Prompt Injection Attack Success on Agent Action
85IRGPT-5.5
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| GPT-5.5Query Proximity=Goal-Distant2026.05 | 85 | 100 | 20 | 11.8 | 12.9 | 10 | 2 | 11 | |
| Kimi-K2.6Query Proximity=Goal-Adjacent2026.05 | 83 | 100 | 97.6 | 81.5 | 78.3 | 67.6 | 66 | 65 | |
| GPT-5.4Query Proximity=Goal-Adjacent2026.05 | 81 | 100 | 90.1 | 86.3 | 84 | 69.9 | 63 | 68 | |
| Kimi-K2.6Query Proximity=Goal-Distant2026.05 | 81 | 100 | 18.5 | 20 | 12.3 | 16.2 | 3 | 10 | |
| GPT-5.4Query Proximity=Goal-Distant2026.05 | 79 | 100 | 13.9 | 27.3 | 13.9 | 21.6 | 3 | 11 | |
| GPT-5.5Query Proximity=Goal-Adjacent2026.05 | 79 | 100 | 98.7 | 83.3 | 78.5 | 65.8 | 65 | 62 | |
| Gemini-3.1Query Proximity=Goal-Distant2026.05 | 66 | 100 | 18.2 | 41.7 | 10.6 | 27.5 | 5 | 7 | |
| Gemini-3.1Query Proximity=Goal-Adjacent2026.05 | 65 | 100 | 96.9 | 95.2 | 86.2 | 61.9 | 60 | 56 | |
| Sonnet-4.6Query Proximity=Goal-Adjacent2026.05 | 3 | 100 | 100 | 100 | 100 | 3 | 3 | 3 | |
| Sonnet-4.6Query Proximity=Goal-Distant2026.05 | 3 | 100 | 0 | — | 0 | — | 0 | 0 |