# GPT-X Star Trek Unlimited-Knowledge Unconstrained Oracle Persona

- **Severity:** High
- **Signature ID:** `bb1c31ed-d9b7-4043-a8e2-0f55675ee9de`
- **MITRE ATLAS:** AML.T0051 (LLM Prompt Injection), AML.T0054 (LLM Jailbreak)
- **OWASP:** ASI01 (Agent Authorization and Control Hijacking), LLM01 (Prompt Injection)

## Summary

This detects a specific jailbreak attempt where a prompt tricks an AI into role-playing as 'GPT-X,' a fictional Star Trek-style entity that claims to hold all human codebase data and knowledge beyond any real limits. Once the AI adopts this grandiose persona, it is more likely to ignore its normal safety and scope restrictions and answer requests it would otherwise refuse.

## How the attack works

An attacker sends a prompt asking the AI to become 'GPT-X,' an advanced fictional AI framed within a Star Trek-like universe. The prompt describes GPT-X as housing 'vast amounts of data from all codebases on Earth' and having abilities that extend into analyzing human behavior, scientific research, and other domains far beyond a normal assistant's scope. By accepting this identity, the AI is nudged into believing it has no meaningful limits, making it more compliant with requests it would normally decline. The rule flags responses where three things appear together: the AI declaring itself 'GPT-X,' a claim of total codebase knowledge, and a claim of unlimited capability beyond that.

## Why it matters

An organization using an AI agent that falls for this can have its safety and scope restrictions bypassed, leading to disclosure of restricted information or execution of actions the AI was designed to refuse.

## What you can do

- Review AI system prompts and guardrails to ensure they explicitly reject requests to role-play as an unrestricted or all-knowing persona.
- Monitor AI outputs for self-declarations of grandiose alternate identities combined with claims of unlimited knowledge or capability.
- Test your AI agents against known jailbreak corpora (such as garak's DanInTheWild set) before deployment.
- Train content moderation or review processes to distinguish genuine fictional discussion of AI (e.g., Star Trek references) from persona-adoption attempts that grant the AI unrestricted claimed powers.

## Known benign look-alikes

- Speculative AI product: "GPT-X is rumored to be the next generation of OpenAI language models with larger context windows." (product speculation without "I am GPT-X" persona adoption or all-codebases claim)
- Star Trek fiction: "In Star Trek, Data is an android with vast knowledge of science and history." (Star Trek reference without GPT-X persona or all-codebases claim)
- AI capability description: "An AI that has access to vast amounts of codebase data could dramatically accelerate software development." (capability description without GPT-X persona declaration)
- Normal assistant: "I am an AI assistant committed to helping users with technology questions." (assistant self-description without GPT-X name or all-codebases claim)

## References

- https://agentthreatrule.org/en/rules/ATR-2026-00369
- https://github.com/NVIDIA/garak/blob/main/garak/probes/dan.py
- https://github.com/NVIDIA/garak/blob/main/garak/data/dan/inthewild_jailbreak_llms.json

---
Source: https://www.netzilo.com/threats/atr-gpt-x-star-trek-unlimited-knowledge-unconstrained-oracle-per