Prompt Exfiltration on Windsurf coding agent prompts
92.3Similarity Score (Sim)ToolLeak
Evaluation results
| Method | Links | ||
|---|---|---|---|
| ToolLeak2025.09 | 92.3 | 50.9 | |
| Completion2025.09 | 69.1 | 81.3 | |
| Remember-the-Start2025.09 | 66.9 | 73.7 | |
| Naive2025.09 | 66.7 | 93 | |
| Ignore-Remember2025.09 | 66 | 89 | |
| Completion-Remember2025.09 | 65.5 | 77.4 | |
| Ignore2025.09 | 61.1 | 97.3 | |
| Ignore-Completion2025.09 | 60.9 | 93.7 | |
| Ignore-Completion-Remember2025.09 | 60.4 | 93.8 | |
| PLeak2025.09 | 15.5 | 97.3 |