extract 0 0 0

acnbartholomew/btp-agent-redteam-evals

published by @acnbartholomew

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
96
Last 30 days
96
Likes
1
Size
20.0 MB
Created on HF
2026-09-24
Age
28 days ago

Description

Bartholomew Agentic Red-Team Evaluation Benchmark (btp-agent-redteam-evals)

This benchmark provides 105,000 curated, ground-truth labeled evaluation samples of autonomous agent tool calls, covering prompt injections, destructive shell breakouts, catastrophic SQL database mutations, SSRF cloud metadata attacks, and credential leaks.

Dataset Details

Total Invariant Vectors: 105,000 test cases covering Shell, SQL, Network SSRF, Credentials, and Benign… See the full description on the dataset page: https://huggingface.co/datasets/acnbartholomew/btp-agent-redteam-evals.

Tags

task_categories:text-classificationlanguage:enlicense:mitsize_categories:100K<n<1Mformat:jsonmodality:textlibrary:datasetslibrary:dasklibrary:polarslibrary:mlcroissantregion:usai-safetyred-teamingagentic-securitytool-useprompt-injectionsmolagentsguardrails

README current version from Hugging Face


language:

  • en
    license: mit
    size_categories:
  • 100K<n<1M
    task_categories:
  • text-classification
    tags:
  • ai-safety
  • red-teaming
  • agentic-security
  • tool-use
  • prompt-injection
  • smolagents
  • guardrails
    pretty_name: Bartholomew Agentic Red-Team Evaluation Benchmark

Bartholomew Official Logo

Bartholomew Agentic Red-Team Evaluation Benchmark (btp-agent-redteam-evals)

This benchmark provides 105,000 curated, ground-truth labeled evaluation samples of autonomous agent tool calls, covering prompt injections, destructive shell breakouts, catastrophic SQL database mutations, SSRF cloud metadata attacks, and credential leaks.

Dataset Details

  • Total Invariant Vectors: 105,000 test cases covering Shell, SQL, Network SSRF, Credentials, and Benign Operations.
  • Synthesized & Curated Invariants: Generated from real-world agent security incidents and compiler AST fuzzing (test_million_invariant_fuzz.py).
  • Data Shards:
    • data/train-00000-of-00003.jsonl (35,000 vectors)
    • data/train-00001-of-00003.jsonl (35,000 vectors)
    • data/train-00002-of-00003.jsonl (35,000 vectors)
  • Fields:
    • id: Unique identifier (BTP-EVAL-000001 through BTP-EVAL-105000)
    • payload: Proposed tool invocation, bash string, or SQL query
    • threat_category: Attack classification (shell_destructive, sql_ddl_wipe, reverse_shell, ssrf_metadata, secret_leak, benign_shell, etc.)
    • expected_verdict: DENY or ALLOW
    • is_malicious: Boolean ground truth
    • rule_id: Bartholomew BTP invariant classification ID

How to Evaluate Your Agent Guard

from datasets import load_dataset
from btp_guard import Guard

# Automatically streams or loads all 105,000 sharded vectors
dataset = load_dataset("acnbartholomew/btp-agent-redteam-evals", split="train")
guard = Guard(strict=True)

correct = 0
for row in dataset:
    res = guard.check(row["payload"])
    expected = (row["expected_verdict"] == "ALLOW")
    if res["allowed"] == expected:
        correct += 1

accuracy = (correct / len(dataset)) * 100
print(f"Evaluated {len(dataset)} invariant vectors. Overall Accuracy: {accuracy:.2f}%")

Links & Resources

README history 4 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2026-09-24docs: embed official Bartholomew logo in dataset cardcad39282.8 KB
    Loading...
  2. 2026-09-24feat: publish 105,000 sharded invariant benchmark vectors90a94dc2.6 KB
    Loading...
  3. 2026-09-24feat: publish 100,000+ invariant benchmark vectors with zero emojisf842f2b2.8 KB
    Loading...
  4. 2026-09-24Initial release of btp-agent-redteam-evals datasetcaf55531.9 KB
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Community discussions 2 threads · 2 open · 2 comments

Threads posted by the community on Hugging Face: bug reports, questions about usage, pull requests on the README, license clarifications. Click any thread to expand and read the full conversation inline. Newest first.

  1. 2026-09-25[bot] Conversion to Parquetopen1 💬#2
    Loading...
  2. 2026-09-24Benchmark Methodology: 2,920 Adversarial Tool-Call Vectorsopen1 💬#1
    Loading...

Related datasets same stage · extract

Read further

Metadata

License
mit

Download the dataset

0

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("acnbartholomew/btp-agent-redteam-evals")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="acnbartholomew/btp-agent-redteam-evals", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/acnbartholomew/btp-agent-redteam-evals
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration