New: WebsiteBench. Can AI agents rebuild websites through browser exploration?WebsiteBench Star on GitHubStar
Research paper

MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks

MUZZLE evaluates web-agent exposure to indirect prompt injection by finding attack surfaces in agent trajectories and refining injected instructions from execution feedback.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

Original source ↗Read as MarkdownRecord JSON

What is this resource?

Resource type
Research paper
Environment
Web
Topics
Safety & security, Evaluation, Interaction history, Web navigation
Record publication date
2026-02-09
Evidence retrieved
2026-11-05
Resource ID
arxiv:2602.09222

Recorded paper version

arXiv v2

Version updated: 2026-06-14T21:10:58Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Abstract fingerprint77fa6f48314afe90107775dac6c54b56570a7284f2b542e3048a590d87c8c118

Authors

Georgios Syros, Evan Rose, Brian Grinstead, Christoph Kerschbaumer, William Robertson, Cristina Nita-Rotaru, Alina Oprea

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Safety & securityEvaluationInteraction historyWeb navigation

Scope and limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v2). Experiments, reported performance and artifact availability have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

  1. arxiv api

    Retrieved 2026-10-16T06:36:43Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

    Content fingerprintc432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59
  2. editorial primary review

    Retrieved 2026-11-05T23:02:35Z. Supports: name, kind, summary, environments, topics, scope, relations.

    Content fingerprintf353252e42750996811310c89de46a219576d87428d3efa95272917abd0c60f1

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.

Useful? Star Awesome CUA on GitHub