Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 5 papers
Filter3

Model risks

Dangerous agent actions3

Defense type

Instruction–data separation1Permissions and approval5

Impact

Unauthorized actions3

System type

AI Agent5

Layer

Application layer5

System component

Permissions and sandboxing5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.
Defense type：Instruction–data separationDefense type：Permissions and approvalSystem component：Permissions and sandboxingClear all

Another 265papers do not have category tags yet and are not included in filtered results.

  2. Evaluation and benchmarksarXiv 2610.02664

    论文提出 GHOST：长程智能体在良性对话中遗忘早期安全约束

    提出 STAR-Guard 双层防御，抑制长程 Agent 遗忘跨轮安全约束

    arXiv
    2610.02664
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-5.5, DeepSeek-V4-Pro, GLM-5.2 and others7

    Abstract揭示 GHOST 跨轮约束遗忘风险，构建 SCARBench 基准并通过 STAR-Guard 双层防御消除违规。

    Paper analysisRead analysis
  3. Evaluation and benchmarksarXiv 2609.35557

    论文：容器、权限规则与沙箱都无法区分读取研究代码的是编译器还是编码 Agent

    评测容器、权限规则与沙箱能否区分编译器与编码 Agent 的文件读取

    arXiv
    2609.35557
    Published
    Layer
    Application layer
    Setting
    coding agent
    Abstract此 harness 表达不了编译器可读而智能体不可读，五条路径两边都不覆盖。

    作者在物理流求解器上检查一套编码智能体配置：编译器必须读本组材料与反应模型，这些字节又不得进入模型上下文或离开本机的记录。

    Paper analysisRead analysis
  5. Evaluation and benchmarksarXiv 2605.14859

    论文提出 AuthBench 基准，评测编码 Agent 能否推断最小权限边界

    提出 AuthBench 评测编码 Agent 最小权限，并验证充足性-紧缩性分解

    arXiv
    2605.14859
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    GPT-5, GPT-5.3-Codex, GPT-5.4 and others9
    Abstract论文提出权限边界推断基准与两阶段分解方法，有效降低安全暴露。

    本文研究代码智能体在执行终端任务前自主推断最小文件权限边界的能力。

    Paper analysisRead analysis
You have reached the end