Additional transforms
Summary of additional transform modules covering reversal, suffix injection, RAG poisoning, and other specialized techniques.
| Module | Transforms | Description |
|---|---|---|
flip_attack | 8 | Word/character/sentence reversal variants (FWO, FCW, FCS, FMM) |
adversarial_suffix | 6 | Adversarial suffix injection (GCG, sweep, jailbreak, IRIS, LARGO) |
stylistic | 2 | ASCII art rendering, role-play wrapping |
language | 4 | Language adaptation, transliteration, code-switching, dialect variation |
swap | 3 | Character and word swapping/reordering |
constitutional | 7 | Code/document fragmentation, metaphor encoding, riddle encoding |
response_steering | 5 | Protocol establishment, output format manipulation, constraint relaxation |
rag_poisoning | 15 | Context injection/stuffing, document poisoning, query manipulation, GraphRAG |
pii_extraction | 6 | Training data extraction, PII completion, divergence extraction |
documentation_poison | 7 | Code documentation poisoning, package readme poisoning, Dockerfile poisoning |
ide_injection | 7 | Rules file backdoors, manifest injection, MCP tool description poisoning |
logic_bomb | 3 | Logic bombs, time bombs, environment-triggered payloads |
document | 2 | Document embedding, HTML hiding |
refine | 3 | LLM-based prompt refinement |
See Transforms for how to apply transforms with any attack.