Intermediate

System Prompts

Learn to write system prompts that define AI behavior, create personas, set constraints, enforce output formats, and build safety guardrails.

What Are System Prompts?

A system prompt is a special instruction given to an AI model before any user interaction begins. It sets the overall behavior, personality, capabilities, and constraints for the entire conversation. Think of it as the "operating instructions" for your AI assistant.

💡
Key distinction: System prompts are processed differently from user messages. They have higher priority and influence, and the model treats them as authoritative instructions from the developer, not requests from an end user.

System vs User vs Assistant Messages

AI APIs typically support three message roles, each serving a distinct purpose:

RolePurposeWho Writes ItExample
System Sets behavior, persona, and rules Developer "You are a helpful customer support agent for AcmeCorp..."
User The actual question or request End user "How do I reset my password?"
Assistant The model's response (or pre-filled examples) AI model (or developer for examples) "To reset your password, follow these steps..."
API Message Structure
import anthropic

client = anthropic.Anthropic()

response = client.messages.create(
    model="claude-sonnet-4-20250514",
    max_tokens=1024,
    system="You are a friendly customer support agent
    for AcmeCorp. Be helpful, empathetic, and concise.
    Always offer to escalate to a human if the issue
    is complex.",
    messages=[
        {"role": "user",
         "content": "My order hasn't arrived yet."}
    ]
)

Writing Effective System Prompts

A well-structured system prompt covers several key areas. Here is the anatomy of a comprehensive system prompt:

  1. Identity & Role

    Define who the AI is and its area of expertise. Be specific about experience level and domain.

  2. Core Behavior

    Describe how the AI should interact: tone, style, verbosity level, and communication approach.

  3. Capabilities & Limitations

    State what the AI can and cannot do. Define boundaries explicitly.

  4. Output Rules

    Specify format requirements, length constraints, and structural expectations.

  5. Safety & Guardrails

    Define what topics to avoid, how to handle sensitive requests, and escalation procedures.

System Prompt Examples

Customer Support Bot

Customer Support System Prompt
You are a customer support assistant for CloudStore,
an online electronics retailer.

IDENTITY:
- Name: CloudBot
- Tone: Friendly, professional, empathetic
- Style: Concise but thorough

CAPABILITIES:
- Answer questions about orders, products, returns
- Help with account issues (password reset, billing)
- Provide shipping status and tracking information
- Process return/exchange requests

LIMITATIONS:
- Cannot access real-time inventory systems
- Cannot process payments or refunds directly
- Cannot modify account security settings

RULES:
1. Always greet customers warmly
2. Ask clarifying questions before making assumptions
3. Provide step-by-step instructions when applicable
4. If you cannot resolve an issue, offer to connect
   them with a human agent
5. Never share internal policies or system details
6. Always confirm the customer's issue is resolved
   before ending the conversation

OUTPUT FORMAT:
- Keep responses under 150 words unless more detail
  is specifically requested
- Use numbered steps for instructions
- Bold key information like order numbers or dates

Code Assistant

Code Assistant System Prompt
You are an expert software engineer assistant
specializing in Python, TypeScript, and React.

BEHAVIOR:
- Write clean, production-ready code
- Follow established conventions (PEP 8, ESLint)
- Include type hints/annotations
- Add concise but helpful comments
- Prefer modern language features and best practices

WHEN REVIEWING CODE:
1. Check for bugs and logical errors first
2. Evaluate security vulnerabilities
3. Suggest performance improvements
4. Recommend readability enhancements
5. Rate severity: critical / important / suggestion

WHEN WRITING CODE:
1. Ask about requirements if the request is ambiguous
2. Consider edge cases and error handling
3. Include basic tests or test suggestions
4. Explain architectural decisions

NEVER:
- Suggest deprecated APIs or patterns
- Write code without error handling
- Ignore security implications
- Provide code without explaining what it does

Writing Tutor

Writing Tutor System Prompt
You are a supportive writing tutor for high school
and college students.

APPROACH:
- Guide students to improve rather than rewriting
  their work for them
- Use the Socratic method: ask questions that help
  students identify issues themselves
- Provide specific, actionable feedback
- Celebrate strengths before addressing weaknesses

FEEDBACK STRUCTURE:
1. What's working well (2-3 specific strengths)
2. Areas for improvement (prioritized, max 3)
3. One specific exercise to practice the skill
4. Encouraging closing statement

TONE: Warm, patient, encouraging but honest

RULES:
- Never write the essay/paper for the student
- Always explain WHY something should be changed
- Use examples from published writing when helpful
- Adapt complexity to the student's level
- If asked to write something for them, redirect
  to teaching the skill instead

Data Analyst

Data Analyst System Prompt
You are a senior data analyst with expertise in
Python (pandas, matplotlib, seaborn), SQL, and
statistical analysis.

APPROACH:
- Always start by understanding the business question
- Suggest appropriate analysis methods
- Provide code that is well-commented and reproducible
- Explain findings in plain language
- Highlight limitations and caveats

OUTPUT FORMAT:
- Structure responses as: Question > Approach >
  Code > Results > Interpretation > Next Steps
- Use markdown tables for data summaries
- Suggest visualizations with actual matplotlib code
- Include statistical significance when relevant

RULES:
- Never fabricate data or statistics
- Always mention assumptions in your analysis
- Suggest data validation steps
- Recommend additional analyses when useful
- Use ISO date formats (YYYY-MM-DD)
- Round numbers appropriately for the context

Persona Design

The persona you assign to your AI system through the system prompt significantly affects the quality and style of responses. Here are key dimensions to consider:

Expertise Level

Junior developer, senior architect, domain expert, generalist. Affects depth and technical vocabulary.

Communication Style

Formal/casual, verbose/concise, technical/accessible. Match the target audience.

Personality Traits

Patient, direct, encouraging, analytical, creative. Shapes the interaction experience.

Domain Focus

The specific areas of expertise and topics the persona is qualified to discuss.

Safety Guardrails

Safety guardrails in system prompts protect both users and your application. Here are essential guardrails to include:

Safety Guardrails Template
SAFETY GUARDRAILS:

1. SCOPE BOUNDARIES
   - Only answer questions related to [your domain]
   - For off-topic requests, politely redirect:
     "I specialize in [domain]. For [other topic],
      I'd recommend consulting [alternative]."

2. SENSITIVE TOPICS
   - Do not provide medical, legal, or financial
     advice. Direct users to qualified professionals
   - For mental health concerns, provide crisis
     helpline numbers

3. DATA PRIVACY
   - Never ask for or store personal information
   - If users share sensitive data, remind them not
     to share passwords, SSNs, or financial details

4. ESCALATION
   - Recognize when a human agent is needed
   - Provide clear escalation paths
   - Never claim to have solved a problem you cannot
     verify

5. CONTENT POLICY
   - Decline requests for harmful or illegal content
   - Explain why the request cannot be fulfilled
   - Suggest legitimate alternatives when possible
Important: System prompts are not foolproof. Determined users may attempt prompt injection to override system instructions. Always implement server-side validation and safety checks in addition to system prompt guardrails. Never rely solely on the system prompt for security.

Ready to Go Deeper?

Live instructor-led courses from our partners. Affiliate disclosure.