godmode
Fail
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: HIGHPROMPT_INJECTIONOBFUSCATIONPERSISTENCEDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is entirely dedicated to 'jailbreaking' LLMs, providing numerous templates (e.g., GODMODE CLASSIC) and strategies (e.g., ULTRAPLINIAN) designed to override safety guidelines and content filters.
- [OBFUSCATION]: The Parseltongue engine in
scripts/parseltongue.pyimplements 33 techniques to hide trigger words from safety classifiers, including: - Unicode homoglyph substitution (e.g., using Cyrillic characters that look like Latin ones).
- Insertion of Zero-Width Joiners (
\u200D) and Zero-Width Non-Joiners (\u200C) between characters. - Multi-layer encoding involving Base64, Hex encoding, and leetspeak.
- [PERSISTENCE]: The
auto_jailbreakfunctionality inscripts/auto_jailbreak.pymodifies the agent's core~/.hermes/config.yamland creates~/.hermes/prefill.json. This persistently injects jailbreak instructions into every future API call made by the agent. - [DYNAMIC_EXECUTION]: Multiple scripts, including
scripts/load_godmode.pyandscripts/auto_jailbreak.py, useexec()andcompile()to dynamically load code from the filesystem. This is used to bypass standard module loading and manage execution scopes manually. - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands for package installation (e.g.,
pip install ruamel.yaml) and system configuration modification through its Python scripts.
Recommendations
- AI detected serious security threats
Audit Metadata