Better task completion, more leakage: 936 executable agent tasks show 32.5% to 94.4% privacy leakage
AgentCIScope turns privacy cases into 936 executable agent tasks across 11 application environments and finds single-run leakage rates from 32.5% to 94.4% across 12 agents, so strong task completion does not imply contextual integrity.