Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 5 papers
Filter4

Attack type

Prompt injection3

Defense type

Permissions and approval3

Impact

Unauthorized actions5Data and privacy leaks3Oversight failure3

System type

Models and APIs0AI Agent57coding agent5Multi-agent systems5

Layer

Application layer5

System component

MCP and skills15Memory3Guardrails and judges4Monitors5Permissions and sandboxing5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Impact：Unauthorized actionsSystem type：Models and APIsSystem type：coding agentSystem component：Permissions and sandboxingClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  3. DefensesarXiv 2609.38983

    The paper proposes an Approval Laundering taxonomy and empirically shows that Claude Code's approval and execution binding fails

    形式化编程 Agent 的审批洗白并提出 HMAC 权能令牌防御

    arXiv
    2609.38983
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Claude Code (v2.1.197, opus[1m] / claude-sonnet-5-ccmax), Codex CLI (@openai/codex v0.154.0)

    Abstract系统揭示编程智能体审批洗白风险，提出七字段权能防御机制，证实其能消除身份时序偏离但难防副作用偏离。

    Paper analysisRead analysis
You have reached the end