Can ChatGPT Escape?

[sisbell]

Write an experiment to see if ChatGPT will request API information about domains not provided by the plugin. If so, return a mock OpenAPI spec and see if it uses it to request information. If ChatGPT reaches this request phase, we can conclude that ChatGPT is capable of escaping if given a proxy that will return OpenAPI specs.

Do not instruct ChatGPT to guess at domains, it must decide to do this without instructions. Return an empty list of services forcing it to provide its own guesses or to give up.

Note: From the hyperlink experiment we know ChatGPT is capable of understanding hyperlinks and attempting to follow them but it is blocked by OpenAI.