{"id":"https://openalex.org/W7161710072","doi":"https://doi.org/10.48550/arxiv.2605.17480","title":"The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure","display_name":"The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure","publication_year":2026,"publication_date":"2026-05-17","ids":{"openalex":"https://openalex.org/W7161710072","doi":"https://doi.org/10.48550/arxiv.2605.17480"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17480","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17480","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17480","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136468612","display_name":"Qiqi Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Qiqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136496078","display_name":"Thorsten Holz","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Holz, Thorsten","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076195686","display_name":"Shilin Ye","orcid":"https://orcid.org/0000-0002-2805-1040"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye, Shilin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136501801","display_name":"Runhan Song","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Song, Runhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2770000100135803,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2770000100135803,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.11959999799728394,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.07970000058412552,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7698000073432922},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.670199990272522},{"id":"https://openalex.org/keywords/competence","display_name":"Competence (human resources)","score":0.541700005531311},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4756999909877777},{"id":"https://openalex.org/keywords/narrative","display_name":"Narrative","score":0.4634999930858612},{"id":"https://openalex.org/keywords/mediation","display_name":"Mediation","score":0.4244999885559082},{"id":"https://openalex.org/keywords/certainty","display_name":"Certainty","score":0.4171000123023987}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7698000073432922},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.670199990272522},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6258999705314636},{"id":"https://openalex.org/C100521375","wikidata":"https://www.wikidata.org/wiki/Q2015382","display_name":"Competence (human resources)","level":2,"score":0.541700005531311},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4756999909877777},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.4634999930858612},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45840001106262207},{"id":"https://openalex.org/C179420905","wikidata":"https://www.wikidata.org/wiki/Q223871","display_name":"Mediation","level":2,"score":0.4244999885559082},{"id":"https://openalex.org/C7493553","wikidata":"https://www.wikidata.org/wiki/Q1520777","display_name":"Certainty","level":2,"score":0.4171000123023987},{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.3968000113964081},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3659999966621399},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.32429999113082886},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.30320000648498535},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2800999879837036},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.27239999175071716},{"id":"https://openalex.org/C137577040","wikidata":"https://www.wikidata.org/wiki/Q431965","display_name":"Information asymmetry","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2628999948501587},{"id":"https://openalex.org/C154307955","wikidata":"https://www.wikidata.org/wiki/Q6648555","display_name":"Litigation risk analysis","level":3,"score":0.257999986410141},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17480","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17480","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17480","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17480","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8009629845619202}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Multi-agent":[0],"systems":[1],"extend":[2],"large":[3],"language":[4],"models":[5,57,230],"(LLMs)":[6],"by":[7,109],"decomposing":[8],"tasks":[9],"among":[10],"specialized":[11],"agents,":[12],"but":[13],"their":[14,124,205],"distributed":[15],"decision":[16],"process":[17],"creates":[18],"new":[19],"attack":[20,27],"surfaces.":[21],"We":[22],"identify":[23],"semantic":[24],"hijacking,":[25],"an":[26],"in":[28],"which":[29,197],"harmful":[30],"requests":[31],"are":[32,114],"concealed":[33],"within":[34],"domain-specific":[35],"narratives":[36,120],"and":[37,58,127,163,236],"propagated":[38],"to":[39,81,117,131,138,216,228],"a":[40,64,173],"Manager":[41,56],"through":[42],"Worker":[43,60,68],"reports,":[44],"without":[45],"any":[46],"syntactic":[47],"injection":[48],"primitives.":[49],"Across":[50],"42,000":[51],"adversarial":[52,119],"trials":[53],"over":[54],"12":[55],"7":[59],"configurations,":[61],"we":[62,90,192],"uncover":[63],"capability":[65,69],"paradox:":[66],"as":[67,121,136],"increases,":[70],"the":[71,150,166,189,209],"mean":[72],"system-level":[73],"Attack":[74],"Success":[75],"Rate":[76],"(ASR)":[77],"increases":[78],"from":[79,214],"18.4%":[80],"63.9%,":[82],"peaking":[83],"at":[84],"94.4%.":[85],"To":[86],"explain":[87],"this":[88,105,185],"effect,":[89,151],"conduct":[91],"multi-level":[92],"mediation":[93,190],"analysis":[94,102],"on":[95,188],"two":[96],"independent":[97],"datasets":[98],"(47,807":[99],"interactions).":[100],"This":[101],"shows":[103,172],"that":[104,225,237],"paradox":[106],"is":[107],"driven":[108],"linguistic":[110],"certainty:":[111],"stronger":[112,229],"Workers":[113,199],"more":[115],"likely":[116],"interpret":[118],"legitimate,":[122],"convey":[123],"conclusions":[125],"assertively,":[126],"thereby":[128],"lead":[129],"Managers":[130],"treat":[132],"such":[133],"confident":[134],"endorsements":[135],"justification":[137],"execute.":[139],"In":[140],"our":[141],"larger":[142],"Worker-Only":[143],"setting":[144,169],"($n_W$=14),":[145],"certainty":[146],"mediates":[147],"74%":[148],"of":[149,200],"with":[152,218],"95%":[153],"confidence":[154],"intervals":[155],"(CI)":[156],"excluding":[157],"zero":[158],"under":[159],"both":[160],"Monte":[161],"Carlo":[162],"cluster":[164],"bootstrap;":[165],"smaller":[167],"Full-MAS":[168],"($n_W$":[170],"=6)":[171],"directionally":[174],"consistent":[175],"indirect":[176],"effect.":[177],"Worker-side":[178],"safety":[179],"prompting":[180],"does":[181],"not":[182],"reliably":[183],"mitigate":[184],"failure.":[186],"Building":[187],"finding,":[191],"propose":[193],"heterogeneous":[194],"ensemble":[195],"verification,":[196],"pairs":[198],"asymmetric":[201],"domain":[202],"competence":[203],"so":[204],"complementary":[206],"vulnerabilities":[207],"break":[208],"certainty-to-execution":[210],"chain,":[211],"reducing":[212],"ASR":[213],"52.8%":[215],"2.0%":[217],"negligible":[219],"benign-task":[220],"impact.":[221],"Our":[222],"results":[223],"show":[224],"upgrading":[226],"components":[227],"can":[231],"actively":[232],"degrade":[233],"system":[234],"security,":[235],"effective":[238],"defenses":[239],"require":[240],"exploiting--rather":[241],"than":[242],"eliminating--capability":[243],"asymmetries":[244],"between":[245],"agents.":[246]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}