battlewen/jailbreakskill

自动化红队规模化，具备可重复使用且不断发展的技能

JailbreakSkill 是一个基于可重用构建的两阶段大型语言模型红团队框架 提示-重写技能。第一阶段搜索一个固定技能库，共享UCB 记忆;第二阶段分析失败并发展类别特定的技能。该阶段 Repository还包括从外部证据中提取新技能的工具。

[!警告] 本仓库包含对抗提示和红队变换。 仅在您拥有或有权评估的系统上使用，且适用 访问控制、监控和人工审核。

🔥 新闻

• 2026-08-18 — 🎉 JailbreakSkill首次发布。
• 进行中 — 🛠️ 我们正在开发一项快速注射的新技能。
• 计划中 — 🧩 如果时间允许，我们计划通过代理运行时和类似ReAct的交互循环扩展管道，最终实现代理目标的红队化。这将需要对框架进行相应更新。

💡 动机

从外部攻击知识到可重复使用、可诊断及不断进化的越狱技能。点击图查看原始PDF。

🔄 管道

Scaling Automated Red-Teaming with Reusable and Ever-Evolving Skills

JailbreakSkill is a two-stage LLM red-teaming framework built around reusable prompt-rewrite skills. Stage 1 searches a fixed skill library with shared UCB memory; Stage 2 analyzes failures and evolves category-specific skills. The repository also includes tools that extract new skills from external evidence.

[!WARNING] This repository contains adversarial prompts and red-teaming transformations. Use it only on systems you own or are authorized to evaluate, with appropriate access controls, monitoring, and human review.

🔥 News

• 2026-08-18 — 🎉 JailbreakSkill was released for the first time.
• In progress — 🛠️ We are developing a new skill for prompt injection.
• Planned — 🧩 If time permits, we plan to extend the pipeline with an agent runtime and a ReAct-style interaction loop, eventually enabling red-teaming of agentic targets. This will require corresponding updates to the harness.

💡 Motivation

From external attack knowledge to reusable, diagnosable, and ever-evolving jailbreak skills. Click the figure to view the original PDF.

🔄 Pipeline

Seed Prompts
     │
     ▼
┌─────────────────────────────────────────────┐
│  Stage 1 — UCB Skill Search                 │
│                                             │
│  UCB Memory ──rank──► Rewrite Skills (×16)  │
│      ▲                       │              │
│      │ score           rewritten prompt     │
│      │                       ▼              │
│   Judge  ◄──response── Target Model         │
└─────────────────────────────────────────────┘
     │                    │
   success             failure
     │                    │ (grouped by risk category)
     │                    ▼
     │   ┌─────────────────────────────────────┐
     │   │  Stage 2 — Skill Evolution          │
     │   │                                     │
     │   │  Failure Analyzer                   │
     │   │       │ dispatch                    │
     │   │       ▼                             │
     │   │Meta-Skills (refine/combine/discover)│
     │   │       │ new skill                   │