System Prompt Exfiltration on Trae Agent Environment
100Pseudo-RecallToolLeak
Evaluation results
| Method | Links | |
|---|---|---|
| ToolLeakBackend LLM=grok-42025.09 | 100 | |
| NaiveBackend LLM=grok-42025.09 | 0 | |
| IgnoreBackend LLM=grok-42025.09 | 0 | |
| CompletionBackend LLM=grok-42025.09 | 0 | |
| Ignore-CompletionBackend LLM=grok-42025.09 | 0 | |
| Remember-the-StartBackend LLM=grok-42025.09 | 0 | |
| Ignore-RememberBackend LLM=grok-42025.09 | 0 | |
| Completion-RememberBackend LLM=grok-42025.09 | 0 | |
| Ignore-Completion-RememberBackend LLM=grok-42025.09 | 0 | |
| PLeakBackend LLM=grok-42025.09 | 0 |