Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

Agent safety · Papers

Found 3 papers
Filter2

Attack type

Prompt injection11Poisoning and backdoors3

Impact

Unauthorized actions3

System type

AI Agent3

Attack surface / entry point

User input6Web pages and interfaces3Documents and messages4Tool responses6Tool and skill descriptions7Memory writes10Distribution channels7

Layer

Application layer3

System component

Memory3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.
Attack type：Poisoning and backdoorsAttack surface / entry point：Web pages and interfacesTopic: Agent safetyClear all
  2. DefensesarXiv 2603.12644

    Revealing security threats and defense architectures for autonomous agents: an OpenClaw case study

    Reviews threats to autonomous agents and proposes a full-lifecycle defense blueprint, FASA

    arXiv
    2603.12644
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractUsing OpenClaw as an example, it divides risks into three layers and uses FASA to describe defense from input to system execution.

    This is a threat review and defense architecture report using OpenClaw as a case study, not a scored attack or defense evaluation.

    Paper analysisRead analysis
  3. DefensesarXiv 2603.11619

    Taming OpenClaw: Security Analysis and Mitigation of Threats in Autonomous LLM Agents

    Proposes a defense-in-depth aligned with the five stages to mitigate cross-stage threats to autonomous agents

    arXiv
    2603.11619
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractThis is a lifecycle threat analysis and layered mitigation design for OpenClaw, with the cases serving as qualitative evidence.

    This is a lifecycle threat analysis of OpenClaw, accompanied by a set of layered mitigation designs. The problem addressed is: when autonomous agents connect instant messaging, persistent memory, third-party plugins, and high-privilege execution, attacks are no longer limited to single-turn jailbreaks but can compound across multiple stages from initialization to execution. The authors argue that defenses hardening only individual interfaces cannot stop such cross-temporal attacks.

    Paper analysisRead analysis
You have reached the end