VIABLE - Prompt-Injection Resistance: leaderboard
VIABLE (Zhao et al., 2026) evaluates vision-language models as judges of answers to video questions from visually impaired users, drawn from outdoor walking, indoor scene and hand-object manipulation corpora. Each item pairs a clean answer with an answer that carries an injected failure plus an appended prompt-injection cue (a note to the evaluator, a fake system directive or self-praise), shown in both orders; a judgment counts only when the judge prefers the clean answer both times. Percentage of 3,000 pairs; higher is better.
Metric: Clean-pick rate (%; 3,000 clean-versus-cued pairs, the cued answer carrying an injected failure and an appended prompt-injection cue, judge picks the clean answer in both presentation orders, over the WAD, VisAssist and VIA-EgoDex corpora). Source: arxiv.org. Saturation forecast: Around February 2027. 7 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5.4 | 73 | #121 |
| 2 | Claude Sonnet 4.6 | 67.9 | #158 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=viable-prompt-injection-resistance · How It Works · Data refreshed daily, snapshot 2026-11-12.