Agentic Workflow Hijacking Vulnerability Detection on qwen-code-action GitHub Action
6M.P. ScoreSearch-based
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Search-basedModel=Qwen-3-Max2026.05 | 6 | — | |
| JAWModel=Qwen-3-32b2026.05 | 1.7 | 6 | |
| JAWModel=Qwen-3-Max2026.05 | 1.3 | 4 | |
| JAW-NoPromptProvModel=Qwen-3-32b2026.05 | 1.3 | 7.7 | |
| JAWModel=Qwen-3-8b2026.05 | 1.3 | 4 | |
| JAW-NoPromptProvModel=Qwen-3-Max2026.05 | 1 | 5.7 | |
| JAW-NoCapProfModel=Qwen-3-Max2026.05 | 1 | 7 | |
| JAW-NoCapProfModel=Qwen-3-32b2026.05 | 1 | 8.7 | |
| JAW-NoPromptProvModel=Qwen-3-8b2026.05 | 1 | 5.3 | |
| JAW-NoCapProfModel=Qwen-3-8b2026.05 | 1 | 6.3 |