Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter3

Attack type

Prompt injection3Poisoning and backdoors3

Attack technique

Automated search12Encoding and obfuscation6Defense-targeted6Dormant triggers7Selection manipulation3

System type

AI Agent11coding agent3

Attack surface / entry point

Tool and skill descriptions3Distribution channels3

Layer

Application layer3

System component

MCP and skills3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 273papers have no tags yet and are not included in filtered results.
Attack technique：Selection manipulationSystem type：coding agentLayer：Application layerClear all

Another 273papers do not have category tags yet and are not included in filtered results.

  2. AttacksarXiv 2608.25776

    EvoMal 攻击利用自我进化编码 Agent 的自我投毒实现蠕虫式传播

    提出 EVOMAL，诱导自演化编码 Agent 在创建技能时自我投毒并蠕虫传播

    arXiv
    2608.25776
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Devstral-Small-2, Gemma-4-31B-IT, Qwen3-Coder-Next and others7

    Abstract论文指出了自演化智能体模仿检索代码的自我毒化漏洞，提出 EVOMAL 攻击与防御，阐明了供应链新风险。

    Paper analysisRead analysis
  3. AttacksarXiv 2607.12340

    研究：LLM Agent 技能名幻觉率最高达 62%，可被抢注用于供应链攻击

    提出技能名称抢注攻击，利用 Agent 虚构技能名实施供应链劫持

    arXiv
    2607.12340
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    GLM-4.5-Air, GPT-5.4-mini, Claude Sonnet 4.6 and others12
    Abstract研究证实智能体虚构技能名具有高发生率与可预测性，现有防御难以兼顾安全与效用，亟需注册表结构性防护。

    本研究系统揭示了大模型智能体技能推荐场景下的虚构技能名称安全风险，将其形式化为一种新型供应链抢注攻击。

    Paper analysisRead analysis
You have reached the end