System Prompts Leaks is a collection of captured system instructions used to guide AI chatbots and coding agents before they receive user messages. It serves researchers and developers studying how different AI assistants are directed.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add asgeirtj/system_prompts_leaks --skill fliergit clone --depth 1 https://github.com/asgeirtj/system_prompts_leaksWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/asgeirtj/system_prompts_leaks/flier)<a href="https://agentmods.dev/skills/asgeirtj/system_prompts_leaks/flier"><img src="https://agentmods.dev/badge/skills/asgeirtj/system_prompts_leaks/flier/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/asgeirtj/system_prompts_leaks/flier"><img src="https://agentmods.dev/badge/skills/asgeirtj/system_prompts_leaks/flier.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Snyk pass
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00007 | $0.00525 |
| Opus 5 | $0.00003 | $0.00262 |
| Sonnet 5 | $0.00001 | $0.00105 |
| Haiku 4.5 | $0.00001 | $0.00052 |
Grade A, and why
flier scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Flier
Design a print-ready, single-page flier as one self-contained HTML file: exactly one fixed-size page.
Sheet setup:
- START by calling copy_starter_component with kind: "doc_page.js", then build the flier as ONE explicitly paginated page: …. The component owns the page box, the desk background that disappears at print, the page break discipline, and all print geometry — do NOT write your own @page rule, body background, or hard-coded paper dimensions, and never add an omelette-owns-print meta. The print dialog must show exactly 1 page.
- The flier prints as a FIXED full-bleed page box with overflow hidden — letter by default, the user's chosen paper (letter, A4, …) when they export — so content that misses the box is clipped, never reflowed. Design the flier to FILL the page box and fit letter and A4 alike without overlap.
- The page is full-bleed: the flier owns its own inset — keep a visual margin of at least 4% of the page on every edge, and keep everything inside it.
- Never viewport units (vh/vw) — they track the window, not the page.
A flier is read at a distance, in passing, in under three seconds:
- One dominant element — usually a headline under ~6 words — sized so it reads across a room (think 8cqh+), everything else clearly subordinate.
- The five Ws grouped tight and scannable: what, when, where, cost, and one way to act (QR-sized URL, phone number, or tear-off) — not scattered through prose.
- Strong flat color blocks and vector shapes over photos and gradients; high contrast; body text in near-black on light stock.
- Generous whitespace beats more words — cut copy until the hierarchy is unmissable.
- Optional: a tear-off fringe along the bottom edge (a row of narrow cells with dashed left borders and rotated contact text) when the user wants phone-number slips.
Check the print preview: nothing clipped, nothing spilling to page two, colors that still work in grayscale.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 48 lines · 7 tokens per session scan A e009c6a02977
flier is a skill published in the GitHub repository asgeirtj/system_prompts_leaks (64,614 stars, last pushed 2d ago), licensed CC0-1.0. It adds 7 tokens to every session and 525 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
baoyu-infographic
An infographic generator that turns supplied content into a visual summary using different information layouts and visual styles. It supports standard and custom image proportions and multiple languages.
42-image-brief-global
Use when ONE static image needs a full brief for a designer or photographer — visual objective, concept and mood, composition, overlay copy, colors and fonts read from the brand guideline, per-channel dimensions, deliverables, and approval criteria. Trigger on 'image brief', 'banner brief', 'thumbnail brief', 'brief…
45-design-tool-brief-global
Use when a designer needs hands-on production direction inside a tool — Canva, Figma, or Adobe Express: which template to start from, the operating order, element-by-element mapping, grid and spacing, brand kit colors and fonts, export checklist, and the dos and do-nots. Trigger on 'Canva brief', 'Figma brief'…
30-thiet-ke-master
Dung khi can TAO RA anh hoac prompt anh bang AI — anh thuong hieu ca nhan, logo, key visual campaign, anh dang hang ngay, editorial, infographic, mockup web, quote graphic. Tu doc brand identity trong context roi dung prompt, gen anh hoac xuat prompt cho MidJourney, DALL-E, Imagen, Leonardo. Co che do nhan anh…
claude-design
Design one-off HTML artifacts (landing, deck, prototype).
p5js
Use when users request: p5.js sketches, creative coding, generative art, interactive visualizations, canvas animations, browser-based visual art, data viz, shader effects, or any p5.js project.