Your Harness is Not Secure: Benchmarking Real-world Threat of Command Line Interface Agent

Introduces AdvCLI, a sandbox benchmark for evaluating whether command-line agents carry out security-relevant operating-system tasks across multiple hosts.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research paper

Topics

Evaluation, Safety & security, Sandboxes

Record publication date

2025-10-08

Evidence retrieved

2026-11-05

Resource ID

arxiv:2510.06607

Recorded paper version

arXiv v3

Version updated: 2026-08-21T05:20:06Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Weidi Luo, Qiming Zhang, Tianyu Lu, Xiaogeng Liu, Bin Hu, Hung-Chun Chiu, Siyuan Ma, Yizhe Zhang, Xusheng Xiao, Yinzhi Cao, Zhen Xiang, Chaowei Xiao

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v3). AdvCLI evaluates command-line agents and operating-system effects, rather than GUI interaction. Experiments, reported performance and artifact availability have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-16T06:32:52Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   0b730323b2ce85c39aa7d534665901a480ff06540c73f1f80832fcc0735b8789
2. editorial primary review

   Retrieved 2026-11-05T23:02:00Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   2343ea50b1761631c89f41f46494ffa8b9c95a6d6b1cf95d58720bf26271ce29

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.

Useful? Star Awesome CUA on GitHub