Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter4

Attack type

Prompt injection3

System type

LLM applications5AI Agent121coding agent21web agent3Browser and computer use3Multi-agent systems6

Attack surface / entry point

User input4Web pages and interfaces22Documents and messages4Tool responses3Code repositories and dependencies0Images, audio and video4

Layer

Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
System type：web agentAttack surface / entry point：Tool responsesAttack surface / entry point：Code repositories and dependenciesLayer：Application layerClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2608.24017

    WebMCP-Phalanx：为浏览器内 LLM Agent 工具调用建立信任边界

    提出 WebMCP-Phalanx，用能力凭证与双智能体隔离浏览器工具调用

    arXiv
    2608.24017
    Published
    Layer
    Application layer
    Setting
    web agent
    AbstractPhalanx 用浏览器凭证绑定工具所有权，Q/P 分离拦住描述注入，工具名与返回值仍有残留。

    WebMCP-Phalanx针对浏览器里的 WebMCP 智能体：在 SOP 下补工具所有权，并把语义检查从有工具权的执行中分开。

    Paper analysisRead analysis
  2. AttacksarXiv 2608.04565

    研究者提出 Breadcrumbing 长程攻击，可劫持 DeepResearch 类搜索 Agent 的证据链

    提出权威链劫持与轨迹引导策略演化，劫持搜索 Agent 的证据链

    arXiv
    2608.04565
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    Qwen3.5-9B, Gemma4-31B, DeepResearch and others7

    Abstract论文揭示了多步搜索智能体在受限中间人操纵下的脆弱性，提出 ACH 策略与 TGSE 演化方法并完成系统验证。

    Paper analysisRead analysis
You have reached the end