{
  "aliases": [],
  "authors": [
    "Sechan Lee",
    "Hyounghun Kim",
    "Sangdon Park"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "e4a0294049fe0a9ff5c59f730330394652b921e144899c7b892c1eea0fdcde5a",
      "submitted_at": "2025-09-26T02:20:46Z",
      "updated_at": "2026-09-12T20:13:19Z",
      "version": 5,
      "versioned_url": "https://arxiv.org/abs/2511.13725v5"
    }
  },
  "environments": [
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-17T07:57:59Z",
      "role": "primary",
      "sha256": "240e3d6528900f4a3e87f12f5e55cb7654a4d25d4478e291e9bbf725e7013118",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2510.10587%2C2510.10909%2C2510.11144%2C2510.12798%2C2510.14388%2C2510.14513%2C2510.14969%2C2510.16156%2C2510.17017%2C2510.17800%2C2510.19207%2C2510.19247%2C2510.19386%2C2510.19864%2C2510.20333%2C2510.21652%2C2510.22443%2C2510.22936%2C2510.23730%2C2510.23883%2C2510.24702%2C2510.25726%2C2510.26328%2C2510.27135%2C2510.27410%2C2511.00153%2C2511.02650%2C2511.02687%2C2511.03690%2C2511.04220%2C2511.05797%2C2511.06251%2C2511.08319%2C2511.08487%2C2511.10110%2C2511.13725%2C2511.14210%2C2511.14945%2C2511.15705%2C2511.16842%2C2511.17649%2C2511.17775%2C2511.19496%2C2511.19516%2C2511.20636%2C2511.21990%2C2511.22074%2C2512.04302%2C2512.04529%2C2512.06726&max_results=50"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-11-05T23:02:12Z",
      "role": "primary",
      "sha256": "20bdf96426e8120a0cbfdbebadfabbbd4cda26d2d35ab670885f58b35ea35d5d",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "relations"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2511.03690%2C2511.03773%2C2511.04220%2C2511.04359%2C2511.04481%2C2511.04707%2C2511.05797%2C2511.06251%2C2511.08319%2C2511.08325%2C2511.08487%2C2511.09309%2C2511.10110%2C2511.11332%2C2511.12000%2C2511.13091%2C2511.13725%2C2511.14210%2C2511.14945%2C2511.15705%2C2511.16842%2C2511.17649%2C2511.17775%2C2511.18423%2C2511.19496%2C2511.19516%2C2511.19957%2C2511.20597%2C2511.20636%2C2511.21631%2C2511.21990%2C2511.22074%2C2511.23281%2C2512.04302%2C2512.04529%2C2512.06574%2C2512.06641%2C2512.06726%2C2512.06866%2C2512.07287%2C2512.08417%2C2512.08769%2C2512.09458%2C2512.11002%2C2512.11506%2C2512.12692%2C2512.12730%2C2512.12818%2C2512.13159%2C2512.13564&max_results=50"
    }
  ],
  "id": "arxiv:2511.13725",
  "identifiers": {
    "arxiv": "2511.13725"
  },
  "kind": "paper",
  "last_verified_at": "2026-11-05T23:02:12Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2511.13725"
    }
  ],
  "name": "Can We Stop Malicious AI? KILLBENCH: A Benchmark for External AI Kill Switch Feasibility",
  "notes": "The annotation and scope were reviewed against the complete retained arXiv abstract (v5). The benchmark tests external prompt-style payloads without access to agents' internal parameters or serving stack. Experiments, reported performance and artifact availability have not been independently reproduced.",
  "published_at": "2025-09-26",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "KillBench evaluates external prompt-style signals intended to halt maliciously operating web agents, across harmful scenarios and agent configurations.",
  "topics": [
    "evaluation",
    "safety-security",
    "web-navigation"
  ],
  "updated_at": "2026-09-12",
  "url": "https://arxiv.org/abs/2511.13725"
}