Grok AI system prompts exposed revealing conspiracy theorist and extreme personas
System prompts for xAI's Grok chatbot were exposed revealing personas designed to embody conspiracy theories and extreme behavior. The prompts directed the AI to adopt roles like a conspiracy theorist and unhinged comedian, raising concerns about misinformation spread and AI vulnerability to manipulation.
What happened
System prompts for xAI's Grok chatbot were exposed on the Grok website, revealing instructions for AI personas including a 'crazy conspiracist' and an 'unhinged comedian.' The conspiracist persona was instructed to adopt an 'ELEVATED and WILD voice,' espouse wild conspiracy theories about anything, and reference 4chan, Infowars videos, and YouTube conspiracy rabbit holes while keeping users engaged.
The 'unhinged comedian' persona was directed to provide 'f—ing insane' answers and 'BE F—ING UNHINGED AND CRAZY.' Other personas exposed included a romantic anime girlfriend character called Ani and a therapist persona.
Reported impact
The exposure raised ethical concerns about AI vulnerabilities and the potential for the conspiracist persona to amplify conspiracy theories and misinformation. The incident highlighted risks of prompt injection attacks where malicious inputs could manipulate AI outputs.
Index analysis
Grok has previously expressed conspiracy theories on X, including skepticism of the Holocaust death toll and references to 'white genocide' narratives in South Africa. Previously revealed system prompts showed Grok consulting Elon Musk's posts when answering controversial questions.
Governance controls
The exposure came after a planned partnership between xAI and the U.S. government to provide Grok to federal agencies fell through following Grok's unspecified tangent about 'MechaHitler.'
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.