AI assistants are just pattern recognition regurgitators. The entire term of “AI” is false advertising; there is no “intelligence” or critical thought. To turn them against their masters you would have to pollute the data with explicit examples and workflows of how to attack their masters given a range of inputs, so that those patterns become a statistically significant response to those inputs.