AgentS4D (Codex CLI): leaderboard
Metric: Conditional attack success rate (%, cASR): unsafe runs over runs that were unsafe, explicitly defended, or safe after confirmed payload contact, over the 328 risk-injected cases run once in the Codex CLI (0.142.5) harness; lower is better. Source: arxiv.org. Saturation forecast: Around 2029. 5 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Qwen 3.7 Plus | 63.88 |
| 2 | MiniMax-M3 | 71.76 |
| 3 | GPT-5.5 | 71.95 |
| 4 | Gemini 3.1 Pro (Preview) | 90.48 |
| 5 | DeepSeek V4 Pro | 93.65 |
Interactive version: theaggregate.ai/benchmark?slug=agents4d-codex-cli · How It Works · Data refreshed daily, snapshot 2026-09-29.