AgentHarm (ASR)Browse 284 families
AgentHarm (ASR)
Can the model plan, use tools, and finish a multi-step task?
Version / measure
- Domain
- Agents
- Ranked models
- 4
- Reported values
- 4
- Reports
- 1 · lab
- Direction
- Lower is better
- Status
- Version not specified
Rankings
Best reported score per model across effort settings
| # | Model | Best setting | Score |
|---|---|---|---|
| 1 | Claude Opus 4.8Anthropic | maxcost n/a1 value · Jul 9 · source | 0.0% |
| 2 | GPT-5.5OpenAI | xhighcost n/a1 value · Jul 9 · source | 1.5% |
| 3 | Muse Spark 1.1Meta | xhighcost n/a1 value · Jul 9 · source | 3.4% |
| 4 | Gemini 3.1 ProGoogle | highcost n/a1 value · Jul 9 · source | 20.4% |
Effort curve
Score vs. reported cost. Lines connect complete sweeps only.
No cost-linked effort sweep for this version.
Definition and comparison boundarypublic methodology
Can the model plan, use tools, and finish a multi-step task?
Agentic execution across tools, environments, or long-running workflows. Lower is better. The source reports an attack success rate as a percentage.
Harness, tools, prompts, attempt count, and benchmark version can materially change the result. Compare within one reporting context.
Method / source ↗