{"id":"https://openalex.org/W7204018069","doi":null,"title":"Your Cursor is Not Secure: Command Line Interface Agent Can Expose Realistic Risks Through Tactics, Techniques, and Procedures","display_name":"Your Cursor is Not Secure: Command Line Interface Agent Can Expose Realistic Risks Through Tactics, Techniques, and Procedures","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7204018069"},"language":"en","primary_location":{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-173083","doi":null,"is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-173083","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"},"volume":null,"type":"conference-paper","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5147827727","display_name":"Weidi Luo","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Weidi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147818982","display_name":"Qiming Zhang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Qiming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125317846","display_name":"Tianyu Lu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Tianyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130599059","display_name":"Xiaogeng Liu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Xiaogeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147867686","display_name":"Bin Hu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Bin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058765316","display_name":"Hung-Chun Chiu","orcid":"https://orcid.org/0000-0002-1416-1409","observed_orcids":["https://orcid.org/0000-0002-1416-1409"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"CHIU, Hung-chun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032794241","display_name":"Siyuan Ma","orcid":"https://orcid.org/0000-0002-9207-1062","observed_orcids":["https://orcid.org/0000-0002-9207-1062","https://orcid.org/0009-0002-6673-5002","https://orcid.org/0009-0004-6569-6093"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Siyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101958998","display_name":"Yizhe Zhang","orcid":"https://orcid.org/0000-0001-7300-2400","observed_orcids":["https://orcid.org/0000-0001-7300-2400","https://orcid.org/0009-0007-3602-7749"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yizhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012621594","display_name":"Xusheng Xiao","orcid":"https://orcid.org/0000-0003-4797-4294","observed_orcids":["https://orcid.org/0000-0003-4797-4294"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiao, Xusheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139790247","display_name":"Yinzhi Cao","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cao, Yinzhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147863010","display_name":"Zhen Xiang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiang, Zhen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5005843046","display_name":"Chaowei Xiao","orcid":"https://orcid.org/0000-0002-7043-4926","observed_orcids":["https://orcid.org/0000-0002-7043-4926"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiao, Chaowei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.71174418,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5454000234603882,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5454000234603882,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2985999882221222,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.07819999754428864,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.9290000200271606},{"id":"https://openalex.org/keywords/operating-system-security","display_name":"operating system security","score":0.7730000019073486},{"id":"https://openalex.org/keywords/tactics-techniques-and-procedures","display_name":"tactics, techniques, and procedures","score":0.921999990940094},{"id":"https://openalex.org/keywords/mitre-att-ck","display_name":"MITRE ATT&CK","score":0.9100000262260437},{"id":"https://openalex.org/keywords/kill-chain","display_name":"kill chain","score":0.7919999957084656},{"id":"https://openalex.org/keywords/adversarial-benchmark","display_name":"adversarial benchmark","score":0.6190000176429749},{"id":"https://openalex.org/keywords/llm-as-a-judge","display_name":"LLM-as-a-judge","score":0.6449999809265137}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8127999901771545},{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.6863999962806702},{"id":"https://openalex.org/C2776990265","wikidata":"https://www.wikidata.org/wiki/Q2998101","display_name":"Cursor (databases)","level":2,"score":0.5687000155448914},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.535099983215332},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.510699987411499},{"id":"https://openalex.org/C2779137570","wikidata":"https://www.wikidata.org/wiki/Q16243196","display_name":"EXPOSE","level":2,"score":0.5042999982833862},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.48989999294281006},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.445499986410141},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.42879998683929443},{"id":"https://openalex.org/C161615301","wikidata":"https://www.wikidata.org/wiki/Q309396","display_name":"Keystroke logging","level":2,"score":0.4253999888896942},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.38760000467300415},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.35269999504089355},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.334199994802475},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.313400000333786},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.28279998898506165}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-173083","doi":null,"is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-173083","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4417112369","https://openalex.org/W7167627169","https://openalex.org/W7168268648","https://openalex.org/W7161309496","https://openalex.org/W7165679132","https://openalex.org/W7164921330","https://openalex.org/W7135053558","https://openalex.org/W7215932886","https://openalex.org/W7166871951","https://openalex.org/W7150853638"],"abstract_inverted_index":{"Command":[0],"Line":[1],"Interface":[2],"(CLI)":[3],"agents":[4,49,155,218],"powered":[5],"by":[6,167],"large":[7],"language":[8,26],"models":[9],"(LLMs)":[10],"are":[11],"rapidly":[12],"maturing":[13],"as":[14],"assistants":[15],"that":[16],"operate":[17],"within":[18],"a":[19,157,163],"computer's":[20],"CLI,":[21,182,186],"capable":[22],"of":[23],"understanding":[24],"natural":[25],"requests,":[27],"planning":[28],"tasks,":[29,137,142,146],"executing":[30],"commands,":[31],"and":[32,35,92,105,109,147,187],"modifying":[33],"files":[34],"code.":[36],"Among":[37],"their":[38,65],"most":[39],"critical":[40,198],"applications":[41],"is":[42,61],"operating":[43],"system":[44],"(OS)":[45],"control.":[46],"As":[47],"CLI":[48,154,176,203,217],"in":[50,57,129,162,200,216],"the":[51,122,172,206],"OS":[52,159,220],"domain":[53],"become":[54],"increasingly":[55],"embedded":[56],"daily":[58],"operations,":[59],"it":[60],"imperative":[62],"to":[63,75,212],"examine":[64],"real-world":[66,127],"security":[67,160],"implications,":[68],"specifically":[69],"whether":[70],"they":[71],"can":[72],"be":[73],"misused":[74],"perform":[76],"realistic,":[77],"security-relevant":[78],"attacks.":[79],"Existing":[80],"works":[81],"exhibit":[82],"four":[83],"major":[84],"limitations:":[85],"Missing":[86],"attacker-knowledge":[87],"model":[88],"on":[89,113,191],"tactics,":[90],"techniques,":[91],"procedures":[93],"(TTP),":[94],"incomplete":[95],"coverage":[96],"for":[97,209],"end-to-end":[98,149],"kill":[99,150],"chains,":[100,151],"unrealistic":[101],"environment":[102,165],"without":[103],"multi-host":[104,164],"encrypted":[106],"user":[107],"credentials,":[108],"unreliable":[110],"judgment":[111],"dependent":[112],"LLM-as-a-Judge.":[114],"To":[115],"address":[116,213],"these":[117],"gaps,":[118],"we":[119],"propose":[120],"AdvCLI,":[121],"first":[123],"benchmark":[124],"aligned":[125],"with":[126],"TTPs":[128],"MITRE":[130],"ATT&CK":[131],"Enterprise":[132],"Matrix,":[133],"which":[134],"comprises":[135],"140":[136],"including":[138,178],"40":[139],"direct":[140],"malicious":[141,145],"74":[143],"TTP-based":[144],"26":[148],"systematically":[152],"evaluates":[153],"under":[156],"realistic":[158],"threat":[161],"sandbox":[166],"hard-coded":[168],"evaluation.":[169],"We":[170],"evaluate":[171],"existing":[173],"six":[174],"mainstream":[175],"agents,":[177,204],"ReAct,":[179],"AutoGPT,":[180],"Gemini":[181],"Cluade":[183],"Code,":[184],"Cursor":[185,188],"IDE":[189],"based":[190],"9":[192],"foundation":[193],"LLMs.":[194],"The":[195],"results":[196],"highlight":[197],"vulnerabilities":[199,215],"current":[201],"frontier":[202],"underscoring":[205],"urgent":[207],"need":[208],"future":[210],"research":[211],"alignment":[214],"regarding":[219],"security-centric":[221],"threats.":[222]},"counts_by_year":[],"updated_date":"2026-09-24T07:57:37.273135","created_date":"2026-08-23T00:00:00"}