Prompt injection is widely recognized as a major security threat to AI agents that interact with untrusted external data, such as websites, documents, and emails. Prior work has shown that, in the text domain, black-box prompt injection can achieve near-perfect attack success rates (ASRs). In the image domain, however,...
Si-Zhe Chen, Yu-Lin Tsai, Ivan Evtimov et al.· 1 citation
REP, a lightweight in-context elicitation method that uses shadow-model-generated demonstrations wrapped in auxiliary code-like formats to raise user-visible reasoning traces from a victim model, substantially increases similarity between exposed and REP-conditioned internal traces while preserving useful reasoning sig...
Daydreaming is presented, an execution-only attack that steals a multi-file skill through black-box task interactions and produces installable skills using a median of 32 victim calls per skill even with disclosure defenses enabled.
Yu-Lin Tsai, Yu-An Lu, Ci-Yang Tsai et al.· 0 citations
This work suggests a path toward accelerating cryptographic research: as agents automate the proof-engineering burden, cryptographers can iterate more quickly on new constructions, obtain machine-checked assurance earlier, and bring trustworthy protocols from design to deployment faster.