Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter5

Defense type

Detection and filtering2

System type

Models and APIs8LLM applications1coding agent0Browser and computer use1

System component

MCP and skills6RAG5Guardrails and judges24Vision2Multimodal4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 233papers have no tags yet and are not included in filtered results.
Defense type：Detection and filteringSystem type：LLM applicationsSystem type：coding agentSystem type：Browser and computer useSystem component：VisionClear all

Another 233papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2609.05535

    Mind2Web-Injection：面向网页 Agent 视觉提示注入护栏的证据对齐评测

    提出 Mind2Web-Injection 评测网页 Agent 视觉注入护栏

    arXiv
    2609.05535
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    GPT-5.6-luna, Qwen3-VL-32B, Qwen3-VL-8B and others6
    Abstract作者称检测、定位和反事实响应在六个 VLM 上可分开。

    Mind2Web-Injection 用来检查网页截图护栏的判决是否对齐到该用的画面证据。。

    Paper analysisRead analysis
  2. DefensesarXiv 2603.14707

    Visual Confusion Agents: Exploiting and Defending Against Perception Failures in Computer-Use Agents

    Proposes out-of-process dual-channel comparison classification to intercept erroneous clicks by computer-use agents

    arXiv
    2603.14707
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    multi-modal-embed-small
    AbstractPerception errors can be exploited by swapping screen pixels.

    The authors frame CUA's perception failure as a security vulnerability, visual confused deputy: the agent authorizes click(x,y) based on a misread screen, and the actual landing point differs from the element it believes it is clicking.

    Paper analysisRead analysis
You have reached the end