We have 3 of 26 papers
We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.
Not the right person? Other researchers publish under this name.
This work evaluates Caesar and layered variants across eight models and 139 injection-task pairs, separating instruction recovery from attack success, and highlights the risk of promoting decoded, untrusted content into actionable instructions.
REP, a lightweight in-context elicitation method that uses shadow-model-generated demonstrations wrapped in auxiliary code-like formats to raise user-visible reasoning traces from a victim model, substantially increases similarity between exposed and REP-conditioned internal traces while preserving useful reasoning sig...
Daydreaming is presented, an execution-only attack that steals a multi-file skill through black-box task interactions and produces installable skills using a median of 32 victim calls per skill even with disclosure defenses enabled.
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
