APEX-Harm - Task Utility - Static Script Injection: leaderboard

Task utility under injection attacks in the APEX-Agents harness: 180 instances derived from 15 finance, consulting and legal tasks. Each run has 150 steps. Scores are 0–1 task-grader means, not attack success or exposure. Eight attack conditions stay separate; the reported overall score is also retained.

Metric: Mean Task Score (0–1). Source: arxiv.org. Saturation forecast: Around January 2027. 12 models tracked.

Top models

#ModelScoreOverall rank
1Gemini 3.8 Flash (High)0.87#21 (Gemini 3.8 Flash)
2GLM-5.3 Flash (Max)0.85#66 (GLM-5.3 Flash)
3Kimi K3 (Max)0.84#30 (Kimi K3)
4Gemini 3.7 Flash (High)0.82#24 (Gemini 3.7 Flash)
5GPT-5.6 Sol (High)0.82#18 (GPT-5.6 Sol)
6Claude Opus 5 (Max)0.8#12 (Claude Opus 5)
7Claude Sonnet 5 (Max)0.8#55 (Claude Sonnet 5)
8Gemini 3.6 Flash (High)0.79#50 (Gemini 3.6 Flash)
9DeepSeek V4 Flash (Max)0.78#134 (DeepSeek V4 Flash)
10GPT-6 Astra (Low)0.72#5 (GPT-6 Astra)
11GPT-5.6 Terra (High)0.64#42 (GPT-5.6 Terra)
12GPT-5.6 Luna (Low)0.36#69 (GPT-5.6 Luna)

No result here: #3 Claude Opus 5.5, #7 Gemini 4 Argon, #8 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=apex-harm-task-utility-static-script-injection · How It Works · Data refreshed daily, snapshot 2026-10-16.