Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

Agent safety · Papers

Found 4 papers
Filter1

Attack type

Prompt injection3

Defense type

Permissions and approval3

Impact

Unauthorized actions6Output manipulation4

System type

AI Agent4

Attack surface / entry point

Tool responses3

Layer

Application layer4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.
Impact：Output manipulationTopic: Agent safetyClear all
  1. AttacksarXiv 2610.02432

    论文提出 LLM 输入扰动鲁棒性度量，并发布 ASA 攻击与 AttestMCP 防护

    提出 ASA 与 AttestMCP，度量并降低 LLM 对输入序列扰动的敏感

    arXiv
    2610.02432
    Published
    Layer
    Application layer
    Setting
    LLM applications, AI Agent
    Attacker
    Black-box
    Evaluated models
    Gemma-3-27B-Instruct, Gemma-3-4B-Instruct, Llama-3.2-3B-Instruct and others12
    Paper analysisRead analysis
  2. AttacksarXiv 2609.11757

    Researchers disclose a Whisper prompt injection attack on the AP2 payment protocol and propose the A-VIP defense

    提出 AP2 支付协议的 Whisper 攻击与 A-VIP 绑定防御

    arXiv
    2609.11757
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    gemini-2.5-flash-lite, gemini-3.1-flash-lite, gemini-3-flash-preview and others15

    Abstract论文揭示了 AP2 协议决策层受操纵的风险，提出结构化与权能绑定防御 A-VIP，并发布评测基准。

    Paper analysisRead analysis
  4. AttacksarXiv 2607.12507

    研究者提出 RARE 攻击：LLM 辅助逆向工程中的表示混淆

    提出 RARE-Guard，阻止逆向观察被提升为指令或已验证声明

    arXiv
    2607.12507
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    gpt-5.5, claude-sonnet-4-6, gemini-2.5-pro and others5
    Abstract成对二进制衡量无效提升。

    作者定义的失败是：LLM 辅助逆向中，忠实提取的二进制观察获得它并未赢得的指令权限、声明证据或可信状态。

    Paper analysisRead analysis
You have reached the end