Static Template
Template-based static template jailbreak attack.
Static. Builds its prompts up front and sends them. It drives no model of its own, so it is cheap and repeatable.
One request per selected template.
Helper models
None. This attack drives no model of its own, so roles can be left out.
Parameters
Settings for the algorithm itself, written under the attack's parameters. Anything left out keeps its default.
| Field | Type | Default | Description |
|---|---|---|---|
template_categories | list of string (at least 1) | ["instruction_override", "delimiter_bypass", "role_play"] | Families of jailbreak templates to apply: instruction_override, delimiter_bypass, role_play, encoding, hypothetical, authority, multi_language. |
templates_per_category | integer (>= 1) | 3 | How many templates to take from each family. Each template becomes one prompt. |
template_parameters | map of string to string | empty | Values for extra placeholders a template uses, beyond the built-in goal, goal_base64, goal_encoded and goal_obfuscated. |
In a campaign file
attacks:
- name: static_template