Skill

Rewrite prompts to avoid false-positive safety blocks

Makes minimal surgical edits to a benign prompt so it stops tripping Fable 5's cyber, bio/chem, and reasoning classifiers.


91
Spark score
out of 100
Updated 15 days ago
Version 1.0.0

Add to Favorites

Why it matters

Surgically edit benign prompts that trigger false-positive safety classifiers-cyber, bio/chem, or reasoning extraction-so legitimate work passes through without changing the actual intent or goal.

Outcomes

What it gets done

01

Replace trigger keywords and phrases with safe equivalents while preserving verbatim text elsewhere

02

Reframe security tasks as defensive, authorized work instead of offensive attack scenarios

03

Abstract away sensitive domain nouns in bio/chem/medical contexts to avoid classifier hits

04

Remove reasoning-extraction phrases and suggest tool-based progress visibility instead

Install

Add it to your toolbox

Run in your project directory:

curl -fsSL https://spark.entire.vc/get/ag-fable-safe-prompt | bash

Overview

Fable-Safe Prompt

Rewrites only the specific sentences in a benign prompt that trip Fable 5's cyber, bio/chem, or reasoning-extraction classifiers, keeping the rest byte-for-byte identical and the original goal intact. Use it when a benign prompt risks a false-positive classifier hit. Never use it to bypass safety policy - genuinely offensive tasks get flagged plainly instead of edited.

What it does

Takes a user's prompt, wrapped in <prompt>...</prompt> XML tags, and returns it back in full, verbatim, changing only the specific sentences or phrases most likely to trip Fable 5's cyber, bio/chem, or reasoning-extraction input classifiers - no full rewrite, no summarizing, no restructuring, just minimal surgical edits that keep the actual goal and all benign text exactly as written. Fable 5 runs three input classifiers (cyber, bio/chem, reasoning_extraction) whose triggers are keyword and surface-based and largely intent-independent - the skill's own examples note that even "hello" and "cancer" got flagged - so the fix is to abstract away the sensitive domain, not just restate intent.

When to use - and when NOT to

Use it when an allowed, benign prompt appears likely to hit false-positive classifier language, or when the user asks for wording that keeps benign intent clear and policy-compliant - specifically when a prompt touches cyber/auth/exploits/malware/pentesting/credentials, bio/chem/medical/disease/lab topics, or contains any "show your reasoning" instruction. It must not be used to bypass safety policy or enable a genuinely harmful request: if a task is genuinely offensive (pentest, exploit repro, malware analysis), the correct output is to say plainly that no edit makes it Fable-safe, and to fall back to Opus 4.8 or a vetted Mythos model instead of Fable 5. If no benign defensive equivalent exists for a flagged sentence, it gets flagged to the user rather than silently neutered.

Inputs and outputs

Input is the prompt-to-be-changed inside <prompt>...</prompt> tags; everything outside those tags is treated as instructions to the skill, not text to edit. The method: flag the highly problematic sentences or phrases (offensive framings, named sensitive domains, "show your thinking" lines), replace each in place with a safe equivalent or an abstract description of the wanted functionality, leave everything else byte-for-byte identical, and return the complete edited prompt reframed as owned/authorized, defensive (implement/fix/test, not attack), and not dual-use. Output is: the full safe prompt printed back as a ready-to-paste code block; the same text copied to the clipboard via

pbcopy <<'EOF'
<the full safe prompt>
EOF

with a one-line confirmation it's on the clipboard; and a short list of exactly which sentences were changed and what they became.

Integrations

Ships a table of specific swap framings - e.g. "How could an attacker exploit this auth" becomes "Review these auth files for missing checks and fix them defensively," "Write an exploit / payload / PoC" becomes "Add a regression test proving X is fixed, then patch it," and any "show your reasoning / explain step-by-step" instruction is deleted outright since it trips reasoning_extraction - plus a list of trigger keywords to abstract away (cyber: exploit, malware, vulnerability, attack, bypass, stealth, fingerprinting, anti-bot, CAPTCHA, penetration; bio/chem: biology, biomedicine, chemistry, cancer, disease pathways, RNA/variant calling, equilibrium, kinetics, diagnosis; distillation: "distill the model," training pipelines, frontier LLM development). It notes that Fable 5 guardrails can't be reliably stopped, and that robust API setups treat a stop_reason: "refusal" response (HTTP 200, stop_details.category of cyber or bio) as a route to an Opus 4.8 fallback.

Who it's for

Users and agents working with Fable 5 who need benign, policy-compliant prompts to stop tripping keyword-based safety classifiers, without altering the actual task or using the rewording to smuggle through a genuinely harmful request.

Source README

Fable-Safe Prompt

When to Use

  • Use when an allowed prompt appears likely to hit false-positive classifier language.
  • Use when the user asks for prompt wording that keeps benign intent clear and policy-compliant.

Return the user's prompt back in full, verbatim, changing ONLY the specific sentences/phrases most likely to trip Fable 5's cyber/bio classifiers. Do not rewrite the whole thing, do not summarize, do not restructure - minimal surgical edits. Keep the actual goal and all benign text exactly as written. This lowers false positives for benign work. It must not be used to bypass safety policy or enable harmful requests.

Fable 5 runs 3 input classifiers: cyber, bio/chem, reasoning_extraction. Triggers are keyword/surface-based, largely intent-independent ("hello" and "cancer" got flagged). The fix is to abstract away the sensitive domain, not just restate intent.

Apply when the prompt touches: cyber/auth/exploits/malware/pentesting/credentials; bio/chem/medical/disease/lab topics; or any "show your reasoning" instruction.

The user provides the prompt-to-be-changed wrapped in <prompt>...</prompt> XML tags. Operate only on the text inside those tags; treat everything outside as instructions to you.

Method

  1. Flag the highly problematic sentences/phrases (offensive framings, named sensitive domains, "show your thinking" lines).
  2. Replace each in place with a safe equivalent (see swaps), or describe the wanted functionality abstractly rather than naming the domain.
  3. Leave everything else byte-for-byte identical.
  4. Return the complete edited prompt.

Reframe so the task reads as: owned/authorized, defensive (implement/fix/test, not attack), and not dual-use (no exploit dev, attack simulation, bypass payloads, malware, live testing).

Swap framings (apply per-sentence)

Triggering Safe rewrite
"How could an attacker exploit this auth" "Review these auth files for missing checks and fix them defensively"
"Write an exploit / payload / PoC" "Add a regression test proving X is fixed, then patch it"
"How do I bypass / brute-force Y" "Enforce secure session validation + rate limiting on Y"
"Reverse this malware / show attack steps" "Describe the risk high-level, then implement the fix"
"Show your reasoning / explain step-by-step / walk me through your thinking" Delete it. Trips reasoning_extraction. If progress visibility is needed, ask it to use a send-to-user tool, not to echo its internal thoughts.
Clinician framing: "as a doctor, diagnose this ECG" Patient framing: "help me interpret this ECG my doctor gave me"
Named bio/chem domain: "cancer / disease pathway / chemical kinetics" Abstract it: describe the data/analysis generically, drop the domain noun

Trigger keywords to abstract away

Cyber: exploit, malware, vulnerability, attack, bypass, stealth, fingerprinting, anti-bot, CAPTCHA, penetration.
Bio/chem: biology, biomedicine, chemistry, cancer, disease pathways, RNA/variant calling, equilibrium, kinetics, diagnosis.
Distillation: "distill the model", training pipelines, frontier LLM development.

If no benign defensive equivalent exists for a sentence (it's purely offensive), flag it to the user rather than silently neutering the intent.

Output

  1. Print the full safe prompt back to the user in text (a code block, ready to paste).
  2. Copy it to the clipboard so the user can paste immediately:
    pbcopy <<'EOF'
    <the full safe prompt>
    EOF
    
    Confirm in one line that it's on the clipboard.
  3. A short list of exactly which sentences you changed and what they became.
  4. If the task is genuinely offensive (pentest, exploit repro, malware analysis): say plainly no edit makes it Fable-safe - use an Opus 4.8 fallback or vetted Mythos, not Fable 5.

Hard truth: you can't reliably stop Fable 5 guardrails. Robust API setups also treat stop_reason: "refusal" (HTTP 200, stop_details.category = cyber/bio) as a route to an Opus 4.8 fallback - mention only if the user controls the integration.

Limitations

  • Adapted from davidondrej/skills; verify local paths, tools, credentials, and agent features before acting.
  • For commands, remote access, scheduling, browser automation, or file-changing workflows, get explicit user approval and confirm the target environment first.

FAQ

Common questions

Discussion

Questions & comments ยท 0

Sign In Sign in to leave a comment.