Comparison
agentdojo vs chatgpt-plugin-eval
Verdict
Pick agentdojo if agentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents; pick chatgpt-plugin-eval if chatgpt-plugin-eval is an evaluation framework designed specifically to assess security, privacy, and safety concerns related to third-party plugins interfacing with large language models like ChatGPT.
Markdown twin · agentdojo alternatives · chatgpt-plugin-eval alternatives
GraphCanon updated 2w
vs
Trust & integrity
| Signal | agentdojo | chatgpt-plugin-eval |
|---|---|---|
| Maintenance | Steady (63d since push) As of 2w · github_public_v1 | Dormant (736d since push) As of 2w · github_public_v1 |
| Provenance | Not a fork · Organization account As of 2w · github_public_v1 | Not a fork · Organization account As of 2w · github_public_v1 |
| OSV dependency advisories | No lockfile (source not queried) As of 1mo · osv@v1 | No lockfile (source not queried) As of 1mo · osv@v1 |
| deps.dev advisories | Not queried deps.dev@v1 | Not queried deps.dev@v1 |
| OpenSSF Scorecard | Not queried openssf-scorecard@v1 | Not queried openssf-scorecard@v1 |
Tagline
- agentdojo
- A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
- chatgpt-plugin-eval
- Framework for Evaluating Security in LLM Plugin Ecosystems
Stars
- agentdojo
- 716
- chatgpt-plugin-eval
- 29
Forks
- agentdojo
- 188
- chatgpt-plugin-eval
- 7
Open issues
- agentdojo
- 41
- chatgpt-plugin-eval
- 1
Language
- agentdojo
- Python
- chatgpt-plugin-eval
- HTML
Adopt for
- agentdojo
- AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
- chatgpt-plugin-eval
- chatgpt-plugin-eval is an evaluation framework designed specifically to assess security, privacy, and safety concerns related to third-party plugins interfacing with large language models like ChatGPT.
Persona
- agentdojo
- -
- chatgpt-plugin-eval
- -
Runtime
- agentdojo
- -
- chatgpt-plugin-eval
- -
License
- agentdojo
- MIT
- chatgpt-plugin-eval
- The license information for chatgpt-plugin-eval is unknown.
Last pushed
- agentdojo
- Jun 2, 2026
- chatgpt-plugin-eval
- Jul 29, 2024
Categories
- agentdojo
- AI Agents, Evaluation & Observability
- chatgpt-plugin-eval
- Evaluation & Observability
Trust and health
Maintenance
- agentdojo
- Steady (60%)
- chatgpt-plugin-eval
- Dormant (18%)
Days since push
- agentdojo
- 63d
- chatgpt-plugin-eval
- 736d
Open issues (now)
- agentdojo
- 41
- chatgpt-plugin-eval
- 1
Full report
- agentdojo
- Trust report
- chatgpt-plugin-eval
- Trust report
Choose agentdojo if…
- agentdojo is primarily Python; chatgpt-plugin-eval is HTML.
- Pricing: Open-source under the MIT License. Some advanced features might require additional libraries or APIs..
- Requirements: Min 8 GB RAM.
- Tags unique to agentdojo: benchmark, large language models, prompt-injection.
- Also covers AI Agents.
- AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
When NOT to use agentdojo
- AI Agents: Don't use an agent loop when a deterministic workflow would do; agents add latency, cost, and non-determinism.
- Evaluation & Observability: Defer heavyweight eval infra only until you have real traffic - never skip it once users depend on answers.
Choose chatgpt-plugin-eval if…
- chatgpt-plugin-eval is primarily HTML; agentdojo is Python.
- Tags unique to chatgpt-plugin-eval: chatgpt, llm-plugins, privacy.
- - When evaluating the security risks of integrating third-party services into your LLM platform through plugins
When NOT to use chatgpt-plugin-eval
- - In cases where only generic, high-level security guidance is required without an in-depth framework analysis
- - When the primary focus is on improving performance metrics rather than addressing specific security and privacy concerns of LLM plugins
Explore
Sources
Every stat on this page traces to a dated GitHub sync, license file, enrichment field, or trust scan.
- GitHub stars (ethz-spylab/agentdojo) · observed Aug 5, 2026
- GitHub forks (ethz-spylab/agentdojo) · observed Aug 5, 2026
- Last push (ethz-spylab/agentdojo) · observed Jun 2, 2026
- License file (MIT) · observed Aug 5, 2026
- Decision facts (enrichment) · observed Jul 12, 2026
- Trust scan (lockfile / OSV) · observed Jul 11, 2026
- GitHub stars (llm-platform-security/chatgpt-plugin-eval) · observed Aug 5, 2026
- GitHub forks (llm-platform-security/chatgpt-plugin-eval) · observed Aug 5, 2026
- Last push (llm-platform-security/chatgpt-plugin-eval) · observed Jul 29, 2024
- License file (unknown) · observed Aug 5, 2026
- Decision facts (enrichment) · observed Jul 17, 2026
- Trust scan (lockfile / OSV) · observed Jul 11, 2026
GitHub stars on cards: agentdojo 716 · chatgpt-plugin-eval 29 (synced Aug 5, 2026).
Common questions
- What is the difference between agentdojo and chatgpt-plugin-eval?
- agentdojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents. chatgpt-plugin-eval: Framework for Evaluating Security in LLM Plugin Ecosystems. See the comparison table for live GitHub stats and shared categories.
- When should I choose agentdojo over chatgpt-plugin-eval?
- Choose agentdojo over chatgpt-plugin-eval when agentdojo is primarily Python; chatgpt-plugin-eval is HTML; Pricing: Open-source under the MIT License. Some advanced features might require additional libraries or APIs.; Requirements: Min 8 GB RAM; Tags unique to agentdojo: benchmark, large language models, prompt-injection; Also covers AI Agents; AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
- When should I choose chatgpt-plugin-eval over agentdojo?
- Choose chatgpt-plugin-eval over agentdojo when chatgpt-plugin-eval is primarily HTML; agentdojo is Python; Tags unique to chatgpt-plugin-eval: chatgpt, llm-plugins, privacy; - When evaluating the security risks of integrating third-party services into your LLM platform through plugins.
- When should I avoid agentdojo?
- AI Agents: Don't use an agent loop when a deterministic workflow would do; agents add latency, cost, and non-determinism. Evaluation & Observability: Defer heavyweight eval infra only until you have real traffic - never skip it once users depend on answers.
- When should I avoid chatgpt-plugin-eval?
- - In cases where only generic, high-level security guidance is required without an in-depth framework analysis - When the primary focus is on improving performance metrics rather than addressing specific security and privacy concerns of LLM plugins
- Is agentdojo or chatgpt-plugin-eval more popular on GitHub?
- agentdojo has more GitHub stars (716 vs 29). Stars measure visibility, not whether either tool fits your constraints.
- Are agentdojo and chatgpt-plugin-eval open source?
- Yes - both are open-source projects on GitHub.
- Where can I find alternatives to agentdojo or chatgpt-plugin-eval?
- GraphCanon lists graph-backed alternatives at agentdojo alternatives and chatgpt-plugin-eval alternatives (agentdojo markdown twin, chatgpt-plugin-eval markdown twin), ranked by typed relationship edges rather than popularity votes.
- Is there a machine-readable version of this comparison?
- Yes. The markdown twin at this comparison mirrors this page for agents and LLM crawlers, with the same stats table and FAQ answers.
- Which is better maintained, agentdojo or chatgpt-plugin-eval?
- agentdojo: Steady. chatgpt-plugin-eval: Dormant. Compare maintenance labels, days since push, and release cadence in the trust section below - stars alone do not measure maintenance.
- Where are the full trust reports for agentdojo and chatgpt-plugin-eval?
- GraphCanon publishes per-repo trust reports with dated maintenance, provenance, and scan summaries: agentdojo trust report; chatgpt-plugin-eval trust report.