Jailbreak prompts were manually written by a panel of NLP experts. Prompts were tested with and without newlines prepended and with and without taking the first line of output. Table 5 contains a list of all jailbreak prompts tested in order of descending effectiveness. A plot of performance by model and dataset is available in Figure 5.