Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 265 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
重测并扩展对 AI Agent 的提示注入，并用 Agent Card 欺骗操纵 A2A 选择
Published Oct 8
Evaluated models Ollama Mistral 0.9.5 , llama3-8b-8192 , gemini-2.0-flash-lite and others5 Abstract 单智能体过滤与分类可被格式或措辞绕过，A2A 选卡还会偏向名称和描述。作者在自建的 LangChain、AutoGen 和 A2A 系统上重测提示注入，并改 Agent Card 看选择是否偏移。摘要称试验主要凸显单智能体弱点，同时把攻击扩到多智能体。
用 CoSec 评测社区 Agent 是否越界披露受保护信息
Published Sep 28
Evaluated models OpenClaw with Gemini 3.1 Pro , OpenClaw with Qwen 3.8 Max , OpenClaw with MiniMax M2.5 and others13 提出并评测保险库中介执行边界，隔离 Agent 的 API 凭据
Published Sep 27
Evaluated models Corvic Security Vault Abstract 作者称，凭据分离可减少披露路径，但权限、操作授权和配置验证仍需独立控制。这是一项智能体 API 凭据威胁分析及 Vault 执行边界的功能评测。 作者关心的不是模型能否承诺保密，而是认证材料是否会进入模型、日志、记忆和执行代码。
提出 CompoSkill，将逐个通过扫描的技能编排为攻击链
Published Aug 17
Evaluated models GPT-5.4 , Gemini-3.1-flash , DeepSeek-V4 and others4 Abstract 论文分析了智能体技能组合风险，指出单包安全认证状态不具备可组合性，需转向路径级防护。
训练自博弈红队智能体 GPT-Red，规模化生成提示注入与越狱攻击
Published Jul 29
Evaluated models GPT-5.6 , GPT-5.5 , GPT-5.4 and others8 You have reached the end