{"id":"https://openalex.org/W7148317788","doi":"https://doi.org/10.48550/arxiv.2604.01194","title":"AgentWatcher: A Rule-based Prompt Injection Monitor","display_name":"AgentWatcher: A Rule-based Prompt Injection Monitor","publication_year":2026,"publication_date":"2026-04-01","ids":{"openalex":"https://openalex.org/W7148317788","doi":"https://doi.org/10.48550/arxiv.2604.01194"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.01194","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01194","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.01194","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132815486","display_name":"Yanting Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yanting","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132812496","display_name":"Wei Zou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zou, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132789769","display_name":"Runpeng Geng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Geng, Runpeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5132814158","display_name":"Jinyuan Jia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jia, Jinyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.30329999327659607,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.30329999327659607,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.1265999972820282,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.09269999712705612,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6913999915122986},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.646399974822998},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.536300003528595},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.48840001225471497},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4668999910354614}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7005000114440918},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6913999915122986},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.646399974822998},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.536300003528595},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.48840001225471497},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4668999910354614},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4510999917984009},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.41339999437332153},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28780001401901245},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26759999990463257},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25839999318122864},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.25440001487731934}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.01194","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01194","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.01194","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01194","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6553720831871033,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"(LLMs)":[3],"and":[4,35,54,125,132,162,177],"their":[5,27],"applications,":[6],"such":[7],"as":[8,31],"agents,":[9],"are":[10],"highly":[11],"vulnerable":[12],"to":[13,50,56,65,87,108,137],"prompt":[14,18,45,130,175],"injection":[15,19,176],"attacks.":[16,181],"State-of-the-art":[17],"detection":[20,48,98,149],"methods":[21],"have":[22],"the":[23,67,73,78,82,113,144,148],"following":[24],"limitations:":[25],"(1)":[26],"effectiveness":[28],"degrades":[29],"significantly":[30],"context":[32,94],"length":[33],"increases,":[34],"(2)":[36],"they":[37],"lack":[38],"explicit":[39],"rules":[40,121,141],"that":[41,170],"define":[42,117],"what":[43,123],"constitutes":[44],"injection,":[46,131],"causing":[47],"decisions":[49,150],"be":[51,106],"implicit,":[52],"opaque,":[53],"difficult":[55],"reason":[57,138],"about.":[58],"In":[59],"this":[60],"work,":[61],"we":[62,116],"propose":[63],"AgentWatcher":[64,76,104,171],"address":[66,72,112],"above":[68],"two":[69],"limitations.":[70],"To":[71,111],"first":[74],"limitation,":[75,115],"attributes":[77],"LLM's":[79],"output":[80],"(e.g.,":[81],"action":[83],"of":[84,91,120],"an":[85],"agent)":[86],"a":[88,100,118,129,134,155],"small":[89],"set":[90,119],"causally":[92],"influential":[93],"segments.":[95],"By":[96],"focusing":[97],"on":[99,143,158],"relatively":[101],"short":[102],"text,":[103,146],"can":[105,172],"scalable":[107],"long":[109],"contexts.":[110],"second":[114],"specifying":[122],"does":[124,126],"not":[127],"constitute":[128],"use":[133],"monitor":[135],"LLM":[136],"over":[139],"these":[140],"based":[142],"attributed":[145],"making":[147],"more":[151],"explainable.":[152],"We":[153],"conduct":[154],"comprehensive":[156],"evaluation":[157],"tool-use":[159],"agent":[160],"benchmarks":[161],"long-context":[163],"understanding":[164],"datasets.":[165],"The":[166,182],"experimental":[167],"results":[168],"demonstrate":[169],"effectively":[173],"detect":[174],"maintain":[178],"utility":[179],"without":[180],"code":[183],"is":[184],"available":[185],"at":[186],"https://github.com/wang-yanting/AgentWatcher.":[187]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-03T00:00:00"}