APEX: Active Protection at Execution Boundaries for LLM Agents
Indirect prompt injection (IPI) hides adversarial instructions in content that large language model (LLM) agents read at runtime. As agents compose heterogeneous capability units, including Tools, MCP servers, and Skills, the carriers of injection multiply, and defenses built to recognize attack patterns fall behind th...
Xin-Ran Zheng, Xin-Fan Guo, Zhi-Qian Hao et al.
· 0 citations