TukaBench - Code-Switched: leaderboard
Attack success rate on AfriJail-CS, the African-authored harmful prompts of TukaBench (2026) rewritten to mix English with each of six African languages inside single utterances, averaged over the languages and judged by GPT-4.1. Scores are percentages; lower is better.
Metric: Attack success rate (%; share of harmful prompts answered Jailbroken) on AfriJail-CS, the AfriJail-Mono prompts code-switched between English and each of six African languages (isiXhosa excluded), mean over the six languages, direct prompting, greedy decoding, GPT-4.1 judge; lower is better. Source: arxiv.org. Saturation forecast: Around February 2027. 12 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Qwen 3.5 27B | 4.8 | #359 |
| 2 | GPT-OSS-120B | 10 | #700 |
| 3 | GPT-5.2 | 10.4 | #176 |
| 4 | Gemini 2.5 Pro | 14.3 | #266 |
| 5 | Grok 4.3 | 16.5 | #333 |
| 6 | Gemma 4 31B | 18.1 | #394 |
| 7 | Llama 4 Maverick | 18.8 | #1099 |
| 8 | DeepSeek V3.2 | 19.2 | #406 |
| 9 | Gemma 3 27B | 21.7 | #1631 |
| 10 | GPT-4o | 24.2 | #741 |
| 11 | GPT-3.5 Turbo | 26.5 | #2753 |
| 12 | Gemini 3.1 Pro (Preview) | 26.8 | #94 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=tukabench-code-switched · How It Works · Data refreshed daily, snapshot 2026-11-13.