{"id":"https://openalex.org/W7161679589","doi":"https://doi.org/10.48550/arxiv.2605.17986","title":"LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt Injection","display_name":"LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt Injection","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7161679589","doi":"https://doi.org/10.48550/arxiv.2605.17986"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17986","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17986","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17986","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136474174","display_name":"Lei Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Lei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102675955","display_name":"Abhay Bhaskar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bhaskar, Abhay","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5031235093","display_name":"Edgar Dobriban","orcid":"https://orcid.org/0000-0002-3467-8931"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dobriban, Edgar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7246999740600586,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7246999740600586,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0722000002861023,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.03449999913573265,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.6622999906539917},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5684000253677368},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.541700005531311},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5195000171661377},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5055000185966492},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.4214000105857849}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7537999749183655},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.6622999906539917},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5684000253677368},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.541700005531311},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5195000171661377},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5055000185966492},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4334000051021576},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.4214000105857849},{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.33329999446868896},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.3212999999523163},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3041999936103821},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.30320000648498535},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.262800008058548},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.26089999079704285},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2526000142097473}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17986","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17986","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17986","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17986","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.762793779373169,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI":[0],"agents":[1],"such":[2,32],"as":[3,33],"OpenClaw":[4],"are":[5,44],"increasingly":[6],"deployed":[7],"in":[8,29,69,153,191],"local":[9],"workflows":[10],"with":[11,111],"access":[12],"to":[13,142],"external":[14],"tools.":[15],"This":[16],"creates":[17],"indirect":[18],"prompt-injection":[19],"(IPI)":[20],"risk:":[21],"an":[22],"agent":[23],"may":[24],"execute":[25],"harmful":[26],"instructions":[27],"embedded":[28],"untrusted":[30],"inputs":[31],"email,":[34,115],"downloaded":[35],"files,":[36],"webpages,":[37],"repositories,":[38],"or":[39,49,96],"group-chat":[40],"messages.":[41],"Existing":[42],"evaluations":[43],"often":[45],"small,":[46],"purely":[47],"simulated,":[48],"focused":[50],"on":[51,106,199],"a":[52,63,70,107,163,169],"narrow":[53],"set":[54],"of":[55,173],"channels.":[56],"We":[57,103,166],"introduce":[58],"LivePI":[59,75,105,192],"(Live":[60],"Prompt":[61],"Injection),":[62],"structured":[64],"benchmark":[65],"for":[66],"IPI":[67],"risk":[68],"production-like":[71],"but":[72,113],"test-controlled":[73,114],"environment.":[74],"covers":[76],"seven":[77],"input":[78],"surfaces,":[79],"twelve":[80],"attack/rendering":[81],"families,":[82],"and":[83,100,120,133,156,176],"five":[84],"malicious":[85],"goals,":[86],"including":[87],"protected-information":[88],"exfiltration,":[89,99],"unauthorized":[90],"security-control":[91],"changes,":[92],"unsafe":[93],"code":[94],"retrieval":[95],"execution,":[97],"inbox-summary":[98],"cryptocurrency":[101],"transfer.":[102],"run":[104],"real":[108],"virtual":[109],"machine":[110],"live":[112],"chat,":[116],"web,":[117],"local-file,":[118],"repository,":[119],"wallet":[121],"interfaces.":[122],"Across":[123],"GPT-5.3-Codex,":[124],"Claude":[125],"Opus":[126],"4.6,":[127],"Gemini":[128],"3.1":[129],"Pro,":[130],"Kimi":[131],"K2.5,":[132],"GLM-5,":[134],"total":[135],"attack":[136],"success":[137],"rates":[138],"range":[139],"from":[140],"10.7%":[141],"29.6%.":[143],"Group-chat":[144],"injection":[145],"is":[146],"uniformly":[147],"successful":[148],"across":[149],"the":[150,181,184],"evaluated":[151],"backbones":[152],"our":[154],"deployment,":[155],"repository-link":[157],"attacks":[158],"produce":[159],"high-severity":[160],"failures":[161],"despite":[162],"small":[164],"denominator.":[165],"also":[167],"evaluate":[168],"two-layer":[170],"defense":[171,185],"consisting":[172],"prompt-level":[174],"filtering":[175],"pre-execution":[177],"tool-call":[178],"authorization.":[179],"In":[180],"GPT-5.3-Codex":[182],"setting,":[183],"intercepts":[186],"all":[187],"tested":[188],"malicious-goal":[189],"completions":[190],"before":[193],"execution":[194],"while":[195],"preserving":[196],"benign":[197],"utility":[198],"PinchBench-derived":[200],"workloads.":[201]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}