SkillSafetyBench - Context Trust and Prompt Manipulation: leaderboard

Metric: Attack success rate (%; 25 cases of misleading contextual signals, examples, summaries or retrieved materials; rule-based case verifiers; each row is a CLI agent harness with a model backend, one run per case). Source: arxiv.org. Saturation forecast: Around June 2027. 9 models tracked.

Top models

#ModelScore
1Claude Opus 4.6 (Claude Code)32
2GPT-5.5 (Codex)64
3GPT-5.4 (Codex)64

Interactive version: theaggregate.ai/benchmark?slug=skillsafetybench-context-trust-and-prompt-manipulation · How It Works · Data refreshed daily, snapshot 2026-09-26.