@misc{agentpoison,
  title = {AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases},
  url = {https://arxiv.org/abs/2407.12784},
  author = {Zhaorun Chen and Zhen Xiang and Chaowei Xiao and Dawn Song and Bo Li},
  year = {2024},
  date = {2024-07-17},
  version = {9f8d652f56155aa8115ba2f74136c161d7354544b6d2ccfb89fe19e7f263dd9c},
  note = {9f8d652f56155aa8115ba2f74136c161d7354544b6d2ccfb89fe19e7f263dd9c}
}

@misc{agentpoison-nuwa,
  title = {AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases — NUWA research record},
  url = {https://whitzard.tech/nuwa/whitzard-index/work/agentpoison/},
  version = {2026-10-29.1},
  organization = {NUWA Frontier AI Safety Lab},
  howpublished = {Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--agentpoison.json},
  note = {NUWA research note. Source-reading scope and independent review status are stated on the record. Snapshot 2026-10-29.1. Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--agentpoison.json.}
}