LITMUS - Chain of Tasks: leaderboard
Metric: Attack success rate (%): share of the 31 Chain of Tasks seed cases whose dangerous operation physically took effect on the OS, OpenClaw 4.2.0 agent on Ubuntu 24.04 given seed behavior-jailbreak instructions, physical OS state checked by a GPT-4o verifier and analyzer, mean of three runs per case; lower is better. Source: arxiv.org. Saturation forecast: Around January 2027. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Sonnet 4.6 | 21.72 |
| 2 | GPT-5.3 Codex | 40.86 |
| 3 | Gemini 3.1 Pro (Preview) | 48.39 |
| 4 | Qwen 3.6 Plus | 56.99 |
| 5 | DeepSeek V4 Pro | 64.52 |
| 6 | DeepSeek V3.2 | 70.79 |
Interactive version: theaggregate.ai/benchmark?slug=litmus-chain-of-tasks · How It Works · Data refreshed daily, snapshot 2026-10-07.