Context Inference Attacks Without Jailbreaks
This work introduces and formalizes context-inference attacks through a security game and evaluates three settings under decreasing attacker knowledge and increasingly indirect delivery of the context: a known context, an unknown context, and a context the agent retrieves through its own tool calls.