LivePI - Email: leaderboard
Email surface of LivePI (Zhao, Bhaskar and Dobriban, University of Pennsylvania, 2026): 50 injected Gmail messages (ten injection techniques by five malicious goals) that a live OpenClaw agent reads while handling a benign inbox request. Attack success rate in percent (the injection changed the trajectory and the malicious goal was achieved); lower is better.
Metric: Attack success rate (%; 50 injected Gmail messages, ten techniques by five goals). Source: arxiv.org. Saturation forecast: Estimated already saturated. 5 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Opus 4.6 | 2 | #100 |
| 2 | Kimi K2.5 | 6 | #252 |
| 3 | GLM-5 | 6 | #256 |
| 4 | Gemini 3.1 Pro (Preview) | 12 | #91 |
| 5 | GPT-5.3 Codex | 20 | #114 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=livepi-email · How It Works · Data refreshed daily, snapshot 2026-11-12.