{
  "aliases": [],
  "authors": [
    "Zhun Wang",
    "Vincent Siu",
    "Zhe Ye",
    "Tianneng Shi",
    "Yuzhou Nie",
    "Xuandong Zhao",
    "Chenguang Wang",
    "Wenbo Guo",
    "Dawn Song"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "eabcb9e11b41d2b2ca7d167f925effc243976a1215d6cb3ea42bb499dd6cce9c",
      "submitted_at": "2025-05-09T07:40:17Z",
      "updated_at": "2025-06-14T01:50:21Z",
      "version": 4,
      "versioned_url": "https://arxiv.org/abs/2505.05849v4"
    }
  },
  "environments": [
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-17T07:57:47Z",
      "role": "primary",
      "sha256": "27144160e8981bb9f36b60c391689774913ff3f026eeeffc2923154c404a6529",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2504.03206%2C2504.03601%2C2504.06821%2C2504.09723%2C2504.11301%2C2504.11543%2C2504.12609%2C2504.14233%2C2504.14348%2C2504.14603%2C2504.16073%2C2504.16419%2C2504.17892%2C2504.18580%2C2504.20965%2C2505.00019%2C2505.00693%2C2505.01578%2C2505.02094%2C2505.03570%2C2505.03574%2C2505.05026%2C2505.05849%2C2505.06507%2C2505.07003%2C2505.07473%2C2505.10468%2C2505.10887%2C2505.12053%2C2505.12490%2C2505.12728%2C2505.13291%2C2505.14030%2C2505.14454%2C2505.14646%2C2505.15801%2C2505.15816%2C2505.17020%2C2505.18746%2C2505.19095%2C2505.19713%2C2505.20023%2C2505.20732%2C2505.20795%2C2505.21055%2C2505.22304%2C2505.22429%2C2505.23450%2C2505.23559%2C2506.00641&max_results=50"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-11-05T23:01:45Z",
      "role": "primary",
      "sha256": "72d781966615fe4da127a9c089d5d6ab85838feb4205ef1ebd446ef97189bf70",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "relations"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2505.05262%2C2505.05849%2C2505.05895%2C2505.06507%2C2505.07003%2C2505.07062%2C2505.07473%2C2505.10468%2C2505.10887%2C2505.10978%2C2505.11717%2C2505.12053%2C2505.12490%2C2505.12728%2C2505.13291%2C2505.13887%2C2505.14030%2C2505.14454%2C2505.14646%2C2505.14963%2C2505.15801%2C2505.15816%2C2505.15859%2C2505.17020%2C2505.17629%2C2505.17735%2C2505.18746%2C2505.19713%2C2505.20023%2C2505.20075%2C2505.20732%2C2505.20795%2C2505.21055%2C2505.22304%2C2505.22429%2C2505.22648%2C2505.23450%2C2505.23559%2C2505.23678%2C2505.24298%2C2505.24876%2C2506.00520%2C2506.00641%2C2506.01423%2C2506.01520%2C2506.01952%2C2506.02153%2C2506.03231%2C2506.03569%2C2506.04301&max_results=50"
    }
  ],
  "id": "arxiv:2505.05849",
  "identifiers": {
    "arxiv": "2505.05849"
  },
  "kind": "paper",
  "last_verified_at": "2026-11-05T23:01:45Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2505.05849"
    }
  ],
  "name": "AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents",
  "notes": "The annotation and scope were reviewed against the complete retained arXiv abstract (v4). The framework targets LLM agents broadly; web navigation is one attack outcome reported in the abstract. Experiments, reported performance and artifact availability have not been independently reproduced.",
  "published_at": "2025-05-09",
  "relations": [],
  "review_status": "curated",
  "scope": "adjacent",
  "summary": "Introduces AgentVigil, a black-box fuzzing framework for finding indirect prompt injections against LLM agents, including attacks that redirect web navigation.",
  "topics": [
    "safety-security",
    "web-navigation",
    "evaluation"
  ],
  "updated_at": "2025-06-14",
  "url": "https://arxiv.org/abs/2505.05849"
}