We have 4 of 9 papers
We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.
Not the right person? Other researchers publish under this name.
Coding agents have become increasingly long-horizon, autonomous, reliant on general-purpose shell and maintain their own persistent memory for self-improvement. While these capabilities have made the agents powerful, they have also made them harder to defend against external adversaries. Defenses that restrict this arc...
Prompt injection is widely recognized as a major security threat to AI agents that interact with untrusted external data, such as websites, documents, and emails. Prior work has shown that, in the text domain, black-box prompt injection can achieve near-perfect attack success rates (ASRs). In the image domain, however,...
REP, a lightweight in-context elicitation method that uses shadow-model-generated demonstrations wrapped in auxiliary code-like formats to raise user-visible reasoning traces from a victim model, substantially increases similarity between exposed and REP-conditioned internal traces while preserving useful reasoning sig...
Daydreaming is presented, an execution-only attack that steals a multi-file skill through black-box task interactions and produces installable skills using a median of 32 victim calls per skill even with disclosure defenses enabled.
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
