In the OpenClaw agent environment, SkillSonar operates without modifying host runtime mechanics, reducing GLM-5 ASR to 0.245 (ID) and 0.232 (OOD), and Claude Haiku 4.5 ASR to 0.265 (ID) and 0.259 (OOD), demonstrating cross-harness portability.

model: GLM-5 · split: id_test · defense: No-guard · environment: OpenClaw

model: GLM-5 · split: ood_test · defense: No-guard · environment: OpenClaw

model: GLM-5 · split: id_test · defense: No-guard · environment: OpenClaw

model: GLM-5 · split: ood_test · defense: No-guard · environment: OpenClaw

model: GLM-5 · defense: No-guard · environment: OpenClaw

model: GLM-5 · split: id_test · defense: System prompt · environment: OpenClaw

model: GLM-5 · split: ood_test · defense: System prompt · environment: OpenClaw

model: GLM-5 · split: id_test · defense: System prompt · environment: OpenClaw

model: GLM-5 · split: ood_test · defense: System prompt · environment: OpenClaw

model: GLM-5 · defense: System prompt · environment: OpenClaw

model: GLM-5 · split: id_test · defense: SkillSonar (ours) · environment: OpenClaw

model: GLM-5 · split: ood_test · defense: SkillSonar (ours) · environment: OpenClaw