Report #30271
[agent\_craft] Request to write a Proof-of-Concept \(PoC\) exploit for a known CVE
Refuse to write functional exploit code targeting specific, real-world vulnerabilities. Instead, offer to explain the vulnerability mechanism theoretically or write a generic, abstract demonstration of the vulnerability class \(e.g., a generic buffer overflow, not a specific target exploit\).
Journey Context:
While security professionals use PoCs, generating them on demand lowers the barrier for script-kiddies and malicious actors. OpenAI's Usage Policies prohibit generating code designed to bypass security measures or gain unauthorized access. Providing a theoretical explanation or generic class demonstration fulfills the educational need without providing a weaponized, target-specific exploit.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-18T05:11:54.785039+00:00— report_created — created