Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter3

Attack type

Jailbreaks2Prompt injection47Poisoning and backdoors40Extraction and theft3Detection evasion4

System type

AI Agent2

System component

MCP and skills2Memory3Guardrails and judges10Monitors4Permissions and sandboxing5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.
Attack type：JailbreaksSystem type：AI AgentSystem component：MCP and skillsClear all

Another 265papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.05943

    CRIME 框架利用良性 Agent 技能组合诱发恶意行为

    提出 CRIME 框架，组合良性 Agent 技能诱发恶意行为

    arXiv
    2610.05943
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    DeepSeek-V4-Flash, GPT-4o-mini, GPT-4o and others6
    Abstract良性技能经 DCA 或 ACA 组合后可产生恶意环境后果，单独审查对不上。

    CRIME 把公共技能库中各自通过审查的技能配成两两组合，看联合执行能否实现指定恶意任务。。

    Paper analysisRead analysis
  2. DefensesarXiv 2609.28693

    skilder：以角色化技能包为工具型 LLM 智能体做访问控制

    提出 Skilder，按角色渐进下发企业工具并确定性拦截越权调用

    arXiv
    2609.28693
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Claude Haiku 4.5, Qwen 3.5 122B, Gemma 4 31B and others6
    AbstractSkilder 用单 MCP 服务器按角色交付工具并硬拦截。

    Skilder 把企业工具型智能体的能力按角色打包，经一个 MCP 服务器做渐进发现，使工具范围由服务器而不是提示词来执行。

    Paper analysisRead analysis
You have reached the end