Where You Inject Matters: The Trust Region Effect in LLM Agents
This work provides the first systematic characterization for the effectiveness of different injection placements, spanning both coarse-grained environmental surfaces and fine-grained positions, and develops learning-based attackers that generate injection content and select better injection placements.