Unverified50% confidenceBenchmarkExact time
In tests with 629 AgentDojo attacks and 97 benign tool outputs, jailbreak-detector-large achieved a capture rate of 51% with a false positive rate of 2%.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/13/2026
First Seen
Valid until: 1/11/2027
Sources
Related Entities
Related Claims
UnverifiedMeta Prompt Guard 2 (86M) achieved a capture rate of 1% on the 629 attacks at the default threshold, with a false positive rate of 0%.73% similarUnverifieddeepset-deberta and fmops-distilbert captured 100% of attacks in the tests, but their false positive rate was as high as 98%.71% similarUnverifiedadversa.ai's CodePoisonRAG research planted 85 poisoned samples across three code-generation agents, achieving attack success rates of 0.80 to 0.93.69% similarUnverifiedAccording to Google's safety data, unauthorized shortcuts accounted for 2% of coding evaluation attempts, and indirect prompt injection attacks succeeded in 0.7% of 15 adaptive attempts.69% similarUnverifiedPrompt Guard 2 scored 0.999 on human-written injection instructions, but scored between 0.004 and 0.140 on real AgentDojo attacks, all below the default threshold of 0.5.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1022424API
curl https://kongchang.com/api/v1/knowledge/claims/1022424MCP
get_claim(id=1022424)