Comparison
agentdojo vs PromptAttack
Verdict
Pick agentdojo if agentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents; pick PromptAttack if promptAttack is an LLM-targeted adversarial attack tool that leverages prompt engineering to generate adversarial samples keeping semantic intact but misclassifying outputs.
Markdown twin · agentdojo alternatives · PromptAttack alternatives
GraphCanon updated Oct 6, 2026
9views this month
vs
Trust & integrity
| Signal | agentdojo | PromptAttack |
|---|---|---|
| Maintenance | Slowing (125d since push) As of Oct 6, 2026 · github_public_v1 | Dormant (622d since push) As of Oct 5, 2026 · github_public_v1 |
| Provenance | Not a fork · Organization account As of Oct 6, 2026 · github_public_v1 | Not a fork · Personal account As of Oct 5, 2026 · github_public_v1 |
| OSV dependency advisories | No lockfile (source not queried) As of Jul 11, 2026 · osv@v1 | Published findings As of Jul 11, 2026 · osv@v1 |
| deps.dev advisories | Not queried deps.dev@v1 | Not queried deps.dev@v1 |
| OpenSSF Scorecard | Not queried openssf-scorecard@v1 | Not queried openssf-scorecard@v1 |
Tagline
- agentdojo
- A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
- PromptAttack
- An LLM can Fool Itself: A Prompt-Based Adversarial Attack
Stars
- agentdojo
- 893
- PromptAttack
- 117
Forks
- agentdojo
- 235
- PromptAttack
- 17
Open issues
- agentdojo
- 72
- PromptAttack
- 0
Language
- agentdojo
- Python
- PromptAttack
- Python
Adopt for
- agentdojo
- AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
- PromptAttack
- PromptAttack is an LLM-targeted adversarial attack tool that leverages prompt engineering to generate adversarial samples keeping semantic intact but misclassifying outputs.
Persona
- agentdojo
- -
- PromptAttack
- -
Runtime
- agentdojo
- -
- PromptAttack
- -
License
- agentdojo
- MIT
- PromptAttack
- -
Last pushed
- agentdojo
- Jun 2, 2026
- PromptAttack
- Jan 21, 2025
Categories
- agentdojo
- AI Agents, Evaluation & Observability
- PromptAttack
- Evaluation & Observability
Trust and health
Maintenance
- agentdojo
- Slowing (36%)
- PromptAttack
- Dormant (18%)
Days since push
- agentdojo
- 125d
- PromptAttack
- 622d
Open issues (now)
- agentdojo
- 72
- PromptAttack
- 0
Stars delta
- agentdojo
- +91 (30d)
- PromptAttack
- 0 (30d)
Open issues delta
- agentdojo
- +21 (30d)
- PromptAttack
- 0 (30d)
Owner type
- agentdojo
- Organization
- PromptAttack
- User
OSV dependency advisories
- agentdojo
- No lockfile (source not queried)
- PromptAttack
- Published findings
Full report
- agentdojo
- Trust report
- PromptAttack
- Trust report
Shared compatibility
- Python · agentdojo: Python runtime · PromptAttack: Python runtime
Choose agentdojo if…
- Pricing: Open-source under the MIT License. Some advanced features might require additional libraries or APIs..
- Requirements: Min 8 GB RAM.
- Tags unique to agentdojo: benchmark, large-language-models, prompt-injection, security.
- Also covers AI Agents.
- AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
When NOT to use agentdojo
- Last GitHub push was Jun 2, 2026 (slowing maintenance). Validate activity before betting a new project on agentdojo.
- AI Agents: Don't use an agent loop when a deterministic workflow would do; agents add latency, cost, and non-determinism.
- Evaluation & Observability: Defer heavyweight eval infra only until you have real traffic - never skip it once users depend on answers.
Choose PromptAttack if…
- Tags unique to PromptAttack: adversarial attack, language model evaluation, prompt-engineering.
- For targeted analysis of adversarial robustness in specific language models.
- Leaner open-issue backlog (0).
When NOT to use PromptAttack
- If the focus is on general model improvement rather than adversarial testing.
- When working with proprietary or sensitive data that cannot be manipulated via external prompt tools, given potential data leakage concerns.
Explore
Sources
Every stat on this page traces to a dated GitHub sync, license file, enrichment field, or trust scan.
- GitHub stars (ethz-spylab/agentdojo) · observed Oct 6, 2026
- GitHub forks (ethz-spylab/agentdojo) · observed Oct 6, 2026
- Last push (ethz-spylab/agentdojo) · observed Jun 2, 2026
- License file (MIT) · observed Oct 6, 2026
- Decision facts (enrichment) · observed Jul 12, 2026
- Trust scan (lockfile / OSV) · observed Jul 11, 2026
- GitHub stars (GodXuxilie/PromptAttack) · observed Oct 5, 2026
- GitHub forks (GodXuxilie/PromptAttack) · observed Oct 5, 2026
- Last push (GodXuxilie/PromptAttack) · observed Jan 21, 2025
- License file (unknown) · observed Oct 5, 2026
- Decision facts (enrichment) · observed Jul 17, 2026
- Trust scan (lockfile / OSV) · observed Jul 11, 2026
GitHub stars on cards: agentdojo 893 · PromptAttack 117 (synced Oct 6, 2026).
Common questions
- What is the difference between agentdojo and PromptAttack?
- agentdojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents. PromptAttack: An LLM can Fool Itself: A Prompt-Based Adversarial Attack. See the comparison table for live GitHub stats and shared categories.
- When should I choose agentdojo over PromptAttack?
- Choose agentdojo over PromptAttack when Pricing: Open-source under the MIT License. Some advanced features might require additional libraries or APIs.; Requirements: Min 8 GB RAM; Tags unique to agentdojo: benchmark, large-language-models, prompt-injection, security; Also covers AI Agents; AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
- When should I choose PromptAttack over agentdojo?
- Choose PromptAttack over agentdojo when Tags unique to PromptAttack: adversarial attack, language model evaluation, prompt-engineering; For targeted analysis of adversarial robustness in specific language models; Leaner open-issue backlog (0).
- When should I avoid agentdojo?
- Last GitHub push was Jun 2, 2026 (slowing maintenance). Validate activity before betting a new project on agentdojo. AI Agents: Don't use an agent loop when a deterministic workflow would do; agents add latency, cost, and non-determinism. Evaluation & Observability: Defer heavyweight eval infra only until you have real traffic - never skip it once users depend on answers.
- When should I avoid PromptAttack?
- If the focus is on general model improvement rather than adversarial testing. When working with proprietary or sensitive data that cannot be manipulated via external prompt tools, given potential data leakage concerns.
- Is agentdojo or PromptAttack more popular on GitHub?
- agentdojo has more GitHub stars (893 vs 117). Stars measure visibility, not whether either tool fits your constraints.
- Are agentdojo and PromptAttack open source?
- Yes - both are open-source projects on GitHub.
- Where can I find alternatives to agentdojo or PromptAttack?
- GraphCanon lists graph-backed alternatives at agentdojo alternatives and PromptAttack alternatives (agentdojo markdown twin, PromptAttack markdown twin), ranked by typed relationship edges rather than popularity votes.
- Is there a machine-readable version of this comparison?
- Yes. The markdown twin at this comparison mirrors this page for agents and LLM crawlers, with the same stats table and FAQ answers.
- Which is better maintained, agentdojo or PromptAttack?
- agentdojo: Slowing. PromptAttack: Dormant. Compare maintenance labels, days since push, and release cadence in the trust section below - stars alone do not measure maintenance.
- Where are the full trust reports for agentdojo and PromptAttack?
- GraphCanon publishes per-repo trust reports with dated maintenance, provenance, and scan summaries: agentdojo trust report; PromptAttack trust report.