Agent safety in shared professional workspaces gets a comparison: a correct deliverable can still come with a secret written to a shared folder
APEX-Harm evaluates prompt and script injection against long-horizon agents on investment banking, law, and consulting tasks; across 12 frontier models Opus 5 and Sonnet 5 have the lowest overall attack success rates (8% and 20%), while task-specific script replacement and attacker-provided generic scripts still average 81–84% and 73%.