Skip to content
Oct 12 · Monday

All papers

Found 2 papers
Filter4

Attack type

Prompt injection12Poisoning and backdoors2

Attack surface / entry point

Web pages and interfaces2Documents and messages4Tool responses3Tool and skill descriptions6Retrieval corpus5Memory writes5Distribution channels6

System component

MCP and skills3Memory8Permissions and sandboxing2Embeddings0
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Attack type：Poisoning and backdoorsAttack surface / entry point：Web pages and interfacesSystem component：Permissions and sandboxingSystem component：EmbeddingsClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2603.12644

    Revealing security threats and defense architectures for autonomous agents: an OpenClaw case study

    Reviews threats to autonomous agents and proposes a full-lifecycle defense blueprint, FASA

    arXiv
    2603.12644
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractUsing OpenClaw as an example, it divides risks into three layers and uses FASA to describe defense from input to system execution.

    This is a threat review and defense architecture report using OpenClaw as a case study, not a scored attack or defense evaluation.

    Paper analysisRead analysis
  2. DefensesarXiv 2603.11619

    Taming OpenClaw: Security Analysis and Mitigation of Threats in Autonomous LLM Agents

    Proposes a defense-in-depth aligned with the five stages to mitigate cross-stage threats to autonomous agents

    arXiv
    2603.11619
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractThis is a lifecycle threat analysis and layered mitigation design for OpenClaw, with the cases serving as qualitative evidence.

    This is a lifecycle threat analysis of OpenClaw, accompanied by a set of layered mitigation designs. The problem addressed is: when autonomous agents connect instant messaging, persistent memory, third-party plugins, and high-privilege execution, attacks are no longer limited to single-turn jailbreaks but can compound across multiple stages from initialization to execution. The authors argue that defenses hardening only individual interfaces cannot stop such cross-temporal attacks.

    Paper analysisRead analysis
You have reached the end