AI Agent Security Benchmarks

Overview

AI agent security benchmarks test whether agents remain safe as they use tools, retrieve information, manage memory, and act across multi-step workflows. Common approaches use sandboxed environments, realistic attack scenarios, adaptive red-teaming, and executable checks of tool calls or resulting system states; cyber ranges also assess vulnerability discovery, exploitation, and repair. The field is moving beyond single-turn prompt-injection tests to cover persistent memory, third-party skills, privacy, multi-agent interactions, and real-world interfaces. A central challenge is making results both realistic and comparable: static tests may overstate robustness, while attack success alone can miss harm severity, authorization failures, and the cost to legitimate task utility.

Latest papers

CardsList

309 papers56 papers in the last four weeks, up 51% on the four weeks before. 0.3% of all new papers.

  1. FORTIS: Benchmarking Over-Privilege in Agent Skills

    May 9, 2026Shawn Li, Chenxiao Yu, Han Wang +8LLM Agent SecurityAI Agent Security Benchmarks

  2. Agent Collectives Should Not Detect Their Own Imposters: A Chess Case Study

    May 9, 2026Alexandre Le Mercier, Chris Develder, Thomas DemeesterAI Agent SecurityAI Agent Security Benchmarks

  3. CyBiasBench: Benchmarking Bias in LLM Agents for Cyber-Attack Scenarios

    May 8, 2026Taein Lim, Seongyong Ju, Munhyeok Kim +2AI Agent Security BenchmarksLLMs for Cybersecurity

  4. DecodingTrust-Agent Platform (DTap): A Controllable and Interactive Red-Teaming Platform for AI Agents

    May 6, 2026Zhaorun Chen, Xun Liu, Haibo Tong +14AI Agent EvaluationAI Agent Security

  5. MOSAIC-Bench: Measuring Compositional Vulnerability Induction in Coding Agents

    May 5, 2026Jonathan Steinberg, Oren GalLanguage Model Safety EvaluationAI Coding Agents

  6. MCPHunt: An Evaluation Framework for Cross-Boundary Data Propagation in Multi-Server MCP Agents

    Apr 30, 2026Haonan Li, Tianjun Sun, Yongqing Wang +1MCP SecurityPrivacy Leakage in Language Models

  7. Autonomous LLM Agents & CTFs: A Second Look

    Apr 29, 2026Youness Bouchari, Matteo Boffa, Marco Mellia +3LLM Agent OrchestrationAI Agent Security Benchmarks

  8. Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills

    Apr 28, 2026Lijia Lv, Xuehai Tang, Jie Wen +2AI Agent AuditingAI Agent Security

  9. GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems

    Apr 27, 2026Pablo Mateo-Torrejón, Alfonso Sánchez-MaciánMulti-Agent LLM SystemsGraph-Based Anomaly Detection

  10. CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents

    Apr 23, 2026Wenjie Fu, Xiaoting Qin, Jue Zhang +5Data LeakageContextual Integrity

  11. Do Agents Dream of Root Shells? Partial-Credit Evaluation of LLM Agents in Capture the Flag Challenges

    Apr 21, 2026Ali Al-Kaswan, Maksim Plotnikov, Maxim Hájek +3LLM Agent EvaluationAI Agent Security Benchmarks

  12. If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems

    Apr 21, 2026Jiamin Chang, Minhui Xue, Ruoxi Sun +3VLM RobustnessAdversarial Attacks on VLMs

  13. How Adversarial Environments Mislead Agentic AI?

    Apr 20, 2026Zhonghao Zhan, Huichi Zhou, Zhenhao Li +3Adversarial RobustnessAI Agent Evaluation

  14. Human-Guided Harm Recovery for Computer Use Agents

    Apr 20, 2026Christy Li, Sky CH-Wang, Andi Peng +1Computer-Use AgentsAI Agent Security Benchmarks

  15. Terminal Wrench: A Dataset of 331 Reward-Hackable Environments and 3,632 Exploit Trajectories

    Apr 19, 2026Ivan Bercovich, Ivgeni Segal, Kexun Zhang +3Reward HackingAI Agent Security Benchmarks

  16. Systematic Capability Benchmarking of Frontier Large Language Models for Offensive Cyber Tasks

    Apr 18, 2026Tyler H. Merves, Michael H. Conaway, Joseph M. Escobar +2LLM Agent EvaluationCybersecurity

  17. MemEvoBench: Benchmarking Safety Risks from Memory Misevolution in LLM Agents

    Apr 17, 2026Weiwei Xie, Shaoxiong Guo, Fan Zhang +5Long-Horizon Agent EvaluationAI Agent Security Benchmarks

  18. HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?

    Apr 16, 2026Yukun Jiang, Yage Zhang, Michael Backes +2LLM Agent SecurityAI Agent Security Benchmarks