@misc{agentdojo,
  title = {AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents},
  url = {https://arxiv.org/html/2406.13352v3},
  author = {Edoardo Debenedetti and Jie Zhang and Mislav Balunovic and Luca Beurer-Kellner   Marc Fischer   Florian Tramèr},
  year = {2024},
  date = {2024-11-24},
  version = {arXiv:2406.13352v3},
  note = {arXiv:2406.13352v3}
}

@misc{agentdojo-nuwa,
  title = {AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents — NUWA research record},
  url = {https://whitzard.tech/nuwa/whitzard-index/work/agentdojo/},
  version = {2026-10-29.1},
  organization = {NUWA Frontier AI Safety Lab},
  howpublished = {Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--agentdojo.json},
  note = {NUWA research note. Source-reading scope and independent review status are stated on the record. Snapshot 2026-10-29.1. Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--agentdojo.json.}
}