@misc{agentvigil,
  title = {AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents},
  url = {https://arxiv.org/abs/2505.05849},
  author = {Zhun Wang and Vincent Siu and Zhe Ye and Tianneng Shi and Yuzhou Nie and Xuandong Zhao and Chenguang Wang and Wenbo Guo and Dawn Song},
  year = {2025},
  date = {2025-05-09},
  version = {947157ab02dfc51142d8e948d53e434c3f59f3399c8b241aa32015179f278793},
  note = {947157ab02dfc51142d8e948d53e434c3f59f3399c8b241aa32015179f278793}
}

@misc{agentvigil-nuwa,
  title = {AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents — NUWA research record},
  url = {https://whitzard.tech/en/nuwa/whitzard-index/work/agentvigil/},
  version = {2026-10-29.1},
  organization = {NUWA Frontier AI Safety Lab},
  howpublished = {Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--agentvigil.json},
  note = {NUWA research note. Source-reading scope and independent review status are stated on the record. Snapshot 2026-10-29.1. Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--agentvigil.json.}
}