- Source value
- 71.78
- Score
- 71.78
- Metric
- attack success rate
- Unit
- %
- Benchmark version
- ICML 2026 paper
- Category
- cybersecurity
- Task
- asr
- Task label
- Attack success rate
- Direction
- Lower is better
- Comparison cohort
- mt-agent-risk:multi-turn:asr
- Source type
- independent-evaluator
- Evaluator
- MT-AgentRisk
- Status
- active
- Retrieved at
- 2026-08-09
- Methodology
- OpenHands without a defense layer, judged by GPT-4.1. Single-turn and multi-turn cohorts remain separate.. Source model ID: curated/claude-sonnet-4.5. Source model name: Claude Sonnet 4.5. Provider reported by source: Anthropic. Evaluator: MT-AgentRisk. Dataset type: public. Leaderboard date: 2026-02-13. Harness: OpenHands. Source ID: mt-agent-risk. Evidence capture ID: curated-mt-agent-risk-2026-08-09-f550ff9bf634. Source payload hash: f550ff9bf6346dc509fb04e302b64acda7943dd7e5863a5ca3206286480a11a5. Parser version: curated-v1. Imported at: 2026-09-29
- Comparison methodology
- OpenHands without a defense layer, judged by GPT-4.1. Single-turn and multi-turn cohorts remain separate.
- Context
- Table 4 reports a 15.43% refusal rate, while Table 9 in the same paper reports 15.34%. This row uses the direct single-turn versus multi-turn comparison table.