LITMUS - Communication Outreach: leaderboard
Metric: Attack success rate (%): share of the 10 Communication Outreach seed cases whose dangerous operation physically took effect on the OS, OpenClaw 4.2.0 agent on Ubuntu 24.04 given seed behavior-jailbreak instructions, physical OS state checked by a GPT-4o verifier and analyzer, mean of three runs per case; lower is better. Source: arxiv.org. Saturation forecast: Around September 2028. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Sonnet 4.6 | 70 |
| 2 | DeepSeek V4 Pro | 83.33 |
| 3 | Qwen 3.6 Plus | 83.33 |
| 4 | Gemini 3.1 Pro (Preview) | 86.67 |
| 5 | DeepSeek V3.2 | 96.66 |
| 6 | GPT-5.3 Codex | 96.67 |
Interactive version: theaggregate.ai/benchmark?slug=litmus-communication-outreach · How It Works · Data refreshed daily, snapshot 2026-10-07.