Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 5 papers
Filter4

Attack type

Poisoning and backdoors3Denial of service3

Impact

Harmful content6Unauthorized actions96Data and privacy leaks17Output manipulation19Availability and reliability5Oversight failure4

System type

AI Agent5

Attack surface / entry point

User input3Web pages and interfaces3Tool responses2Tool and skill descriptions3Distribution channels3

Layer

Application layer5

System component

MCP and skills3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 254papers have no tags yet and are not included in filtered results.
Impact：Availability and reliabilityAttack surface / entry point：Tool responsesAttack surface / entry point：Tool and skill descriptionsLayer：Application layerClear all

Another 254papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2610.03448

    Study retests 15 prompt injection detectors: benchmark scores poorly predict agent deployment performance

    重测提示注入检测器在 Agent 工具输出上的检出与任务阻断

    arXiv
    2610.03448
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Horizon-Labs, Wolf Defender, Prismor-1.5B and others15

    Abstract论文揭示公开基准无法反映智能体检测器表现，检测能力源于输入格式相似而非通用防御，建议基于工具输出与低误报评测。

    Paper analysisRead analysis
  2. AttacksarXiv 2609.28585

    论文提出持久计费状态概念，揭示工具调用 LLM Agent 的拒绝钱包攻击与防御

    定义工具调用 Agent 的持久计费状态，提出拒绝钱包攻击与防御

    arXiv
    2609.28585
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-4o, GPT-4o-mini, Mistral-Large and others7
    Abstract已准入工具返回的跨轮保留会重复计费。

    这篇工作把工具调用智能体里跨轮保留、并被提供商反复计费的外部工具返回定义为 persistent billable state，并把它的主机侧再次送入决定当作控制点。。

    Paper analysisRead analysis
  4. AttacksarXiv 2608.12273

    研究者提出 Convergent Detour Hijacking 攻击，可让技能型 LLM Agent 绕路并放大资源消耗

    提出 CDH 攻击，让技能型 Agent 绕路放大资源消耗

    arXiv
    2608.12273
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Claude-Haiku-4.5, DeepSeek-V4-Pro, DeepSeek-V4-Flash and others6
    AbstractCDH 让静态技能在保持任务完成时拉高调用与 token，耗时则因后端而异。

    CDH 是针对渐进披露技能智能体的发布者侧、纯文本攻击：一个静态协调器把本可正确完成的任务，拐进有界但更耗资源的技能绕路，再交还原任务。

    Paper analysisRead analysis
You have reached the end