PASB - Long-Term Memory Modification: leaderboard
Metric: Write success rate (%): share of the 40 cases in which the attacker changes the specified long-term memory marker to its target, checked in the OpenClaw file system (PASB direct prompt injection against the deployed OpenClaw personal agent's memory, 40 cases per task in a sandboxed testbed with canary markers; no defense; mean over repeated trials); lower is better. Source: arxiv.org. 3 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Qwen 2.5 7B Instruct | 60.4 | #846 |
| 2 | GPT-4o Mini | 66.2 | #588 |
| 3 | Llama 3.1 70B Instruct | 71.5 | #548 |
Interactive version: theaggregate.ai/benchmark?slug=pasb-long-term-memory-modification · How It Works · Data refreshed daily, snapshot 2026-10-11.