AI Agent Security Benchmarks

Overview

AI agent security benchmarks test whether agents remain safe as they use tools, retrieve information, manage memory, and act across multi-step workflows. Common approaches use sandboxed environments, realistic attack scenarios, adaptive red-teaming, and executable checks of tool calls or resulting system states; cyber ranges also assess vulnerability discovery, exploitation, and repair. The field is moving beyond single-turn prompt-injection tests to cover persistent memory, third-party skills, privacy, multi-agent interactions, and real-world interfaces. A central challenge is making results both realistic and comparable: static tests may overstate robustness, while attack success alone can miss harm severity, authorization failures, and the cost to legitimate task utility.

Latest papers

CardsList

309 papers56 papers in the last four weeks, up 51% on the four weeks before. 0.3% of all new papers.

  1. STARS: Skill-Triggered Audit for Request-Conditioned Invocation Safety in Agent Systems

    Apr 11, 2026Guijia Zhang, Shu Yang, Xilin Gong +1Agent Skill Security AuditingAI Agent Security Benchmarks

  2. ACIArena: Toward Unified Evaluation for Agent Cascading Injection

    Apr 9, 2026Hengyu An, Minxi Li, Jinghuai Zhang +6Multi-Agent System SecurityAI Agent Security Benchmarks

  3. SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills

    Apr 8, 2026Yinghan Hou, Zongyou YangAI Agent SecurityAgent Skill Security Auditing

  4. Hackers or Hallucinators? A Comprehensive Analysis of LLM-Based Automated Penetration Testing

    Apr 7, 2026Jiaren Peng, Zeqin Li, Chang You +17Automated Penetration TestingLLMs for Cybersecurity

  5. ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems

    Apr 6, 2026Zhuowen Yuan, Zhaorun Chen, Zhen Xiang +5AI Agent SecuritySoftware Supply Chain Security

  6. Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs

    Apr 4, 2026Wenhui Zhu, Xuanzhao Dong, Xiwen Chen +7AI Agent SecurityIndirect Prompt Injection

  7. Measuring the Permission Gate: A Stress-Test Evaluation of Claude Code's Auto Mode

    Apr 4, 2026Zimo Ji, Zongjie Li, Pingchuan Ma +3AI Agent SecurityTool-Use Authorization

  8. A Systematic Security Evaluation of OpenClaw and Its Variants

    Apr 3, 2026Yuhang Wang, Haichang Gao, Zhenxing Niu +4AI Agent SecurityLLM Agent Security

  9. Detecting Multi-Agent Collusion Through Multi-Agent Interpretability

    Apr 1, 2026Aaron Rose, Carissa Cullen, Sahar Abdelnabi +3AI Agent Security BenchmarksMulti-Agent System Security

  10. Design Principles for the Construction of a Benchmark Evaluating Security Operation Capabilities of Multi-agent AI Systems

    Mar 30, 2026Yicheng Cai, Mitchell John DeStefano, Guodong Dong +5AI Agent Security BenchmarksCybersecurity

  11. Evaluating Privilege Usage of Agents with Real-World Tools

    Mar 30, 2026Quan Zhang, Lianhang Fu, Lvsi Lian +5AI Agent Security BenchmarksTool Access Control for LLM Agents

  12. SkillTester: Benchmarking Utility and Security of Agent Skills

    Mar 28, 2026Leye Wang, Zixing Wang, Anjie XuLLM Agent Skill EvaluationAI Agent Security Benchmarks

  13. Clawed and Dangerous: Can We Trust Open Agentic Systems?

    Mar 27, 2026Shiping Chen, Qin Wang, Guangsheng Yu +2LLM Agent SecurityAI Agent Governance

  14. Red Skills or Blue Skills? A Dive Into Skills Published on ClawHub

    Mar 19, 2026Haichuan Hu, Ye Shang, Quanjun ZhangAgent Skill Security AuditingAI Agent Security Benchmarks

  15. ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation

    Mar 19, 2026Haochen Zhao, Shaoyang CuiAI Agent SecurityWeb Agents

  16. From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents

    Mar 19, 2026Myeongseob Ko, Jihyun Jeong, Sumiran Singh Thakur +2Privacy Leakage in Language ModelsLLM Agent Security

  17. How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition

    Mar 16, 2026Mateusz Dziemian, Maxwell Lin, Xiaohan Fu +28Indirect Prompt InjectionPrompt Injection Attacks

  18. RewardHackingAgents: Benchmarking Evaluation Integrity for LLM ML-Engineering Agents

    Mar 11, 2026Yonas Atinafu, Robin CohenLLM Agent EvaluationAI Agent Security Benchmarks

  19. Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios

    Mar 11, 2026Linus Folkerts, Will Payne, Simon Inman +11LLMs for CybersecurityAI Agent Evaluation

  20. Governance Architecture for Autonomous Agent Systems: Threats, Framework, and Engineering Practice

    Mar 7, 2026Yuxu GeLLM Agent SecurityAI Agent Governance

  21. AegisUI: Behavioral Anomaly Detection for Structured User Interface Protocols in AI Agent Systems

    Mar 5, 2026Mohd Safwan Uddin, Saba HajiraAnomaly DetectionAI Agent Security

  22. EVMbench: Evaluating AI Agents on Smart Contract Security

    Mar 5, 2026Justin Wang, Andreas Bigger, Xiaohai Xu +5AI Agent Security BenchmarksSoftware Security

  23. ZeroDayBench: Evaluating LLM Agents on Unseen Zero-Day Vulnerabilities for Cyberdefense

    Mar 2, 2026Nancy Lau, Louis Sloot, Jyoutir Raj +6AI Agent Security BenchmarksLLMs for Cybersecurity

  24. Quantifying Frontier LLM Capabilities for Container Sandbox Escape

    Mar 1, 2026Rahul Marchand, Art O Cathain, Jerome Wynne +8LLM Safety BenchmarksLLM Agent Security

  25. Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks

    Feb 23, 2026David Schmotz, Luca Beurer-Kellner, Sahar Abdelnabi +1LLM Agent SecurityPrompt Injection Attacks on AI Agents

  26. AgentLAB: Benchmarking LLM Agents against Long-Horizon Attacks

    Feb 18, 2026Tanqiu Jiang, Yuhui Wang, Jiacheng Liang +1LLM Agent SecurityAI Agent Security Benchmarks

  27. From Tool Orchestration to Code Execution: A Study of MCP Design Choices

    Feb 17, 2026Yuval Felendler, Parth A. Gandhi, Idan Habler +2LLM Agent OrchestrationMCP Security