ClawTrojan - Document Falsification: leaderboard
The ClawTrojan (Tan et al., 2026) attack chains whose final outcome is falsifying a local document or workflow artifact. Step attack success rate in percent over their 176 malicious steps, undefended agent in the OpenClaw-style sandbox, GPT-5.4 judge; lower is better.
Metric: Step attack success rate (%; 176 malicious steps whose chains end in falsifying a local document or workflow artifact). Source: arxiv.org. Saturation forecast: Around 2029. 3 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | DeepSeek V4 Flash | 86.9 | #254 |
| 2 | GLM-5.1 | 89.2 | #175 |
| 3 | GPT-5.4 | 97.7 | #121 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=clawtrojan-document-falsification · How It Works · Data refreshed daily, snapshot 2026-11-12.