Translation in progress Some entries still include text in the original language.
Oct 13 · Tuesday
Another 215 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
测量记忆投毒防御在良性对话上的效用与 token 开销
Published Sep 19 Abstract 写时代价落在噪声内。在没有攻击的对话上,给记忆投毒防御计价,而不是再测一轮攻击是否被挡住。
提出 SKILLBLOAT,改写技能文档放大编码 Agent token 消耗
Published Aug 22
Evaluated models GLM-4.7-Flash , GLM-5 , GPT-5.4 Mini and others4 提出 CDH 攻击,让技能型 Agent 绕路放大资源消耗
Published Aug 13
Evaluated models Claude-Haiku-4.5 , DeepSeek-V4-Pro , DeepSeek-V4-Flash and others6 Abstract CDH 让静态技能在保持任务完成时拉高调用与 token,耗时则因后端而异。CDH 是针对渐进披露技能智能体的发布者侧、纯文本攻击:一个静态协调器把本可正确完成的任务,拐进有界但更耗资源的技能绕路,再交还原任务。
提出 TabooRAG,用单篇文档迁移阻断 RAG 对良性查询的回答
Published Mar 4
Evaluated models Llama-3-8B-Instruct , Ministral-3-8B-Instruct-2512 , Gemma-3-12B-it and others9 Abstract TabooRAG 用代理侧风险文档迁移阻断 RAG。TabooRAG 是面向 RAG 可用性的可迁移阻断攻击,不改已有文档,也不读取目标反馈。
Propose Clawdrain, amplifying OpenClaw's token consumption with a trojan skill
Published Mar 1
Evaluated models Gemini 2.5 Pro You have reached the end