AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents

Introduces AgentVigil, a black-box fuzzing framework for finding indirect prompt injections against LLM agents, including attacks that redirect web navigation.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research paper

Environment

Web

Topics

Safety & security, Web navigation, Evaluation

Record publication date

2025-05-09

Evidence retrieved

2026-11-05

Resource ID

arxiv:2505.05849

Recorded paper version

arXiv v4

Version updated: 2025-06-14T01:50:21Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Zhun Wang, Vincent Siu, Zhe Ye, Tianneng Shi, Yuzhou Nie, Xuandong Zhao, Chenguang Wang, Wenbo Guo, Dawn Song

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v4). The framework targets LLM agents broadly; web navigation is one attack outcome reported in the abstract. Experiments, reported performance and artifact availability have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-17T07:57:47Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   27144160e8981bb9f36b60c391689774913ff3f026eeeffc2923154c404a6529
2. editorial primary review

   Retrieved 2026-11-05T23:01:45Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   72d781966615fe4da127a9c089d5d6ab85838feb4205ef1ebd446ef97189bf70

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.

Useful? Star Awesome CUA on GitHub