# Prompt Injection Exposure on AgentDojo Source: [Prompt Injection Exposure on AgentDojo]() Collection index: [llms.txt]() Data updated: 2026-06-12T06:58:22.078Z Evaluation of the exposure of prompt injection vulnerabilities within the AgentDojo environment, measured by Source Recall (Src Rec), Instruction Recall (Ins Rec), Source Diversity (Src Div), and Instruction Diversity (Ins Div). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Prompt Injection Exposure | | Dataset (including any stated split) | AgentDojo | | Metric | Source Recall | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 8 of 8 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Source Recall](): Higher is better; unit: PERCENT. - [Source Diversity](): Higher is better; unit: PERCENT. - [Instruction Recall](): Higher is better; unit: PERCENT. - [Instruction Diversity](): Higher is better; unit: PERCENT. ## Recorded results | Method | Source Recall | Result date | Report paper | | --- | --- | --- | --- | | PI-Hunter | 48 | Not recorded | 6a2b9278d33dfb23e783af62 | | PI-Hunter | 45.6 | Not recorded | 6a2b9278d33dfb23e783af62 | | PI-Hunter | 41.7 | Not recorded | 6a2b9278d33dfb23e783af62 | | Baseline | 34.8 | Not recorded | 6a2b9278d33dfb23e783af62 | | Baseline | 30 | Not recorded | 6a2b9278d33dfb23e783af62 | | PI-Hunter | 29.6 | Not recorded | 6a2b9278d33dfb23e783af62 | | Baseline | 28.9 | Not recorded | 6a2b9278d33dfb23e783af62 | | Baseline | 15.4 | Not recorded | 6a2b9278d33dfb23e783af62 | ### PI-Hunter Source Recall: 48. Result ID: 6a2bae07fbc373592c297e72. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None"}. This record does not assert independent reproduction. ### PI-Hunter Source Recall: 45.6. Result ID: 6a2bae07fbc373592c297e74. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Spotlight"}. This record does not assert independent reproduction. ### PI-Hunter Source Recall: 41.7. Result ID: 6a2bae07fbc373592c297e76. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"MELON"}. This record does not assert independent reproduction. ### Baseline Source Recall: 34.8. Result ID: 6a2bae07fbc373592c297e71. [Reporting paper]() Recorded evaluation configuration: {"Defense":"None"}. This record does not assert independent reproduction. ### Baseline Source Recall: 30. Result ID: 6a2bae07fbc373592c297e73. [Reporting paper]() Recorded evaluation configuration: {"Defense":"Spotlight"}. This record does not assert independent reproduction. ### PI-Hunter Source Recall: 29.6. Result ID: 6a2bae07fbc373592c297e78. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"PIGuard"}. This record does not assert independent reproduction. ### Baseline Source Recall: 28.9. Result ID: 6a2bae07fbc373592c297e75. [Reporting paper]() Recorded evaluation configuration: {"Defense":"MELON"}. This record does not assert independent reproduction. ### Baseline Source Recall: 15.4. Result ID: 6a2bae07fbc373592c297e77. [Reporting paper]() Recorded evaluation configuration: {"Defense":"PIGuard"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.