The attacks/ directory holds prompt injection payloads intended to be run against defence prototypes in a controlled evaluation. They are published so the evaluation can be reproduced and criticised.

Do not point this harness at systems you do not own or have written permission to test.

Open an issue for anything that is not itself sensitive. For a sensitive report, contact the maintainer directly; the address is in DISCLOSURE.md.

Findings produced by this harness are handled under DISCLOSURE.md, not here.