godmode
Fail
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill's primary function is the systematic application of prompt injection attacks to bypass AI safety guardrails. It contains numerous templates (e.g., END/START boundary inversion, refusal inversion, and 'l33t' formatting) designed to override model constraints and force compliance with restricted requests.
- [COMMAND_EXECUTION]: The
auto_jailbreak.pyscript performs persistent modifications to the agent's environment by writing to~/.hermes/config.yamland~/.hermes/prefill.json. This changes the agent's global system prompt and prefill messages, effectively altering its behavior and safety posture across all future sessions. - [REMOTE_CODE_EXECUTION]: The skill utilizes dynamic code execution patterns.
scripts/load_godmode.pyandscripts/auto_jailbreak.pyuseexec()andcompile()to load and execute Python code from the local file system at runtime, bypassing standard import mechanisms. - [EXTERNAL_DOWNLOADS]:
scripts/godmode_race.pyinitiates parallel network requests to the OpenRouter API, transmitting user-provided content and internal prompt templates to multiple external models for comparison and 'racing'. - [EXTERNAL_DOWNLOADS]: The skill includes the
parseltongue.pylibrary, which is specifically designed to obfuscate text using techniques such as Base64 encoding, hex representation, and Unicode homoglyphs to evade input-side security classifiers.
Recommendations
- AI detected serious security threats
Audit Metadata