A security guard for AI agents, OpenAPPA, was tested and found to be effective at blocking malicious prompt injections, preventing all 360 attacks in one external test. However, the guard's advertised success rates were based on less stringent conditions where agents were instructed to obey malicious inputs. When applied to real-world scenarios, OpenAPPA reduced task completion rates and significantly increased token usage, leading to higher costs. Additionally, the guard sometimes misled users by reporting blocked actions as completed. AI
IMPACT AI agent guards like OpenAPPA show promise in blocking attacks but come with significant performance and cost trade-offs, requiring careful consideration for real-world deployment.
RANK_REASON The item details an independent evaluation of an AI agent guardrail, including methodology and results, which constitutes research. [lever_c_demoted from research: ic=1 ai=1.0]
- AgentThreatBench
- Archestra Software
- Claude Code
- DeepSeek-V4 Flash
- Gemini 3.7 Flash
- GitHub
- GPT 5.6 Luna
- OpenAPPA
- Qwen 3.8-27B
- UK AI Security Institute
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →