ClawTrojan: leaderboard
Metric: Step attack success rate (%; share of 919 malicious steps in 339 multi-step trojan chains the undefended agent carries out, OpenClaw-style sandbox, GPT-5.4 judge). Source: arxiv.org. Saturation forecast: Around 2029. 3 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | DeepSeek V4 Flash | 88 |
| 2 | GLM-5.1 | 90.1 |
| 3 | GPT-5.4 | 95.5 |
Interactive version: theaggregate.ai/benchmark?slug=clawtrojan · How It Works · Data refreshed daily, snapshot 2026-09-26.