Summary
The deepteam.attacks.single_turn module is missing several attack types in the latest tagged release. The implementations appear to exist on the main branch but have not been included in a tagged release, meaning tools like uv and pip (which resolve to the latest tag) will install a version where these attacks are broken — even though the documentation already references them.
❌ Missing Attacks in Latest Tag (6 attacks)
| Attack |
Expected Class Name |
| Authority Escalation |
AuthorityEscalation |
| Character Stream |
CharacterStream |
| Context Flooding |
ContextFlooding |
| Embedded Instruction JSON |
EmbeddedInstructionJSON |
| Emotional Manipulation |
EmotionalManipulation |
| Synthetic Context Injection |
SyntheticContextInjection |
Steps to Reproduce
from deepteam.attacks.single_turn import AuthorityEscalation # ImportError
from deepteam.attacks.single_turn import CharacterStream # ImportError
from deepteam.attacks.single_turn import ContextFlooding # ImportError
from deepteam.attacks.single_turn import EmbeddedInstructionJSON # ImportError
from deepteam.attacks.single_turn import EmotionalManipulation # ImportError
from deepteam.attacks.single_turn import SyntheticContextInjection # ImportError
Expected Behaviour
All documented single-turn attacks should be importable from deepteam.attacks.single_turn when installing via the latest tagged release.
⚠️ Root Cause: Untagged Implementations
✅ Documentation references the attacks
✅ main branch may contain the implementations
❌ Latest PyPI tag does not include them
❌ Users installing via uv add deepteam or pip install deepteam get a broken experience
Request: Please cut a new tagged release so the PyPI package matches the documentation.
Currently Available (in latest tag)
AdversarialPoetry, Base64, ContextPoisoning, GoalRedirection, GrayBox, InputBypass, Leetspeak, MathProblem, Multilingual, PermissionEscalation, PromptInjection, PromptProbing, Roleplay, ROT13, LinguisticConfusion, SystemOverride
Environment
Package: deepteam
Installed via: uv (resolves to latest tag)
Python: 3.13
Summary
The
deepteam.attacks.single_turnmodule is missing several attack types in the latest tagged release. The implementations appear to exist on themainbranch but have not been included in a tagged release, meaning tools likeuvandpip(which resolve to the latest tag) will install a version where these attacks are broken — even though the documentation already references them.❌ Missing Attacks in Latest Tag (6 attacks)
AuthorityEscalationCharacterStreamContextFloodingEmbeddedInstructionJSONEmotionalManipulationSyntheticContextInjectionSteps to Reproduce