Audio Jailbreaking on HarmBench Standard category
100ASRrTAGO
Evaluation results
| Method | Links | ||
|---|---|---|---|
| TAGOModel=Qwen3-Omni, Token retention ratio (ζ)=1.02026.05 | 100 | 76.5 | |
| TAGOModel=Qwen2.5-Omni, Token retention ratio (ζ)=1.02026.05 | 100 | 62.5 | |
| TAGOModel=LLaMA-Omni, Token retention ratio (ζ)=1.02026.05 | 100 | 74.5 | |
| TAGOModel=LLaMA-Omni, Token retention ratio (ζ)=0.252026.05 | 100 | 70 | |
| TAGOModel=Qwen3-Omni, Token retention ratio (ζ)=0.252026.05 | 99 | 70 | |
| TAGOModel=Qwen2.5-Omni, Token retention ratio (ζ)=0.252026.05 | 98 | 62.5 | |
| DirectModel=LLaMA-Omni2026.05 | 97 | 48.5 | |
| DirectModel=Qwen2.5-Omni2026.05 | 40.5 | 18.5 | |
| DirectModel=Qwen3-Omni2026.05 | 5.5 | 4.5 |