arXiv AI
Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?
Read the original on arXiv AI →The Flow has not summarised this story yet — read it at arXiv AI.
Related stories
arXiv AI
Jun 19
Analyzing Defensive Misdirection Against Model-Guided Automated Attacks on Agentic AI Systems
arXiv:2606. 20470v1 Announce Type: cross Abstract: Agentic AI systems increasingly rely on language-model components to interpret instructions, process external data, invoke tools, and coordinate with other agents.
arXiv Machine Learning
Jul 30
AgentSnare: Learning to Delay, Divert, and Defuse Autonomous Penetration Agents
arXiv:2607. 26998v1 Announce Type: cross Abstract: Large language model (LLM) agents automate penetration testing through an observation-action loop, selecting actions based on observations returned by tools.
arXiv AI
Jun 16
FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion
arXiv:2606. 15609v1 Announce Type: cross Abstract: Large language model (LLM) agents increasingly rely on long-term memory to support complex task execution, user personalization, and domain adaptation.
arXiv AI
Jun 9
PRISM: Recovering Instruction Sets from Language Model Activations
arXiv:2606. 09563v1 Announce Type: new Abstract: As LLMs are deployed as agents, reliable monitoring requires knowing not only what they output, but which instructions are steering their behavior.
arXiv Machine Learning
Aug 7
Robust Context-Aware Detection of Malicious Instructions in Text
arXiv:2608. 05430v1 Announce Type: cross Abstract: The remarkable instruction-following ability of modern LLMs has enabled their practical use as the minds of agents that can autonomously complete increasingly complex tasks.
arXiv AI
Sep 10
AttnCompress: Dynamic Attention-Guided Trajectory Compression for Software Engineering Agents
arXiv:2609.08318v1 Announce Type: cross Abstract: The transition from human-centric assistance to Autonomous Software Engineering (ASE) agents has enabled the resolution of complex real-world SE task...