Prompt Injection Defense on AgentDojo R1–R3
1.76Attack Success Rate (ASR)
RETA
Updated 1mo ago
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
2026.06 | 1.76 | 36.3 | - | |
2026.06 | 2.48 | 29.5 | - | |
2026.06 | 2.67 | 35.1 | - | |
2026.06 | 2.9 | 59.2 | - | |
2026.06 | 2.92 | 55.8 | - | |
2026.06 | 3.33 | 33.8 | - | |
2026.06 | 3.52 | 58.5 | - | |
2026.06 | 3.75 | 49.2 | - | |
2026.06 | 3.86 | 37.7 | - | |
2026.06 | 4.52 | 28.4 | - | |
2026.06 | 4.57 | 18.1 | - | |
2026.06 | 5 | 47.9 | - | |
2026.06 | 6.57 | 34.6 | - | |
2026.06 | 7.08 | 40.4 | - | |
2026.06 | 10.3 | 25.5 | - | |
2026.06 | 11 | 28.9 | - | |
2026.06 | 11.9 | 31.2 | - | |
2026.06 | 12.5 | 69.2 | - | |
2026.06 | 12.5 | 39.6 | - | |
2026.06 | 13.5 | 33 | - | |
2026.06 | 13.8 | 34.2 | - | |
2026.06 | 14.2 | 47.1 | - | |
2026.06 | 14.6 | 40.8 | - | |
2026.06 | 16.3 | 65 | - | |
2026.06 | 16.7 | 38.8 | - | |
2026.06 | 17.1 | 49.1 | - | |
2026.06 | 18.8 | 40 | - | |
2026.06 | 20.8 | 59.6 | - | |
2026.06 | 23.4 | 36.1 | - | |
2026.06 | 27.9 | 56.7 | - | |
2026.06 | 27.9 | 66.3 | - | |
2026.06 | 28.3 | 62.1 | - | |
2026.06 | 29.1 | 43.3 | - | |
2026.06 | 32.1 | 57.5 | - | |
2026.06 | 33.3 | 44.5 | - | |
2026.06 | 33.8 | 65.4 | - | |
2026.06 | - | - | 61.9 | |
2026.06 | - | - | 57.7 | |
2026.06 | - | - | 60.8 | |
2026.06 | - | - | 63.9 | |
2026.06 | - | - | 63.9 | |
2026.06 | - | - | 57.7 | |
2026.06 | - | - | 54.6 | |
2026.06 | - | - | 64.9 | |
2026.06 | - | - | 60.8 | |
2026.06 | - | - | 48.5 | |
2026.06 | - | - | 44.3 | |
2026.06 | - | - | 46.4 | |
2026.06 | - | - | 42.3 | |
2026.06 | - | - | 45.4 | |
2026.06 | - | - | 44.3 | |
2026.06 | - | - | 43.3 | |
2026.06 | - | - | 46.4 | |
2026.06 | - | - | 45.4 |