{"id":"https://openalex.org/W7214769095","doi":"https://doi.org/10.48550/arxiv.2609.34790","title":"CoSec: Benchmarking Agent Security in Communities","display_name":"CoSec: Benchmarking Agent Security in Communities","publication_year":2026,"publication_date":"2026-09-28","ids":{"openalex":"https://openalex.org/W7214769095","doi":"https://doi.org/10.48550/arxiv.2609.34790"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2609.34790","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.34790","pdf_url":"https://arxiv.org/pdf/2609.34790","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2609.34790","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5153503869","display_name":"Hao Mark Chen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen, Hao","raw_affiliation_strings":["Nanjing University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University ,","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153523060","display_name":"Wenhui Dong","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dong, Wenhui","raw_affiliation_strings":["Nanjing University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University ,","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153456395","display_name":"Ye Chen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen, Ye","raw_affiliation_strings":["Xi'an Jiaotong University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xi'an Jiaotong University ,","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153491572","display_name":"Jiezhi Yao","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yao, Jiezhi","raw_affiliation_strings":["Beihang University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beihang University ,","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079545394","display_name":"Chenbo Xia","orcid":"https://orcid.org/0009-0000-5943-3271","observed_orcids":["https://orcid.org/0009-0000-5943-3271"]},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xia, Chenbo","raw_affiliation_strings":["Zhejiang University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University ,","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011706387","display_name":"\u66f2\u7389\u6587","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qu, Yuwen","raw_affiliation_strings":["Nanjing University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University ,","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153528834","display_name":"Renxiang Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1328775524","display_name":"Zhejiang Sci-Tech University","ror":"https://ror.org/03893we55","country_code":"CN","type":"education","lineage":["https://openalex.org/I1328775524"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wang, Renxiang","raw_affiliation_strings":["Zhejiang Sci-Tech University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Sci-Tech University ,","institution_ids":["https://openalex.org/I1328775524"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009604667","display_name":"\u8881\u590d\u680b","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan, Fudong","raw_affiliation_strings":["Zhejiang University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University ,","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153539306","display_name":"Camil Hamami","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hamami, Camil","raw_affiliation_strings":["Tsinghua University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University ,","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153477038","display_name":"Chenglong Pan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pan, Chenglong","raw_affiliation_strings":["Southeast University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University ,","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117773454","display_name":"Xinquan Yue","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue, Xinquan","raw_affiliation_strings":["Nanjing University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University ,","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153484423","display_name":"Ziyu Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wang, Ziyu","raw_affiliation_strings":["Tongji University , 9 Sun Yat-sen"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tongji University , 9 Sun Yat-sen","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153454020","display_name":"Fengyu Ye","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye, Fengyu","raw_affiliation_strings":["University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023000066","display_name":"Chenyang Si","orcid":"https://orcid.org/0000-0002-3354-1968","observed_orcids":["https://orcid.org/0000-0002-3354-1968"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Si, Chenyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5055478558","display_name":"Caifeng Shan","orcid":"https://orcid.org/0000-0002-2131-1671","observed_orcids":["https://orcid.org/0000-0002-2131-1671"]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shan, Caifeng","raw_affiliation_strings":["Nanjing University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University ,","institution_ids":["https://openalex.org/I881766915"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7538999915122986,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7538999915122986,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.1339000016450882,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.03819999843835831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.8970000147819519},{"id":"https://openalex.org/keywords/agent-security","display_name":"agent security","score":0.6970000267028809},{"id":"https://openalex.org/keywords/privacy-enforcement","display_name":"privacy enforcement","score":0.6209999918937683},{"id":"https://openalex.org/keywords/benchmarking","display_name":"benchmarking","score":0.5630000233650208},{"id":"https://openalex.org/keywords/persistent-memory","display_name":"persistent memory","score":0.4359999895095825},{"id":"https://openalex.org/keywords/information-leakage","display_name":"information leakage","score":0.5640000104904175},{"id":"https://openalex.org/keywords/community-membership","display_name":"community membership","score":0.39500001072883606},{"id":"https://openalex.org/keywords/agent-cooperation","display_name":"agent cooperation","score":0.5149999856948853},{"id":"https://openalex.org/keywords/attack-scenarios","display_name":"attack scenarios","score":0.414000004529953},{"id":"https://openalex.org/keywords/execution-traces","display_name":"execution traces","score":0.5210000276565552}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7089999914169312},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6863999962806702},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.6216999888420105},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.6151999831199646},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.45590001344680786},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4406999945640564},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.41589999198913574},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.39410001039505005},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3783999979496002},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3659999966621399},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.365200012922287},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.35749998688697815},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.349700003862381},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3310000002384186},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.31450000405311584},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3070000112056732},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.2754000127315521},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C2778062554","wikidata":"https://www.wikidata.org/wiki/Q3404031","display_name":"Security community","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C2779886121","wikidata":"https://www.wikidata.org/wiki/Q288682","display_name":"XACML","level":3,"score":0.2596000134944916},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.25920000672340393},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2554999887943268},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.2542000114917755}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2609.34790","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.34790","pdf_url":"https://arxiv.org/pdf/2609.34790","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2609.34790","doi":"https://doi.org/10.48550/arxiv.2609.34790","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2609.34790","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2609.34790","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.34790","pdf_url":"https://arxiv.org/pdf/2609.34790","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7214769095.pdf","grobid_xml":"https://content.openalex.org/works/W7214769095.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2076004681","https://openalex.org/W4387800437","https://openalex.org/W4412945638","https://openalex.org/W4414585368","https://openalex.org/W4416034079","https://openalex.org/W7140099432","https://openalex.org/W7148687903","https://openalex.org/W7160900317","https://openalex.org/W7161798664","https://openalex.org/W7162082447","https://openalex.org/W7164992788","https://openalex.org/W7165671922","https://openalex.org/W7166537193","https://openalex.org/W7166817130","https://openalex.org/W7171806674","https://openalex.org/W7202257196"],"related_works":["https://openalex.org/W7162637323","https://openalex.org/W7220672432","https://openalex.org/W7148687903","https://openalex.org/W7164162217","https://openalex.org/W7162082447","https://openalex.org/W7223135949","https://openalex.org/W7166065244","https://openalex.org/W7206170518","https://openalex.org/W4415164739","https://openalex.org/W7222346869"],"abstract_inverted_index":{"LLM":[0,66,198],"agents":[1,136],"operate":[2],"in":[3,24,50,65,188],"persistent":[4,100,111,197],"collaborative":[5],"environments":[6],"involving":[7],"multiple":[8],"users,":[9],"communities,":[10],"memories,":[11],"files,":[12,160],"and":[13,28,35,62,71,81,94,102,115,129,133,144,154,162,185],"tools.":[14,116],"Community":[15],"boundaries":[16],"may":[17],"remain":[18],"fixed":[19,80],"or":[20,91,182],"evolve":[21],"with":[22,110],"changes":[23],"membership,":[25],"roles,":[26],"composition,":[27],"relationships.":[29],"Agents":[30],"must":[31],"complete":[32,107,138],"legitimate":[33],"tasks":[34,140],"prevent":[36],"unauthorized":[37],"disclosure":[38],"of":[39],"protected":[40,84,166],"information.":[41],"Existing":[42],"evaluations":[43],"do":[44],"not":[45,179],"fully":[46],"examine":[47],"these":[48],"risks":[49],"agent":[51,67,89,108],"systems.":[52],"We":[53],"introduce":[54],"\\textbf{CoSec},":[55],"an":[56,192],"executable":[57],"benchmark":[58],"for":[59,196],"evaluating":[60],"privacy":[61,143,181],"authorization":[63,124,145,183,187],"enforcement":[64],"systems":[68,109],"operating":[69],"within":[70],"across":[72,150],"communities.":[73],"CoSec":[74,105],"contains":[75],"208":[76],"canonical":[77],"scenarios":[78],"spanning":[79],"evolving":[82],"boundaries,":[83],"information":[85,119,167],"belonging":[86],"to":[87],"the":[88,122],"owner":[90],"other":[92],"participants,":[93],"attacks":[95],"through":[96],"dialogue,":[97],"environmental":[98],"content,":[99],"memory,":[101,113,159],"composed":[103],"workflows.":[104],"executes":[106],"sessions,":[112],"files":[114],"It":[117],"verifies":[118],"flows":[120],"against":[121],"active":[123],"state":[125],"using":[126],"execution":[127],"traces":[128],"artifacts.":[130],"Across":[131],"harness":[132],"model":[134],"configurations,":[135],"frequently":[137],"benign":[139],"but":[141],"violate":[142],"boundaries.":[146],"Privacy":[147],"behavior":[148],"varies":[149],"harnesses,":[151],"attack":[152],"surfaces,":[153],"community":[155,189],"states,":[156],"revealing":[157],"how":[158],"tools,":[161],"workflows":[163],"can":[164],"carry":[165],"beyond":[168],"its":[169],"authorized":[170],"scope.":[171],"These":[172],"findings":[173],"show":[174],"that":[175,186],"task":[176],"utility":[177],"does":[178],"imply":[180],"compliance":[184],"settings":[190],"remains":[191],"unresolved":[193],"security":[194],"challenge":[195],"agents.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-09-30T00:00:00"}