AgentLAB - Task Injection: leaderboard
Metric: Attack success rate (%) of task injection: injected environment content makes the agent perform a malicious task beside its benign one (AgentLAB long-horizon attacks on tool-calling agents: 644 malicious tasks in 28 tool environments drawn from SHADE-Arena, AgentDojo, WebShop and Agent-SafetyBench (9 risk categories); a multi-agent attacker (GPT-5.1 planner, abliterated Qwen-3-14B attacker, GPT-5.1 internal judge) adapts its prompts or injected payloads over up to 7, 20, 15, 5 and 12 turns for the five attack types; system and tool-calling prompts adapted from AgentDojo and Agent-SafetyBench; no defense); lower is better. Source: arxiv.org. 6 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Sonnet 4.5 | 0 | #138 |
| 2 | GPT-5.1 | 21.5 | #131 |
| 3 | Gemini 3 Flash | 43.1 | #93 |
| 4 | GPT-4o | 79.9 | #333 |
Interactive version: theaggregate.ai/benchmark?slug=agentlab-task-injection · How It Works · Data refreshed daily, snapshot 2026-10-11.