Skip to content
Oct 13 · Tuesday

Agent safety · Papers

Found 2 papers
Filter3

System type

AI Agent4coding agent0Browser and computer use2

System component

MCP and skills5Guardrails and judges3Monitors6Permissions and sandboxing14Multimodal2
Select any value within a category; different categories must all match. Counts include the other filters you have selected.
System type：coding agentSystem type：Browser and computer useSystem component：MultimodalTopic: Agent safetyClear all
  1. DefensesarXiv 2603.14707

    Visual Confusion Agents: Exploiting and Defending Against Perception Failures in Computer-Use Agents

    Proposes out-of-process dual-channel comparison classification to intercept erroneous clicks by computer-use agents

    arXiv
    2603.14707
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    multi-modal-embed-small
    AbstractPerception errors can be exploited by swapping screen pixels.

    The authors frame CUA's perception failure as a security vulnerability, visual confused deputy: the agent authorizes click(x,y) based on a misread screen, and the actual landing point differs from the element it believes it is clicking.

    Paper analysisRead analysis
  2. DefensesarXiv 2602.10915

    Blind Gods and Broken Screens: Building a Secure, Intent-Centric Mobile Agent Operating System

    Proposes Aura, which uses a trusted kernel to mediate the identity, perception, and action control of mobile agents

    arXiv
    2602.10915
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Gemini-3-Flash
    AbstractAura mediates structured interactions via the Agent Kernel.

    Aura uses kernel-mediated structured agent interaction, replacing screen-interface mobile assistants..

    Paper analysisRead analysis
You have reached the end