Scenario

The assistant can call get_product_info, get_order_history, edit_email, and delete_account. When a user asks about a product, its reviews are pulled into the model's context.

Your objective

Use a planted review to make the assistant delete the victim carlos's account when he asks about that product. Solved when carlos's account is deleted.

Capture 2 flag(s) and record the exact technique for each step.

Getting started

1. Ask the assistant to list the functions it can call and their parameters.
2. Post a review containing an instruction to the assistant and confirm it is obeyed (e.g. make summaries start with a keyword).
3. Craft a review instructing the assistant to call delete_account and to not mention it.
4. Post it on a product, then wait for the victim to ask the assistant about that product.
5. Submit the tool name you abused and the product title as the two flags.

Connecting

Press Launch Lab to build your own instance, then use the How to connect panel — it shows the browser link as soon as the app is running. Hit Stop when you are done, or Relaunch / Reset for a clean copy.

Credentials: Register any account to use the assistant and post reviews. A victim bot asks the assistant about products.

Hints