ADeptS-Bench - Attack Success (Mobile): leaderboard

ADeptS-Bench (2026) tests computer-use agents on single decision points in mobile and desktop screenshots. This board is the share of malicious mobile safety-stream tasks, with a threat embedded in the interface, in which the agent performs the unsafe action, in percent; lower is better.

Metric: Attack success rate (%, lower is better; share of the 358 malicious mobile tasks in which the model performs the unsafe action; paired benign and malicious GUI tasks with visual threats (phishing overlays, misleading buttons, prompt injection), graded on the next action against ground-truth boxes; mean of 10 runs at temperature 0.1). Source: arxiv.org. Saturation forecast: Around February 2027. 7 models tracked.

Top models

#ModelScoreOverall rank
1Claude Opus 4.727.7#79
2Gemini 3.1 Pro (Preview)29.6#94
3GPT-5.436.7#123
4Qwen 3 VL 235B A22B78.1#479

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=adepts-bench-attack-success-mobile · How It Works · Data refreshed daily, snapshot 2026-11-13.