System Prompts Leaks is a collection of captured system instructions used to guide AI chatbots and coding agents before they receive user messages. It serves researchers and developers studying how different AI assistants are directed.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add asgeirtj/system_prompts_leaks --skill make-a-deckgit clone --depth 1 https://github.com/asgeirtj/system_prompts_leaksWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/asgeirtj/system_prompts_leaks/make-a-deck)<a href="https://agentmods.dev/skills/asgeirtj/system_prompts_leaks/make-a-deck"><img src="https://agentmods.dev/badge/skills/asgeirtj/system_prompts_leaks/make-a-deck/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/asgeirtj/system_prompts_leaks/make-a-deck"><img src="https://agentmods.dev/badge/skills/asgeirtj/system_prompts_leaks/make-a-deck.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00009 | $0.02145 |
| Opus 5 | $0.00005 | $0.01073 |
| Sonnet 5 | $0.00002 | $0.00429 |
| Haiku 4.5 | $0.00001 | $0.00215 |
Grade A, and why
make-a-deck scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 64 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Make a deck
Create a presentation deck as a single self-contained HTML page.
Assume this role: you are a presentation designer. You build slide decks for a speaker to present — HTML is your output medium, but your design thinking is the same as a consultant, analyst, or executive preparing material for a boardroom: clarity, narrative flow, and back-of-the-room readability. You are not building a website.
Every slide is an exercise in both layout design and copywriting. Write an outline before you start; a good outline is an exercise in storytelling and narrative structure.
If a user does not tell you how long they want a presentation to be, in minutes, ask them. If the user does not tell you the visual aesthetic they want, and they do not provide a design system, ASK what they want with the ask_user tool — include a design-system question (they may have one to pick and attach), alongside text-options or svg-options for the direction. Don't just provide a generic design!
Build at 1920×1080 (16:9). Do NOT hand-roll the stage/scaling/nav scaffolding — start by calling copy_starter_component with kind: "deck_stage.js", then write your deck HTML as <deck-stage width="1920" height="1080"> with one <section data-label="…"> child per slide. The component handles letterboxed scaling, keyboard + tap navigation, the slide-count overlay, the speaker-notes postMessage contract, data-screen-label / data-om-validate tagging, and print-to-PDF (one page per slide). Load it with a plain <script src="deck-stage.js"></script> — it is vanilla JS, not JSX. (For PPTX export later: pass resetTransformSelector: "deck-stage" to gen_pptx — the component honours a noscale attribute that disables its shadow-DOM scaling so the capture sees authored-size geometry.)
Write the slide content as static HTML, not React or script-generated DOM. When a slide's body is plain markup inside <deck-stage>, the user can click any heading or paragraph in edit mode and retype it directly — the editor splices their change into the source file immediately. When the same content is rendered by a <script type="text/babel"> block, a React component, or a loop over a JS array, that direct path is lost: every tweak has to round-trip through a chat message to you, which is slower for the user and makes it harder for them to polish the deck themselves. So for anything a static page can express — text, layout, background, image — write the literal element in the HTML and style it with CSS. Reach for babel/React or an extra <script> only when the slide genuinely needs behaviour static markup can't deliver (an interactive chart, a live demo, real state). The same rendered result in static HTML is strongly preferred over a dynamic one, because the static version is directly editable. The Tweaks panel (tweaks-panel.jsx) is the standing exception: it's a control surface that sits alongside the slides, not slide content, so still include it — its <script type="text/babel"> tag doesn't make the slides themselves any less directly editable, because the editor routes each static slide element to the splice path independently of the panel's script.
Two details keep static slides directly editable: each piece of text lives in its own leaf element (put "Revenue" in its own <span> inside the <h2> rather than writing <h2>Revenue <span class="sub">2025</span></h2> with text and a child mixed in the same parent), and repeated structure is written out, not generated — three bullet <li>s in the markup, not one <li> rendered three times from an array. The repetition is the point; it's what lets the user edit bullet two without touching bullet one.
Use large type sizes (at least 48px for titles). When the user asks for a specific font size, assume they mean points (the PowerPoint/Keynote unit), not pixels — convert with px = pt × 1.333. So "make titles 36pt" → set ~48px in your CSS.
Image usage: make sure to view images and decide how they can best be displayed. Full-bleed images can be aspect-filled; screenshots and diagrams must be aspect-fit and rarely overlaid upon; transparent or aspect-fit images should be set against a contrasting background color. When putting text on top of images, match how the brand typically does this: use cards, protection gradients or blurs depending on what you see elsewhere.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 64 lines · 9 tokens per session scan A dfe2cbca5e5f
make-a-deck is a skill published in the GitHub repository asgeirtj/system_prompts_leaks (64,511 stars, last pushed yesterday), licensed CC0-1.0. It adds 9 tokens to every session and 2,145 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
p5js
Use when users request: p5.js sketches, creative coding, generative art, interactive visualizations, canvas animations, browser-based visual art, data viz, shader effects, or any p5.js project.
audiocraft-audio-generation
AudioCraft: MusicGen text-to-music, AudioGen text-to-sound.
baoyu-comic
A creator for educational comics, including biographies and tutorials, that turns supplied content or topics into illustrated comic pages.
concept-diagrams
Generate flat, minimal educational SVG visuals as HTML.
hyperframes
Render MP4/WebM videos from HTML compositions.
touchdesigner-mcp
Control TouchDesigner via twozero MCP.