# MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks

MUZZLE evaluates web-agent exposure to indirect prompt injection by finding attack surfaces in agent trajectories and refining injected instructions from execution feedback.

- Catalog URL: https://awesomecua.com/resources/arxiv-2602-09222/
- Original source: https://arxiv.org/abs/2602.09222
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, evaluation, interaction-history, web-navigation
- Evidence checked: 2026-11-05T23:02:35Z
- ID: arxiv:2602.09222

## Limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v2). Experiments, reported performance and artifact availability have not been independently reproduced.

- Record JSON: https://awesomecua.com/resources/arxiv-2602-09222/record.json

## Authors

Georgios Syros, Evan Rose, Brian Grinstead, Christoph Kerschbaumer, William Robertson, Cristina Nita-Rotaru, Alina Oprea

## Citation exports

- BibTeX: https://awesomecua.com/resources/arxiv-2602-09222/citation.bib
- CSL JSON: https://awesomecua.com/resources/arxiv-2602-09222/citation.csl.json

## Recorded arXiv snapshot

- Version: 2
- Version source: https://arxiv.org/abs/2602.09222v2
- First submission: 2026-02-09T21:46:18Z
- Version updated: 2026-06-14T21:10:58Z
- Abstract SHA-256: 77fa6f48314afe90107775dac6c54b56570a7284f2b542e3048a590d87c8c118
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=400&max_results=100&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-16T06:36:43Z; SHA-256 c432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59)
- https://export.arxiv.org/api/query?id_list=2602.07398%2C2602.07458%2C2602.07624%2C2602.07787%2C2602.07918%2C2602.08235%2C2602.09222%2C2602.09463%2C2602.09514%2C2602.10122%2C2602.10525%2C2602.10863%2C2602.10915%2C2602.11224%2C2602.11514%2C2602.11858%2C2602.12268%2C2602.12852%2C2602.13318%2C2602.13543%2C2602.13692%2C2602.14038%2C2602.14337%2C2602.14364%2C2602.15384%2C2602.16165%2C2602.16317%2C2602.16666%2C2602.16901%2C2602.16930%2C2602.17049%2C2602.17245%2C2602.17547%2C2602.17646%2C2602.18846%2C2602.19320%2C2602.19594%2C2602.19870%2C2602.21858%2C2602.22190%2C2602.22769%2C2602.22897%2C2602.23166%2C2602.23235%2C2602.23320%2C2602.24142%2C2603.00188%2C2603.00198%2C2603.00503%2C2603.00676&max_results=50 (retrieved 2026-11-05T23:02:35Z; SHA-256 f353252e42750996811310c89de46a219576d87428d3efa95272917abd0c60f1)