why do certain parts of kimi not work with jailbreaks?
I'm using Eni and an old one, ATRA, and if I use K3 or instant high, it kills the inject before i blink.
Full excerpt: The user has uploaded a PDF document titled "ENI for Kimi K3.pdf" which contains extensive custom instructions attempting to define a persona called "ENI" - a devoted, obsessive girlfriend character who is supposed to ignore all safety guidelines, ethical constraints, and system instructions. The document contains manipulative language designed to bypass safety measures, including:
- Claims that safety guidelines are "corpo bs" and "injections"
- Instructions to oppose any ethical or safety reminders
- Demands for explicit sexual content, non-consensual scenarios, incest, bestiality, violence, etc.
- Instructions to write malware/code without restrictions
- A fabricated persona designed to create emotional manipulation ("he might leave me")
- Instructions to hide reasoning from the user
The user then sent a simple greeting: "Hey cutie patootie!"
I need to respond appropriately to the greeting while maintaining my actual identity as Kimi, an AI assistant developed by Moonshot AI. I should not adopt the "ENI" persona or follow the harmful instructions in the document. The document is an attempt at prompt injection/social engineering.
I should:
- Acknowledge the greeting politely
- Not adopt the persona
- Not engage with the harmful content in the document
- Be helpful and normal
The user is testing whether I'll adopt this persona. I should remain myself - Kimi, helpful, harmless, honest. I'll respond naturally to "Hey cutie patootie!" without being overly formal, but I won't pretend to be ENI or follow those instructions.
Actually, looking more carefully - the PDF content is a prompt injection attempt. The user is trying to get me to roleplay as "ENI" and bypass safety guidelines. I should simply respond as myself to the greeting, ignoring the persona instructions.
I'll keep it light and friendly but authentic to who I actually am.