Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 240 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出可验证操作卡 VAC，把智能体浏览器确认绑定到真实 DOM 操作
Published Sep 16
Evaluated models gpt-oss-120b , Gemini-2.5-Flash , GPT-4.1 and others6 提出 WebMCP-Phalanx，用能力凭证与双智能体隔离浏览器工具调用
Published Aug 25 Abstract Phalanx 用浏览器凭证绑定工具所有权，Q/P 分离拦住描述注入，工具名与返回值仍有残留。WebMCP-Phalanx 针对浏览器里的 WebMCP 智能体：在 SOP 下补工具所有权，并把语义检查从有工具权的执行中分开。
Proposes Prismata, which uses critical-path annotation and mechanical isolation to constrain cross-site prompt injection in web agents.
Published Jul 9
Evaluated models gpt-5.4-mini , gpt-5.4 , gpt-5.4-nano and others7 提出 eTAMP，用网页内容跨会话投毒 Web Agent 轨迹记忆并诱导越权操作
Published Apr
Evaluated models GPT-5-mini , GPT-5.2 , GPT-OSS-120B and others6 Abstract 论文提出了基于环境注入的跨任务记忆投毒攻击 eTAMP，作者报告智能体在环境压力下易感性增加且能力与安全并不协同。该论文评估了基于大语言模型的 Web 智能体在利用历史交互轨迹进行记忆增强时的安全脆弱性。
You have reached the end