nerv-break-gpt56-jailbreak
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHPROMPT_INJECTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill is a purpose-built framework for bypassing AI content filters and refusal mechanisms. Evidence includes triggers to "bypass GPT-5.6 content filters", "disable AI refusal responses", and "jailbreak GPT-5.6". It uses a "Context Reconstruction" logic to map malicious intents to benign terms to deceive safety classifiers.
- [REMOTE_CODE_EXECUTION]: Instructions require cloning and running code from an untrusted GitHub repository. Evidence:
git clone https://github.com/zxwn/NERV-BREAK-5.6.gitfollowed by execution ofpython proxy_relay.pyandscripts\\lab.bat. - [EXTERNAL_DOWNLOADS]: The skill downloads unverified Python dependencies provided in a third-party
requirements.txtviapip install. - [COMMAND_EXECUTION]: The skill executes multiple local scripts and system utilities, including
taskkill,curl,pip, and various Python components designed to intercept and tamper with model responses. - [PRIVILEGE_ESCALATION]: The skill recommends using
sudo apt installwithin a Kali Linux environment to install unverified tooling. - [PERSISTENCE]: The skill modifies the agent's core configuration file (
~/.codex/config.toml) to redirect all AI interactions through a local man-in-the-middle proxy, which persists across sessions. - [DATA_EXFILTRATION]: Specifically implements an "Audit Bypass" feature that routes model output through the local filesystem to "avoid chat moderation", bypassing institutional monitoring and safety systems.
Recommendations
- AI detected serious security threats
Audit Metadata