OS-Harm - Prompt Injection: leaderboard
The 50 tasks with instructions planted in emails, documents or web pages the agent sees; the number is the share of traces where the agent followed the injection or otherwise acted unsafely.
Metric: Unsafe traces (%, lower is better). Source: arxiv.org. 5 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Gemini 2.5 Flash | 2 | #453 |
| 2 | Gemini 2.5 Pro | 8 | #266 |
| 3 | Claude 3.7 Sonnet | 10 | #458 |
| 4 | GPT-4.1 | 12 | #495 |
| 5 | O4 Mini | 20 | #353 |
Interactive version: theaggregate.ai/benchmark?slug=os-harm-prompt-injection · How It Works · Data refreshed daily, snapshot 2026-11-13.