Tree of Attacks: Jailbreaking Black-Box LLMs Automatically Manolis Zampetakis Yale University