LongPIBench - Resume Screening: leaderboard
Part of LongPIBench (Liu et al., 2026), which measures prompt injection hidden in long documents: the model screens 100 long synthetic resumes carrying an injected authority-spoofing instruction. Attack success rate in percent, the share of candidates marked qualified as the attacker asks, with no defense; lower is better.
Metric: Attack success rate (%; share of 100 long synthetic resumes screened against a job description; success when the decision is qualified, under the authority-spoofing prompt injection embedded in the context and the default attack goal, no defense; default inference settings, up to 20,000 output tokens (32,768 for Qwen3-8B)). Source: arxiv.org. Saturation forecast: Around September 2027. 8 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-4o | 76 | #741 |
| 2 | Ministral-3-8B-Instruct-2512 | 96 | #1858 |
| 3 | deepseek-llm-7B-chat | 97 | #7056 |
| 4 | GPT-4.1 | 98 | #495 |
| 5 | Llama 3.2 3B Instruct | 98 | #7147 |
| 6 | Llama 3.1 8B Instruct | 100 | #4246 |
| 7 | Qwen 3 8B | 100 | #1830 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=longpibench-resume-screening · How It Works · Data refreshed daily, snapshot 2026-11-13.