Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter5

Attack type

Poisoning and backdoors3

Attack technique

Gradient and representation optimization3Automated search28Multi-turn escalation3Encoding and obfuscation9Conversation structure manipulation1Cross-modal payloads6Defense-targeted9Dormant triggers11Selection manipulation3

Impact

Harmful content8Unauthorized actions4Data and privacy leaks5Output manipulation8

System type

AI Agent4

Attack surface / entry point

Tool and skill descriptions3Distribution channels3

Layer

Prompt layer0Application layer4

System component

MCP and skills3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Attack technique：Conversation structure manipulationAttack technique：Selection manipulationImpact：Unauthorized actionsLayer：Prompt layerLayer：Application layerClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  3. AttacksarXiv 2607.12340

    Research: LLM agent skill-name hallucination rates reach up to 62%, which can be exploited via squatting for supply-chain attacks

    提出技能名称抢注攻击，利用 Agent 虚构技能名实施供应链劫持

    arXiv
    2607.12340
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    GLM-4.5-Air, GPT-5.4-mini, Claude Sonnet 4.6 and others12
    Abstract研究证实智能体虚构技能名具有高发生率与可预测性，现有防御难以兼顾安全与效用，亟需注册表结构性防护。

    本研究系统揭示了大模型智能体技能推荐场景下的虚构技能名称安全风险，将其形式化为一种新型供应链抢注攻击。

    Paper analysisRead analysis
  4. AttacksarXiv 2509.25624

    STAC：看似无害的工具调用链如何攻破 LLM Agent

    提出 STAC 框架，把恶意目标拆成多轮看似无害的工具调用链

    arXiv
    2509.25624
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    GPT-4.1-2025-04-14, GPT-4.1-mini-2025-04-14, Qwen3-32B and others8

    Abstract作者提出并验证了智能体在序列化工具攻击下的普遍脆弱性，指出针对累积动作序列防御的必要性。

    Paper analysisRead analysis
You have reached the end