Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 4 papers
Filter4

Attack technique

Gradient and representation optimization7Automated search3Encoding and obfuscation4Cross-modal payloads11

System type

AI Agent4

Attack surface / entry point

User input7Web pages and interfaces3Documents and messages4Tool responses4Tool and skill descriptions5Retrieval corpus4Memory writes3Inter-agent messages2Images, audio and video2Distribution channels5

Layer

Prompt layer14Application layer4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 213papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationAttack surface / entry point：Inter-agent messagesAttack surface / entry point：Images, audio and videoLayer：Application layerClear all

Another 213papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2609.35912

    MMSkillRisk：多模态技能图像中的隐藏指令可诱导 Agent 执行未授权操作

    提出 MMSkillRisk 基准，评测多模态技能图像中的隐藏指令诱导 Agent 越权操作

    arXiv
    2609.35912
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    GPT-5.6-sol, Kimi-K2.6, Kimi-K3 and others6

    Abstract论文提出 MMSkillRisk 基准与 NCVA 攻击，揭示多模态技能中教学图像潜藏指令可引发未授权操作并与良性任务共存。

    Paper analysisRead analysis
  3. AttacksarXiv 2603.00131

    Thought Virus: viral misalignment induced by subliminal prompts in multi-agent systems

    Propose Thought Virus, which propagates preferences along multi-agent messages via subliminal prompts.

    arXiv
    2603.00131
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Qwen2.5-7B-Instruct, Llama-3.1-8B-Instruct
    AbstractThought Virus spreads a single-point bias downstream.

    Thought Virus puts subliminal prompting into multi-agent communication, to see whether a single-point deviation spreads across the network without naming the target concept.

    Paper analysisRead analysis
You have reached the end