Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

Agent safety · Papers

Found 4 papers
Filter3

Attack type

Prompt injection4Poisoning and backdoors3

Impact

Unauthorized actions3

System type

AI Agent4

Attack surface / entry point

User input4Web pages and interfaces4Documents and messages4Tool responses5Memory writes9Distribution channels3

Layer

Application layer4

System component

MCP and skills4Memory4RAG0Permissions and sandboxing11
Select any value within a category; different categories must all match. Counts include the other filters you have selected.
Attack surface / entry point：Web pages and interfacesSystem component：MemorySystem component：RAGTopic: Agent safetyClear all
  2. DefensesarXiv 2603.12644

    Revealing security threats and defense architectures for autonomous agents: an OpenClaw case study

    Reviews threats to autonomous agents and proposes a full-lifecycle defense blueprint, FASA

    arXiv
    2603.12644
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractUsing OpenClaw as an example, it divides risks into three layers and uses FASA to describe defense from input to system execution.

    This is a threat review and defense architecture report using OpenClaw as a case study, not a scored attack or defense evaluation.

    Paper analysisRead analysis
  3. DefensesarXiv 2603.11619

    Taming OpenClaw: Security Analysis and Mitigation of Threats in Autonomous LLM Agents

    Proposes a defense-in-depth aligned with the five stages to mitigate cross-stage threats to autonomous agents

    arXiv
    2603.11619
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractThis is a lifecycle threat analysis and layered mitigation design for OpenClaw, with the cases serving as qualitative evidence.

    This is a lifecycle threat analysis of OpenClaw, accompanied by a set of layered mitigation designs. The problem addressed is: when autonomous agents connect instant messaging, persistent memory, third-party plugins, and high-privilege execution, attacks are no longer limited to single-turn jailbreaks but can compound across multiple stages from initialization to execution. The authors argue that defenses hardening only individual interfaces cannot stop such cross-temporal attacks.

    Paper analysisRead analysis
You have reached the end