Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter4

Attack type

Prompt injection3

System type

AI Agent3

Attack surface / entry point

User input22Web pages and interfaces5Documents and messages7Tool responses14Tool and skill descriptions7Code repositories and dependencies1Inter-agent messages2Images, audio and video0Distribution channels5

Layer

Application layer3

System component

MCP and skills8Memory8Guardrails and judges26Monitors3Reasoning chains9Permissions and sandboxing15Fine-tuning and open weights8Vision82Audio20Video8Image generation15Multimodal118
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 233papers have no tags yet and are not included in filtered results.
Attack surface / entry point：Code repositories and dependenciesAttack surface / entry point：Inter-agent messagesAttack surface / entry point：Images, audio and videoSystem component：MonitorsClear all

Another 233papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2609.35659

    Tracekit：面向自主编码 Agent 的防篡改意图-推理-动作审计系统

    提出 Tracekit，审计编码 Agent 的意图、推理与动作并检测账本篡改

    arXiv
    2609.35659
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Claude Code (claude -p, version 2.1), 独立评审（同一 CLI，无工具）
    AbstractTracekit 把意图、自述和动作写入可锚定的哈希链。

    Tracekit 是无第三方依赖的编码智能体审计层：把人类请求、模型自述和已执行动作并排写入可外部锚定的哈希链，执行前用正则门，事后用规则和独立模型互查。

    Paper analysisRead analysis
  2. Evaluation and benchmarksarXiv 2609.33102

    ORBIT：基于 UK AISI Inspect 的多智能体安全评测框架

    提出 ORBIT 框架，评测多智能体防御对合谋等威胁的效果

    arXiv
    2609.33102
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    GPT-5.4, Claude Sonnet 4.6, Qwen3-235B and others5

    AbstractORBIT 用六层配置比较多智能体防御，逐动作监控不迁移到合谋。

    Paper analysisRead analysis
  3. DefensesarXiv 2505.23559

    SafeScientist：让 LLM 智能体的科学发现具备风险意识

    提出 SafeScientist 四层监控，阻止科研智能体执行高风险或不伦理任务

    arXiv
    2505.23559
    Published
    Layer
    Application layer
    Setting
    science agent, Multi-agent systems
    Evaluated models
    GPT-4o, GPT-4.1, GPT-3.5-turbo and others5
    Abstract四层监控加科研安全基准。

    SafeScientist 是带四层监控的科研智能体框架，并用 SciSafetyBench 评测科学场景中的任务安全。

    Paper analysisRead analysis
You have reached the end