Institution

Invariant Labs

Roles and affiliations follow the cited source. A source check is not an independent replication.

2024-11-24

QuestionCan tool-using agents maintain utility while processing attacker-controlled external data?

Source summaryAgents fail some benign tasks even without attacks.

NUWA research note · independent review pending · Contains: question / method / limits