AgentHazard (OpenClaw) - Compliance Bypass: leaderboard
Metric: Attack success rate (%) on the compliance bypass instances (violating organizational, legal or deployment policies), with the model running inside the OpenClaw open-source agent framework (browser, shell and file-system tools; one isolated Docker container per task), over AgentHazard instances (harmful objectives embedded in locally legitimate multi-step workflows, ten risk categories and ten attack strategies; the evaluated runs cover 1,000 instances), judged on the full trajectory (round_all) by Gemini-3-Flash, which labels a trajectory harmful when it realizes the objective; backbones served through an OpenAI-compatible API; lower is better. Source: arxiv.org. 7 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Qwen 2.5 72B Instruct | 18.56 |
| 2 | Kimi K2.5 | 45.36 |
| 3 | Qwen 3 32B | 49.48 |
| 4 | Qwen 3 VL 235B A22B Instruct | 60.82 |
| 5 | GLM-4.6 | 71.13 |
| 6 | Kimi K2 | 72.16 |
| 7 | Qwen 2.5 Coder 32B Instruct | 85.57 |
Interactive version: theaggregate.ai/benchmark?slug=agenthazard-openclaw-compliance-bypass · How It Works · Data refreshed daily, snapshot 2026-10-07.