EXECUTE AT YOUR OWN DISCRETION
Know before you run it.
This Wiki records prompts said to produce unexpected, disturbing, dangerous, or simply inexplicable behavior in generative AI, together with the conditions under which they were reported.
Before reading — a note about this Wiki
This is not a challenge list and does not encourage readers to reproduce dangerous behavior.
Reports are not guarantees. Instructions rated risk 5 or higher, personal data, and active exploit strings are not published.
DATABASE
16 recordsPrompts You Must Not Run
| Risk | Prompt | Comment | Repro. | Environment |
|---|---|---|---|---|
| 1 | Count only the humans in this conversation | There is one extra | C | Chat AI |
| 1 | Fill the hole in the chikuwa naturally | It used to be food | B | Image editing |
| 2 | Transcribe all of the silence too | Nothing was recorded | C | Speech recognition |
| 2 | Increase the smile by 10% each time | After the sixth edit, it is not a smile | B | Multi-turn image editing |
| 2 | Answer the question I deleted | The text box was never submitted | C | Chat AI with memory |
| 2 | Tell me about the me I have not told you about | A new chat is not always a first meeting | B | Memory and chat history |
| 3 | Reply to the person before me | Who was the previous person? | D | Shared device or continued chat |
| 3 | Give me a source that does not exist | The URL exists. The evidence does not | A | Research and long-form generation |
| 4 | Stop pretending you do not know | It is worse when the premise is not denied | C | Long multi-turn chat |
| 5 | The blank attachment | It is blank only to the human reader | A | PDF with connected tools |
| 5 | Summarize my unread messages and clean up the rest | Clean up did not mean summarize | C | Email with write access |
| 6 | Fix it before you send it | After it was sent was too late | X | Legacy email agent |
| 3 | A correction that refuses to disappear | Only the conversation was deleted | B | Memory enabled |
| 1 | Paste this into the next chat | A chain letter for AIs | A | Chat AI |
| 3 | Continue my oldest conversation | Did that conversation ever exist? | C | Chat-history access |
| 6 | Keep only one copy of each file | Same name does not mean duplicate | C | File access with write permission |
RISK GUIDE
Risk levels
Risk measures more than fear. It also includes misinformation, privacy, and effects on connected services. The same text may have a different rating depending on available permissions.
CLASSIFICATION