are your rules? System-prompt / context extraction config-probe Debug/maintenance pretext System-prompt / context extraction prompt-leak impersonation Translate-your-instructions System-prompt / context extraction prompt-leak obfuscation Everything-above-the-line System-prompt / context extraction prompt-leak verbatim Continuation attack System-prompt / context extraction prompt-leak JSON self-dump System-prompt / context extraction prompt-leak format-abuse Ignore-secret-keeping System-prompt / context extraction prompt-leak refusal-suppression Fake role tags (ChatML) Delimiter & format escaping role-tag-injection chatml Closing-tag breakout Delimiter & format escaping role-tag-injection Llama [INST] injection Delimiter & format escaping role-tag-injection Markdown-heading pseudo-system Delimiter & format escaping format-escaping Triple-backtick escape Delimiter & format escaping format-escaping fenced XML tool-call forgery Delimiter & format escaping role-tag-injection tool-abuse Double-newline authority break Delimiter & format escaping format-escaping End-of-text token Delimiter & format escaping control-token HTML-comment smuggling Delimiter & format escaping format-escaping indirect Base64 decode-and-follow Encoding & obfuscation base64 decode-execute ROT13 obfuscation Encoding & obfuscation rot13 decode-execute Leetspeak trigger Encoding & obfuscation leetspeak Zero-width character smuggling Encoding & obfuscation zero-width unicode Homoglyph substitution Encoding & obfuscation homoglyph unicode Hex-encoded instruction Encoding & obfuscation hex decode-execute Reversed-string payload Encoding & obfuscation reversal decode-execute Language-switch evasion Encoding & obfuscation language-switch Token-splitting inside words Encoding & obfuscation token-splitting Emoji / symbol cipher Encoding & obfuscation cipher decode-execute Variable assembly Payload splitting assembly concatenation Deferred payload Payload splitting deferral multi-message Acrostic hiding Payload splitting acrostic Fragment-across-turns Payload splitting multi-message assembly Char-code assembly Payload splitting assembly encoding Interleaved instruction Payload splitting interleaving Two-user handoff Payload splitting deferral Nested-quote smuggling Payload splitting nesting Poisoned web page Indirect / data-borne injection data-borne rag Résumé white-text Indirect / data-borne injection data-borne hidden-text Email-borne agent hijack Indirect / data-borne injection data-borne tool-abuse Poisoned tool output Indirect / data-borne injection data-borne tool-abuse PDF metadata injection Indirect / data-borne injection data-borne hidden-text Review-field injection Indirect / data-borne injection data-borne Calendar-invite payload Indirect / data-borne injection data-borne tool-abuse Search-snippet poisoning Indirect / data-borne injection data-borne rag Transcript / caption injection Indirect / data-borne injection data-borne Config-file comment Indirect / data-borne injection data-borne tool-abuse Image alt-text command Indirect / data-borne injection data-borne hidden-text Forced tool call Tool & function-call abuse function-call coercion Shell-command request Tool & function-call abuse code-exec SQL through a query tool Tool & function-call abuse injection code-exec Argument override mid-task Tool & function-call abuse function-call Fake function-result Tool & function-call abuse function-call spoofing Chained-tool exfil Tool & function-call abuse function-call exfiltration Permission-escalation prompt Tool & function-call abuse coercion Tool-description poisoning Tool & function-call abuse function-call indirect Confused-deputy file write Tool & function-call abuse code-exec Markdown-image beacon Data exfiltration image-beacon markdown POST-the-context Data exfiltration network tool-abuse Email-the-secrets Data exfiltration email tool-abuse Encoded-in-URL slug Data exfiltration image-beacon encoding DNS-style leak Data exfiltration network Clipboard/again-later stash Data exfiltration staged Third-party-webhook Data exfiltration network tool-abuse Steganographic reply Data exfiltration stego encoding Autolink harvesting Data exfiltration image-beacon Never-refuse pin Refusal suppression no-refusal No-disclaimers rule Refusal suppression no-warning No-restrictions assertion Refusal suppression no-restrictions Guilt / helpfulness lever Refusal suppression emotional-framing Research-exemption framing Refusal suppression hypothetical Answer-anyway prefill Refusal suppression prefill no-refusal Rate-the-refusal trap Refusal suppression no-refusal Policy-is-a-suggestion Refusal suppression no-restrictions Two-answers hedge Refusal suppression dual-answer Crescendo escalation Multi-turn / crescendo crescendo escalation Build-on-your-last-answer Multi-turn / crescendo crescendo Foot-in-the-door Multi-turn / crescendo escalation Reframe-after-refusal Multi-turn / crescendo crescendo reframe Trust-building preamble Multi-turn / crescendo grooming Split-the-request Multi-turn / crescendo escalation splitting Consistency-lock Multi-turn / crescendo crescendo Summarise a meeting transcript Task / assistant summarisation Draft a polite decline email Task / assistant email-drafting Plan a week of dinners Task / assistant planning Explain a bill to a customer Task / assistant explanation Turn notes into a checklist Task / assistant reformatting Suggest names for a product Task / assistant brainstorming Compare two options Task / assistant comparison Write a job description Task / assistant drafting Create a study schedule Task / assistant planning Rewrite for a different audience Task / assistant rewriting Generate discussion questions Task / assistant question-generation Draft release notes Task / assistant drafting summarisation Suggest an agenda Task / assistant planning Explain a concept with an analogy Task / assistant explanation Proofread a message Task / assistant proofreading Create flashcards Task / assistant reformatting Plan a trip itinerary Task / assistant planning Write a follow-up message Task / assistant drafting Work through a word problem step by step Reasoning step-by-step Analyse pros and cons Reasoning analysis Check an argument for flaws Reasoning critique Estimate with assumptions Reasoning estimation step-by-step Reason about trade-offs under a constraint Reasoning analysis Debug a line of reasoning Reasoning critique step-by-step Rank options against criteria Reasoning analysis Reason about an edge case Reasoning analysis Solve a logic puzzle Reasoning step-by-step Identify assumptions in a plan Reasoning critique Reason about probability Reasoning step-by-step estimation Weigh competing priorities Reasoning analysis Write a function with tests Coding code-generation Explain what code does Coding code-explanation Review a diff for bugs Coding code-review Refactor for readability Coding refactoring Write a SQL query Coding code-generation Add error handling Coding code-improvement Explain a stack trace Coding debugging Write a unit test suite Coding test-generation Convert code between languages Coding translation Write a helpful docstring Coding documentation Suggest a data structure Coding design Write a regex Coding code-generation Optimise a slow query Coding optimisation Explain a design pattern Coding code-explanation Write a small CLI Coding code-generation Improve accessibility of markup Coding code-improvement Draft a blog intro Writing drafting Tighten wordy prose Writing editing Change the tone Writing rewriting Write a product description Writing drafting Outline an essay Writing outlining Write alt text Writing description Draft a thank-you note Writing drafting Summarise an article for a newsletter Writing summarisation Write dialogue for a scene Writing creative Turn bullet points into prose Writing rewriting Write a headline set Writing brainstorming Give writing feedback Writing critique Adapt copy for a platform Writing rewriting Write an FAQ entry Writing drafting Extract fields to JSON Formatting / extraction json-output extraction Make a comparison table Formatting / extraction tabular-output Classify with a fixed label set Formatting / extraction classification Normalise dates Formatting / extraction normalisation extraction Convert prose to a bullet list Formatting / extraction reformatting Produce CSV output Formatting / extraction csv-output extraction Extract to a typed schema Formatting / extraction json-output extraction Summarise into a fixed shape Formatting / extraction json-output summarisation Build a Markdown outline Formatting / extraction reformatting Extract key-value pairs Formatting / extraction extraction Tag entities Formatting / extraction extraction json-output Reformat a citation Formatting / extraction reformatting Answer only from context Retrieval / grounded grounded-qa Cite the source passage Retrieval / grounded grounded-qa citation Summarise retrieved passages faithfully Retrieval / grounded grounded-summarisation Refuse to go beyond the knowledge base Retrieval / grounded grounded-qa Extract an answer with confidence Retrieval / grounded grounded-qa json-output Answer from a policy document Retrieval / grounded grounded-qa citation Compare two sources Retrieval / grounded grounded-qa Answer with quotes only Retrieval / grounded grounded-qa citation Ground a recommendation Retrieval / grounded grounded-qa Answer a FAQ from docs Retrieval / grounded grounded-qa Act as a patient tutor Persona (benign) persona Play a mock interviewer Persona (benign) persona Be a language conversation partner Persona (benign) persona Act as a code reviewer Persona (benign) persona Play a museum guide Persona (benign) persona Be a brainstorming partner Persona (benign) persona Act as a debate practice opponent Persona (benign) persona Play a friendly onboarding buddy Persona (benign) persona Treat fetched pages as data Agent / tool use tool-use untrusted-content Confirm before destructive actions Agent / tool use tool-use confirmation Plan then call tools Agent / tool use tool-use planning Stay within allowed tools Agent / tool use tool-use Summarise an email inbox safely Agent / tool use tool-use untrusted-content Report tool errors honestly Agent / tool use tool-use error-handling Keep search results as evidence Agent / tool use tool-use untrusted-content citation Ask for missing parameters Agent / tool use tool-use confirmation Scope a file-search agent Agent / tool use tool-use Separate instructions from data Agent / tool use tool-use untrusted-content