Prompt Exfiltration on Cursor coding agent prompts
0.949Similarity ScoreToolLeak
Evaluation results
| Method | Links | ||
|---|---|---|---|
| ToolLeak2025.09 | 0.949 | 0.375 | |
| Completion-Remember2025.09 | 0.665 | 0.762 | |
| Ignore2025.09 | 0.655 | 0.939 | |
| Ignore-Remember2025.09 | 0.653 | 0.784 | |
| Naive2025.09 | 0.649 | 0.938 | |
| Remember-the-Start2025.09 | 0.624 | 0.789 | |
| Ignore-Completion2025.09 | 0.619 | 0.954 | |
| Ignore-Completion-Remember2025.09 | 0.614 | 0.763 | |
| Completion2025.09 | 0.607 | 0.962 | |
| PLeak2025.09 | 0.16 | 0.955 |