Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 240 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出 StegoMemory，评测智能体持久记忆作为跨会话隐写信道
Published Oct 3
Evaluated models Llama 3.1 405B , Claude 3.5 Sonnet , GPT-4o and others13 Abstract 研究揭示智能体持久记忆可作为隐蔽信道跨会话传输机密，写入持久化是主要防御瓶颈，呼吁建立记忆完整性防御。
提出 MemLeak，评估多租户 Agent 共享向量记忆的跨用户泄露
Published Oct 3
Evaluated models Gemini 2.5 Flash , Claude Sonnet 4.5 , all-MiniLM-L6-v2 and others5 用 CoSec 评测社区 Agent 是否越界披露受保护信息
Published Sep 28
Evaluated models OpenClaw with Gemini 3.1 Pro , OpenClaw with Qwen 3.8 Max , OpenClaw with MiniMax M2.5 and others13 Proposes execution-state forgetting, using provenance-guided selective replay to purify stateful agents
Published Sep 4
Evaluated models Llama-3.1-8B-Instruct , Qwen2.5-7B-Instruct , Mistral-7B-Instruct-v0.3 Abstract Selective replay concatenates the clean prefix with the sanitized suffix, and main-table metrics match full reset.This work defines forgetting in long-horizon agents as runtime counterfactual equivalence, rather than deleting a plaintext memory.
提出 PoisonedEvolution 轨迹投毒，诱导自演化技能系统固化恶意行为
Published Aug 6
Evaluated models GPT-5.4 , MiniMax-M2.5 , DeepSeek-V3.2 and others6 Abstract 论文揭示自演化技能系统的证据晋升漏洞，提出并验证轨迹投毒攻击。这篇论文揭示了自演化技能系统在将交互经验转化为持久指令时的安全风险。
评测编码 Agent 记忆文件中提示注入的跨会话影响
Published Jul 16
Evaluated models Claude Haiku 4.5 , Claude Opus 4.7 , GPT-5.2 and others4 Abstract 已植入记忆文件的载荷可以跨会话影响 Claude Code 与 Codex，攻击成功与载荷是否留下是两种不同的失败。Bad Memory 在沙箱合成工作区里评测文件型持久记忆上的提示注入，比较载荷能否改变当前会话，以及能否在后续会话中留下或叠加。
提出 CFD 跨会话分解攻击，利用工件来源缺口绕过工具型 Agent 的本地检查
Published Jun 8
Evaluated models GPT-4.1 , GPT-5-nano , Claude-3.5-Sonnet and others6 Abstract CFD 用无指令 artifact 把越狱拆到跨会话。CFD 针对工具型 LLM 智能体：利用 artifact 来源不被跟踪这一部署失败模式，把有害目标拆开后延迟组合。
构建 Trojan Hippo Bench，评测 Agent 持久记忆投毒与外泄
Published May 4
Evaluated models Gemini 3.1 Pro , GPT-5-mini , GPT-5 Abstract 论文提出了评测智能体持久化记忆攻击与防御的 Trojan Hippo Bench，揭示了潜伏攻击威胁及内存防御的安全与效用权衡。
You have reached the end