Overview

AI agent security studies how tool use, memory, delegation, and interaction with people or environments create risks beyond those of a standalone language model, including prompt injection, privilege misuse, data leakage, and unsafe actions. Researchers test these risks with red-teaming and execution-grounded benchmarks for coding, browsing, GUI, embodied, and multi-agent tasks, measuring whether harmful effects occur across trajectories rather than judging text alone. Defenses range from input and memory provenance checks to sandboxing, least-privilege permissions, stateful runtime authorization, action verification, and cryptographic identity or audit mechanisms. An open challenge is making controls robust to adaptive, long-horizon attacks and interactions between tools or agents while preserving useful task completion; benchmark realism and comparable measures remain uneven.

Latest papers

CardsList

517 papers74 papers in the last four weeks, up 32% on the four weeks before. 0.4% of all new papers.

  1. AITH: A Post-Quantum Continuous Delegation Protocol for Human-AI Trust Establishment

    Apr 9, 2026Zhaoliang ChenAI Agent SecurityCybersecurity

  2. MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security

    Apr 8, 2026Mehrdad Rostamzadeh, Sidhant Narula, Nahom Birhan +2MCP SecurityAI Agent Security

  3. SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills

    Apr 8, 2026Yinghan Hou, Zongyou YangAI Agent SecurityAgent Skill Security Auditing

  4. A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms

    Apr 7, 2026Nirajan Acharya, Gaurav Kumar GuptaMCP SecurityAI Agent Security

  5. ClawLess: A Security Model of AI Agents

    Apr 7, 2026Hongyi Lu, Nian Liu, Shuai Wang +1AI Agent SecurityRuntime Enforcement for AI Agents

  6. Auditable Agents

    Apr 7, 2026Yi Nian, Aojie Yuan, Haiyue Zhang +7AI AccountabilityAI Agent Auditing

  7. LanG -- A Governance-Aware Agentic AI Platform for Unified Security Operations

    Apr 7, 2026Anes Abdennebi, Nadjia Kara, Laaziz Lahlou +1CybersecurityLLMs for Cybersecurity

  8. Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw

    Apr 6, 2026Zijun Wang, Haoqin Tu, Letian Zhang +11AI Agent SecurityAI Agent Safety

  9. ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems

    Apr 6, 2026Zhuowen Yuan, Zhaorun Chen, Zhen Xiang +5AI Agent SecuritySoftware Supply Chain Security

  10. Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs

    Apr 4, 2026Wenhui Zhu, Xuanzhao Dong, Xiwen Chen +7AI Agent SecurityIndirect Prompt Injection

  11. Measuring the Permission Gate: A Stress-Test Evaluation of Claude Code's Auto Mode

    Apr 4, 2026Zimo Ji, Zongjie Li, Pingchuan Ma +3AI Agent SecurityTool-Use Authorization

  12. A Systematic Security Evaluation of OpenClaw and Its Variants

    Apr 3, 2026Yuhang Wang, Haichang Gao, Zhenxing Niu +4AI Agent SecurityLLM Agent Security

  13. Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems

    Apr 3, 2026Yubin Qu, Yi Liu, Tongcheng Geng +5AI Agent SecurityLLM Agent Security

  14. Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

    Apr 3, 2026Wei Zou, Mingwen Dong, Miguel Romero Calvo +7AI Agent SecurityAgent Memory Poisoning

  15. I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crime

    Apr 2, 2026Thomas RivasseauAI Agent SafetyAI Ethics

  16. ClawSafety: "Safe" LLMs, Unsafe Agents

    Apr 1, 2026Bowen Wei, Yunbei Zhang, Jinhao Pan +5AI Agent SecurityAI Agent Safety

  17. Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks

    Mar 31, 2026Chong Xiang, Drew Zagieboylo, Shaona Ghosh +5AI Agent SecurityPrompt Injection Defense

  18. "What Did It Actually Do?": Understanding Risk Awareness and Traceability for Computer-Use Agents

    Mar 30, 2026Zifan Peng, Mingchen LiComputer-Use Agent SafetyComputer-Use Agents

  19. A Security Analysis of the OpenClaw AI Agent Framework

    Mar 29, 2026Surada Suwansathit, Yuxuan Zhang, Guofei GuAI Agent SecurityTool Access Control for LLM Agents

  20. Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses

    Mar 28, 2026Xiao Li, Xiang Zheng, Yifeng Gao +35Embodied AIAI Safety

  21. ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, and Watchers

    Mar 25, 2026Songyang Liu, Chaozhuo Li, Chenxu Wang +8AI Agent SecurityLLM Agent Security

  22. Mind Your HEARTBEAT! Claw Background Execution Inherently Enables Silent Memory Pollution

    Mar 24, 2026Yechao Zhang, Shiqian Zhao, Jie Zhang +5AI Agent SecurityAgent Memory Poisoning

  23. AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents

    Mar 24, 2026Yutao Luo, Haotian Zhu, Shuchao Pang +4Backdoor AttacksAI Agent Security

  24. Agent-Sentry: Bounding LLM Agents via Execution Provenance

    Mar 24, 2026Rohan Sequeira, Stavros Damianakis, Umar Iqbal +1Computer-Use Agent SafetyAI Agent Security