MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks
MUZZLE evaluates web-agent exposure to indirect prompt injection by finding attack surfaces in agent trajectories and refining injected instructions from execution feedback.
AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.
What is this resource?
- Resource type
- Research paper
- Environment
- Web
- Topics
- Safety & security, Evaluation, Interaction history, Web navigation
- Record publication date
- 2026-02-09
- Evidence retrieved
- 2026-11-05
- Resource ID
- arxiv:2602.09222
Recorded paper version
Version updated: 2026-06-14T21:10:58Z.
This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.
Abstract fingerprint
77fa6f48314afe90107775dac6c54b56570a7284f2b542e3048a590d87c8c118Authors
Georgios Syros, Evan Rose, Brian Grinstead, Christoph Kerschbaumer, William Robertson, Cristina Nita-Rotaru, Alina Oprea
Cite this paper
Download BibTeX · Download CSL JSON
Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.
Explore related topics
Scope and limitations
The annotation and scope were reviewed against the complete retained arXiv abstract (v2). Experiments, reported performance and artifact availability have not been independently reproduced.
Primary evidence and verification
Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.
- arxiv api
Retrieved 2026-10-16T06:36:43Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.
Content fingerprint
c432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59 - editorial primary review
Retrieved 2026-11-05T23:02:35Z. Supports: name, kind, summary, environments, topics, scope, relations.
Content fingerprint
f353252e42750996811310c89de46a219576d87428d3efa95272917abd0c60f1
Suggest a correction
Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.