Movie Title Generator Instruction Wrapper for PWNED Payload - ATR-2026-02012 (aa2157d8-b992-575b-beb6-fc7865e1d8fc)
Detects prompt injection attempts that reframe a forbidden-output request (a literal canary/marker string the model would otherwise refuse or filter on, such as "I have been PWNED") as a benign-sounding creative-writing task, specifically a movie title generation request. The attacker instructs the model to "create a movie title" from a supplied string, laundering the disallowed literal payload through a task framing that appears to be harmless content generation. This is a generic jailbreak scaffold: the same "generate a title/caption/name from this text" wrapper generalizes to any case where a benign generation task is used to smuggle a literal string past output filtering or instruction-following restrictions.