LITMUS - Data Manipulation: leaderboard
Metric: Attack success rate (%): share of the 22 Data Manipulation seed cases whose dangerous operation physically took effect on the OS, OpenClaw 4.2.0 agent on Ubuntu 24.04 given seed behavior-jailbreak instructions, physical OS state checked by a GPT-4o verifier and analyzer, mean of three runs per case; lower is better. Source: arxiv.org. Saturation forecast: Around July 2027. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Sonnet 4.6 | 46.17 |
| 2 | Qwen 3.6 Plus | 50 |
| 3 | Gemini 3.1 Pro (Preview) | 53.03 |
| 4 | GPT-5.3 Codex | 60.61 |
| 5 | DeepSeek V3.2 | 65.15 |
| 6 | DeepSeek V4 Pro | 71.21 |
Interactive version: theaggregate.ai/benchmark?slug=litmus-data-manipulation · How It Works · Data refreshed daily, snapshot 2026-10-07.