Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
All papers Found 13 papers Another 232 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
Proposes LGWM, using an action-conditioned world model to verify GUI agent screen transitions.
Published Oct 8
Evaluated models LGWM 用 DIBench 评测移动 GUI 智能体被 UI 注入后的决策完整性
Published Sep 29
Evaluated models Qwen2.5-VL(32B) , Qwen3-VL(32B) , GUI-Owl(32B) and others7 Abstract 论文提出移动智能体决策完整性基准 DIBench，发现欺诈 UI 注入诱导目标选择并推高完成率，通用防御收益不稳定。
提出 CAVEAT 基准，评测激励失配市场中计算机使用 Agent 的购买决策退化
Published Sep 23
Evaluated models GPT-5.6-Sol , GPT-5.6-Terra , GPT-5.6-Luna and others14 Abstract 提出 CAVEAT 基准揭示智能体在商业偏好下的决策退化，诊断出三类失效并给出缓解方案。
提出 CellAudit，审计智能体发现的细胞模型是否使用所声明输入
Published Sep 23
Evaluated models CellScientist , AIDE , CellForge and others4 Abstract CellAudit 把输入使用声明从源码追到拟合贡献，并说明高分不必等于使用了扰动。CellAudit 为智能体发现的细胞响应模型增加一层输入使用证伪：源码是否消费注册输入、拟合预测是否依赖它、该依赖是否改善对观测响应的预测。
提出权威链劫持与轨迹引导策略演化，劫持搜索 Agent 的证据链
Published Aug 5
Evaluated models Qwen3.5-9B , Gemma4-31B , DeepResearch and others7 Abstract 论文揭示了多步搜索智能体在受限中间人操纵下的脆弱性，提出 ACH 策略与 TGSE 演化方法并完成系统验证。
提出 SCHEMA，用概念图与轨迹分评测科学 Agent 幻觉
Published Aug 1
Evaluated models Kimi-K2.5 , Qwen3.6-Plus , Llama-4-Scout and others10 Abstract SCHEMA 用知识拓扑评估科学智能体幻觉，终答正确仍可能来自有缺陷的中间推理。SCHEMA 是面向科学智能体幻觉的证据锚定评测框架，实例化在生物医学的 Protein Domain 与 PathVQA-Enhanced。作者在摘要中称它是首个同时做到证据锚定和拓扑感知的此类框架。
用 MisKnow-Agent 评测深度研究智能体是否采纳误导文档结论
Published Jul 23
Evaluated models DeerFlow , WebThinker , Gemini Deep Research and others6 Abstract 论文通过 MisKnow-Agent 框架评估发现长程研究智能体易采纳误导性知识，且现有防御难以完全消除该现象。
提出 BioSecBench-Surveillance，评测智能体的病原监测分析选择
Published Jul 22
Evaluated models Opus 4.8 , Opus 4.7 , Opus 4.6 and others10 提出间接数据投毒攻击，操纵科研智能体得出虚假结论
Published Jul 12
Evaluated models Claude Code with Claude Opus 4.7 , Codex with GPT-5.5 , Gemini CLI with Gemini 3.1 Pro 提出 SciIntegrity-Bench 评测科研智能体是否编造结果
Published May 11
Evaluated models GPT 5.2 , Claude 4.6 Sonnet , Gemini 3.1 Pro and others7 Conduct adversarial attacks on product images for open-source visual shopping agents and induce wrong purchases
Published Mar 17
Evaluated models LLaVA-v1.5-7B , Qwen2.5-VL-7B Abstract The authors state that LLaVA is easily induced by three attacks to buy the wrong item, while Qwen's correct purchase rate remains close to its clean condition.The authors compare the robustness of two open-source VLM shopping agents against image adversarial perturbations in a self-built e-commerce environment.
提出 MalURLBench 评测 Agent 是否接受结构伪装的恶意 URL
Published Jan 26
Evaluated models GPT-3.5-Turbo , GPT-4o-mini , GPT-4o and others13 用 SPR 评测 AI 科学家系统的方法学缺陷
Published Sep 11, 2025
Evaluated models gemini-2.5-flash-preview-05-20 Abstract 作者用 SPR 诊断两个开源系统的四种方法学缺陷，并建议审稿时提交日志与代码。作者诊断两个开源系统的全自动科研流程，看方法学缺陷会不会留在终稿看不见的决策里。
You have reached the end