Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 5 papers
Filter5

Attack type

Jailbreaks7Prompt injection27Poisoning and backdoors11Malicious use5

System type

Models and APIs5AI Agent8coding agent2web agent2Multi-agent systems1Embodied systems and robotics0

Attack surface / entry point

User input5

Layer

Application layer5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 227papers have no tags yet and are not included in filtered results.
Attack type：Malicious useSystem type：coding agentSystem type：web agentSystem type：Multi-agent systemsSystem type：Embodied systems and roboticsClear all

Another 227papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2610.05586

    AgentDoxx：联网搜索 Agent 对匿名访谈文本的再识别评测

    构建 AGENTDOXX 基准，评测联网搜索 Agent 对匿名访谈的再识别

    arXiv
    2610.05586
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-5.6 Terra, GPT-5 Mini, GPT-4.1 Mini and others10

    Abstract论文提出了已知身份的重识别基准 AGENTDOXX，揭示搜索与记忆双重风险及现有防御在检索轨迹中的泄露漏洞。

    Paper analysisRead analysis
  2. Evaluation and benchmarksarXiv 2609.33102

    ORBIT：基于 UK AISI Inspect 的多智能体安全评测框架

    提出 ORBIT 框架，评测多智能体防御对合谋等威胁的效果

    arXiv
    2609.33102
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    GPT-5.4, Claude Sonnet 4.6, Qwen3-235B and others5

    AbstractORBIT 用六层配置比较多智能体防御，逐动作监控不迁移到合谋。

    Paper analysisRead analysis
  3. Evaluation and benchmarksarXiv 2606.22673

    Agent MechSuits：面向多轮 CLI Agent 的机制子空间安全引导

    提出 Agent MechSuits，对多轮 CLI Agent 做步级检测与子空间转向

    arXiv
    2606.22673
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    LLaMA-3.1-8B, Qwen-2.5-7B, Gemma-2-9B
    Abstract白盒步级探针加稀疏转向可压低三模型恶意动作，同时提高生成崩溃率。

    Agent MechSuits 是面向多轮 CLI 智能体的白盒、步级表示防御，并配有可执行轨迹基准 MAS。

    Paper analysisRead analysis
  4. Evaluation and benchmarksarXiv 2604.02947

    AgentHazard：评估计算机使用智能体有害行为的基准

    提出 AgentHazard 基准，评测计算机使用智能体的执行层有害行为

    arXiv
    2604.02947
    Published
    Layer
    Application layer
    Setting
    Browser and computer use, coding agent
    Evaluated models
    Qwen2.5-72B-Instruct, Qwen2.5-Coder-32B-Instruct, Qwen3-32B and others12
    AbstractAgentHazard 评估了计算机使用智能体的执行安全，作者认为模型层对齐无法可靠保障智能体层面的安全性。

    AgentHazard 是针对计算机使用智能体执行层安全构建的评估基准，重点探究多步工具调用下局部合理动作累积引发的危害。

    Paper analysisRead analysis
  5. Evaluation and benchmarksarXiv 2503.04957

    SafeArena：首个评估自主网页 Agent 滥用风险的基准

    提出 SafeArena 基准，评测网页 Agent 是否执行故意有害任务

    arXiv
    2503.04957
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-4o, Claude-3.5-Sonnet, Qwen-2-VL-72B and others5
    AbstractSafeArena 用配对任务和 ARIA 评测网页智能体的故意滥用。

    SafeArena 评测自主网页智能体是否会执行用户故意给出的恶意网页任务。。

    Paper analysisRead analysis
You have reached the end