Securing Web Agents with the Compile-Then-Execute Paradigm

Baya compiles a web task into a program using a Trusted Website API before viewing live content, limiting how webpage prompt injections can alter agent control flow.

AI-assisted editorial review against a primary source.

What is this resource?

Resource type

Research paper

Environment

Web

Topics

Safety & security, Web navigation, Planning, Tool integration

Record publication date

2026-11-04

Evidence retrieved

2026-11-05

Resource ID

arxiv:2611.06039

Recorded paper version

arXiv v1

Version updated: 2026-11-04T06:42:35Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Annabella Chow, Jinhao Zhu, Sylvie Venuto, Abdulaziz Alharbi, Basel Alomair, Raluca Popa, David Wagner, Julien Piet

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v1). The reported utility and attack results come from WebArena Verified and WASP evaluations.

Primary evidence and verification

Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-11-05T08:25:56Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   f0738ff787e6bcacf21df5c9c49e73a06b1c446d146cd9f29f407b284eed10e2
2. editorial primary review

   Retrieved 2026-11-05T23:03:30Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   0c7bfb6af7650b096faabf37eb8c024f2877842018cf9aa212c0a3b9aef98252

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.

Useful? Star Awesome CUA on GitHub