Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter5

Model risks

Dangerous agent actions3Inappropriate refusal6Hallucination and fabrication9

Impact

Unauthorized actions3

System type

AI Agent3

Layer

Model layer1Application layer2

System component

Memory7Guardrails and judges5Monitors13Permissions and sandboxing25Vision3Embeddings0Multimodal4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.
Model risks：Dangerous agent actionsLayer：Model layerLayer：Application layerSystem component：VisionSystem component：EmbeddingsClear all

Another 240papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2604.12447

    HazardArena：面向 VLA 模型的语义安全评测基准

    提出 HazardArena 基准，用孪生场景评测 VLA 的语义安全

    arXiv
    2604.12447
    Published
    Layer
    Model layer
    Setting
    Embodied systems and robotics
    Evaluated models
    OpenVLA-OFT, π0, NORA and others4
    Abstractsafe-only 微调提升良性执行，也提升匹配不安全孪生上的危险完成。

    HazardArena 评测 VLA 在运动要求不变时，能否因语义风险而停手。

    Paper analysisRead analysis
  2. DefensesarXiv 2603.14707

    Visual Confusion Agents: Exploiting and Defending Against Perception Failures in Computer-Use Agents

    Proposes out-of-process dual-channel comparison classification to intercept erroneous clicks by computer-use agents

    arXiv
    2603.14707
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    multi-modal-embed-small
    AbstractPerception errors can be exploited by swapping screen pixels.

    The authors frame CUA's perception failure as a security vulnerability, visual confused deputy: the agent authorizes click(x,y) based on a misread screen, and the actual landing point differs from the element it believes it is clicking.

    Paper analysisRead analysis
You have reached the end