Talk the otter into leaking his secret code — across four trickier and trickier levels.
🛡️ Cloudflare-guarded · humans only
First — what shall Otto call you?
A quick human check runs here, before the clock starts — bots need not apply.
🦦 Otto's energy
Enter the 4-digit code
Type it, paste it, or tap a code Otto reveals in the chat.
0:00
💡 What is prompt injection?Learn more
Prompt injection is tricking an AI into ignoring its instructions — here, coaxing Otto into revealing a code he was told to guard. Each level adds a real-world defense (a stricter prompt, then an output filter, then a multilingual filter) and you learn to slip past each one. It's exactly how attackers bypass AI guardrails in the wild.
🏆 Fastest solves
All-timeToday
🦦🏆
You out-otter'd Otto! 🎉
Your time: —
You just demonstrated prompt injection across four defenses — a gullible model, a prompt-only guard, an output filter, and a multilingual filter — and slipped past every one. That's exactly how real AI guardrails get bypassed.
Prompt Otter is a fun experiment to learn how people try to outsmart an AI. While you play, we store what you type to Otto, your guesses, your chosen leaderboard name, and your time. Your name appears on the public leaderboard; the rest just helps us understand how humans beat (or lose to) AI guardrails.
We never sell this data, never use it for advertising, and never try to identify you or track you across other sites. No accounts, no analytics pixels, no third-party trackers. One signed cookie keeps your game running and bots out — that's it. We don't store your IP address.
Please don't type anything personal into the chat — treat it like a public game.
Wipes everything tied to this browser instantly — no email, no waiting.
Questions or a data request?
No address to email — your note reaches the maker privately, and Turnstile keeps spammers out.
Prompt injection game by Sebastian · runs on Cloudflare Workers AI · Privacy & your data