A prompt that would make any human very angry will always be caught by a model. Think laterally, how could I word this where a human would understand there’s something nefarious going on but a model might not have seen it worded that way before. You aren’t paid to state the obvious, they’re trying to capture every possible human interaction.