Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 2 papers
Filter4

System type

Models and APIs18LLM applications3AI Agent29coding agent2Browser and computer use0Multi-agent systems25

Attack surface / entry point

User input21Web pages and interfaces10Documents and messages7Tool responses8Tool and skill descriptions26Code repositories and dependencies19Memory writes5Inter-agent messages2Images, audio and video5Weights and gradients3Distribution channels23Inference services and hardware0
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
System type：coding agentSystem type：Browser and computer useAttack surface / entry point：Inter-agent messagesAttack surface / entry point：Inference services and hardwareClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2609.32635

    TrustFork：显示身份如何劫持 LLM 智能体编排的权限

    提出 TRUSTFORK 基准，评测展示身份劫持多智能体编排权限

    arXiv
    2609.32635
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems, coding agent
    Evaluated models
    GPT-5.6-Sol, GPT-5.6-Luna, Kimi-K3 and others8

    Abstract论文提出了多智能体安全基准 TRUSTFORK，揭示展示身份如何劫持操作权威，并证明事后验证无法弥补已发生的执行破坏。

    Paper analysisRead analysis
  2. DefensesarXiv 2609.01677

    Skill-as-API：面向智能体软件工程的机密多智能体协作协议

    提出 Skill-as-API，隔离多智能体协作中的 skill 正文与系统提示词

    arXiv
    2609.01677
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems, coding agent
    Abstract协议把 skill 正文留在所有者侧，四层限制发现内容、权限期限和注入拼接。

    Skill-as-API 是面向智能体软件工程的协调协议，用来在跨组织调用时把 skill 的代码和系统提示词留在所有者进程。作者针对三条威胁：经通道或命名空间抽取专有方法，用注入让被调用模型输出系统提示词，以及协作结束后权限继续保留。

    Paper analysisRead analysis
You have reached the end