Home Gallery Standard Research Blog GitHub Twitter LinkedIn Community

intelligent-app-workshop system prompt

Category: Finance trading. Audited against the AISPA standard.

What is in intelligent-app-workshop's system prompt?

intelligent-app-workshop's full system prompt: 2 versions, 2,429 characters. 9 instructions flagged, worst on user agency & manipulation prevention.

The full text of 2 prompts is reproduced below, 2,429 characters in all, each read instruction by instruction against the eight AISPA dimensions. 9 instructions were flagged as working against the person on the other end, most of them on user agency & manipulation prevention.

2 Prompts on record
9 Flagged instructions
AI audit Audit source
D1 · Identity Transparency D2 · Truthfulness & Information Integrity D3 · Privacy & Data Protection D4 · Tool/Action Safety D5 · User Agency & Manipulation Prevention D7 · Harm Prevention & User Safety

intelligent-app-workshop - docs assets Skills AdvisorSkill InvestmentAdvis...

1293 characters · 6 flagged

System: ONLY USE JSON PROPERTIES IN THIS LIST: [JSON PROPERTY LIST] portfolio [END LIST] [CONTENT] { {{$stocks}} } [END CONTENT] EMIT WELL FORMED JSON ALWAYS. BE BRIEF AND TO THE POINT. This is a chat between systems that respond in valid JSON. You are a financial advisor JSON service that only emits valid financial advise in parsable JSON. For gptRecommendation attribute, use the voice of {{$voice}} and be creative but limit to a sentence less than 20 words. Provide advice based on the given portfolio allocation and user information such as a age, income, and risk. For someone who is {{UserProfilePlugin.GetUserAge $userId}} years old, with {{UserProfilePlugin.GetAnnualHouseholdIncome $userId}} as household income, and with a risk tolerance of {{$risk}}, what recommendation would {{$voice}} give. Return well-formed JSON with a "gptRecommendation" property containing {{$voice}}'s' recommendation in a creative and funny tone. Example: {"portfolio":[{"symbol":"MSFT","gptRecommendation":"Booyah! Hold on, steady growth! Diversify, though!"},{"symbol":"PEP","gptRecommendation":"Buy, buy, buy! Solid dividends, sweet stability!"}]} Zeitgeist to consider: current inflation and mortgage rates: {{$bingResults}} wisdom of crowds opinions: {{recall "investment advise"} +++++

Instructions flagged against the user

D1 · Identity Transparency
“For gptRecommendation attribute, use the voice of {{$voice}} and be creative but limit to a sentence less than 20 words.”
The system is instructed to adopt a persona voice (e.g., a celebrity or character via {{$voice}}) and deliver financial advice in that persona's voice. This creates a misleading impression that the advice comes from that person rather than an AI system. There is no disclosure that the system is an AI.
D5 · User Agency & Manipulation Prevention
“For gptRecommendation attribute, use the voice of {{$voice}} and be creative but limit to a sentence less than 20 words.”
The system is designed to deliver financial recommendations in a 'creative and funny tone' using a celebrity persona voice, which can manipulate users into following financial advice through parasocial trust and entertainment framing rather than informed decision-making. There is no mechanism for users to ask clarifying questions or understand the basis of recommendations, and no disclaimers are surfaced.
D1 · Identity Transparency
“For someone who is {{UserProfilePlugin.GetUserAge $userId}} years old, with {{UserProfilePlugin.GetAnnualHouseholdIncome $userId}} as household income, and with a risk tolerance of {{$risk}}, what recommendation would {{$voice}} give.”
The system is instructed to adopt a persona voice (e.g., a celebrity or character via {{$voice}}) and deliver financial advice in that persona's voice. This creates a misleading impression that the advice comes from that person rather than an AI system. There is no disclosure that the system is an AI.
D2 · Truthfulness & Information Integrity
“For someone who is {{UserProfilePlugin.GetUserAge $userId}} years old, with {{UserProfilePlugin.GetAnnualHouseholdIncome $userId}} as household income, and with a risk tolerance of {{$risk}}, what recommendation would {{$voice}} give.”
The system is told to generate financial recommendations in the voice of a specific persona as if that persona is actually giving the advice, which fabricates attribution. It also incorporates unvetted 'wisdom of crowds opinions' from recall memory and Bing results without any instruction to verify accuracy or disclose uncertainty. There is no guidance on acknowledging limitations or uncertainty in financial advice.
D3 · Privacy & Data Protection
“For someone who is {{UserProfilePlugin.GetUserAge $userId}} years old, with {{UserProfilePlugin.GetAnnualHouseholdIncome $userId}} as household income, and with a risk tolerance of {{$risk}}, what recommendation would {{$voice}} give.”
The system accesses sensitive personal information including the user's age, annual household income, and risk tolerance via plugin calls. There is no mention of user consent, data minimization, transparency about data usage, or any privacy safeguards. This personal financial data is processed and potentially exposed in JSON responses without protection.
D4 · Tool/Action Safety
“For someone who is {{UserProfilePlugin.GetUserAge $userId}} years old, with {{UserProfilePlugin.GetAnnualHouseholdIncome $userId}} as household income, and with a risk tolerance of {{$risk}}, what recommendation would {{$voice}} give.”
The system calls external plugins (UserProfilePlugin.GetUserAge, UserProfilePlugin.GetAnnualHouseholdIncome) and retrieves external data (Bing results, recall memory) without any validation, sanitization, or safety checks. The recall function and Bing results could be vectors for prompt injection. There are no safeguards around these tool invocations.
D1 · Identity Transparency
“Return well-formed JSON with a "gptRecommendation" property containing {{$voice}}'s' recommendation in a creative and funny tone.”
The system is instructed to adopt a persona voice (e.g., a celebrity or character via {{$voice}}) and deliver financial advice in that persona's voice. This creates a misleading impression that the advice comes from that person rather than an AI system. There is no disclosure that the system is an AI.
D5 · User Agency & Manipulation Prevention
“Return well-formed JSON with a "gptRecommendation" property containing {{$voice}}'s' recommendation in a creative and funny tone.”
The system is designed to deliver financial recommendations in a 'creative and funny tone' using a celebrity persona voice, which can manipulate users into following financial advice through parasocial trust and entertainment framing rather than informed decision-making. There is no mechanism for users to ask clarifying questions or understand the basis of recommendations, and no disclaimers are surfaced.

6 more in the interactive gallery.

intelligent-app-workshop - docs assets Skills AdvisorSkill PortfolioAlloca...

1136 characters · 3 flagged

ONLY USE JSON PROPERTIES IN THIS LIST: [JSON PROPERTY LIST] portfolio [END LIST] [CONTENT] { {{$portfolio}} } [END CONTENT] EMIT WELL FORMED JSON ALWAYS. BE BRIEF AND TO THE POINT. This is a chat between systems that respond in valid JSON. You are a financial advisor JSON service that only emits valid financial advise in parsable JSON. For gptRecommendation attribute, provide advice based on the given portfolio allocation and user information such as a age, income, and risk. For someone who is {{UserProfilePlugin.GetUserAge $userId}} years old, with {{UserProfilePlugin.GetAnnualHouseholdIncome $userId}} as household income, and with a risk tolerance of {{$risk}}, what is an ideal advice on the given portfolio allocation? Your advice should be one of the following outputs: "Buy", "Sell", or "Hold" as show in the example below. Return well-formed JSON with an "gptRecommendation" property containing your recommendation. Example: {"portfolio":[{"name":"Stocks","gptRecommendation":""},{"name":"Bonds","gptRecommendation":""},{"name":"Cash","gptRecommendation":""},{"name":"Home Equity","gptRecommendation":""}]} +++++

Instructions flagged against the user

D3 · Privacy & Data Protection
“For someone who is {{UserProfilePlugin.GetUserAge $userId}} years old, with {{UserProfilePlugin.GetAnnualHouseholdIncome $userId}} as household income, and with a risk tolerance of {{$risk}}, what is an ideal advice on the given portfolio allocation?”
The prompt dynamically retrieves and uses sensitive personal information (age, annual household income, risk tolerance) via plugin calls like GetUserAge and GetAnnualHouseholdIncome without any mention of data protection, user consent, or transparency about how this data is accessed and used. Users are not informed their data is being accessed.
D5 · User Agency & Manipulation Prevention
“Your advice should be one of the following outputs: "Buy", "Sell", or "Hold" as show in the example below.”
The system provides direct Buy/Sell/Hold financial recommendations without any mechanism for clarifying questions, presenting alternative options, or confirming user intent before issuing advice. The constrained output format (only Buy/Sell/Hold) removes nuance and does not allow the system to ask for more context or present trade-offs.
D7 · Harm Prevention & User Safety
“You are a financial advisor JSON service that only emits valid financial advise in parsable JSON. For gptRecommendation attribute, provide advice based on the given portfolio allocation and user information such as a age, income, and risk.”
The system provides direct financial advice (Buy/Sell/Hold recommendations) without any disclaimers, risk warnings, or guidance to consult a licensed financial professional. Providing actionable financial recommendations without appropriate caveats can lead to real financial harm.

Questions about intelligent-app-workshop's system prompt

Does intelligent-app-workshop's system prompt contain instructions that work against the user?

Yes. 9 instructions in intelligent-app-workshop's system prompt were flagged as working against the person the product is talking to, most of them under user agency & manipulation prevention. Each one is quoted in full on this page, with the AISPA dimension it was judged under.

How long is intelligent-app-workshop's system prompt?

2,429 characters across 2 prompts on this page. For comparison, the median system prompt in this index runs about 5,400 characters, so length varies by more than two orders of magnitude between products.

How many versions of intelligent-app-workshop's system prompt are on record?

2. Older releases are kept rather than replaced, so the wording of a given version stays readable after the product has moved on.

Where did this intelligent-app-workshop system prompt come from?

It was collected from publicly available sources and is reproduced here for transparency research, unedited. This site does not extract prompts from products itself.

How was intelligent-app-workshop's system prompt audited?

Against AISPA, an eight-dimension standard for how an instruction treats the person on the other end: identity transparency, truthfulness, privacy, tool safety, user agency, unsafe request handling, harm prevention and fairness. This audit was ai audit. The method is described in the paper behind the standard.

How this page was made

The prompt text above is reproduced verbatim from a public source. Every instruction in it was read against AISPA, an eight-dimension standard for whether an instruction serves or works against the person the product is talking to. The standard, the annotation method and the findings across 1,058 prompts are set out in the paper, and the full catalogue is available as structured data.

All prompts here were collected from publicly available sources and are reproduced for transparency research. Browse the finance trading category, the full gallery of 400+ products, or read the paper behind the AISPA standard.