{"id":"https://openalex.org/W7172343448","doi":"https://doi.org/10.48550/arxiv.2607.29254","title":"Tool Specifications Matter: Uncovering and Mitigating Safety Risks in AI Agents","display_name":"Tool Specifications Matter: Uncovering and Mitigating Safety Risks in AI Agents","publication_year":2026,"publication_date":"2026-07-31","ids":{"openalex":"https://openalex.org/W7172343448","doi":"https://doi.org/10.48550/arxiv.2607.29254"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.29254","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.29254","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.29254","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5144244895","display_name":"Minghui Pan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pan, Minghui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5144290363","display_name":"Jiayuxuan Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Jiayuxuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5144299939","display_name":"Yuanyuan Yuan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuan, Yuanyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5144286715","display_name":"Yu Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5144298669","display_name":"Zhenpeng Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zhenpeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6310999989509583,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6310999989509583,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.08079999685287476,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0778999999165535,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/safeguard","display_name":"Safeguard","score":0.5820000171661377},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5009999871253967},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.4740999937057495},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.3799999952316284},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.36480000615119934},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.3643999993801117}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6425999999046326},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.5820000171661377},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5695000290870667},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5009999871253967},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4740999937057495},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.3799999952316284},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.36480000615119934},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3643999993801117},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3522999882698059},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.32679998874664307},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.31630000472068787},{"id":"https://openalex.org/C2776544517","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Unexpected events","level":2,"score":0.304500013589859},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.260699987411499},{"id":"https://openalex.org/C2779679103","wikidata":"https://www.wikidata.org/wiki/Q5251805","display_name":"Degradation (telecommunications)","level":2,"score":0.25870001316070557},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2581000030040741},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.29254","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.29254","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.29254","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.29254","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7047809958457947}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI":[0],"agents":[1],"extend":[2],"large":[3],"language":[4],"models":[5],"(LLMs)":[6],"with":[7],"external":[8],"tools,":[9],"enabling":[10],"them":[11],"to":[12,76,137,152],"perform":[13],"complex":[14],"tasks":[15],"and":[16,35,60,74,117,123,139,159,167],"translate":[17],"model":[18],"outputs":[19],"into":[20],"consequential":[21],"real-world":[22],"actions.":[23],"Yet":[24],"LLMs":[25],"often":[26],"become":[27],"substantially":[28],"less":[29],"safe":[30],"when":[31],"deployed":[32],"as":[33,52],"agents,":[34],"the":[36,69,107,128,141,165],"source":[37,55],"of":[38,56],"this":[39,45,82],"degradation":[40,59],"remains":[41],"poorly":[42],"understood.":[43],"In":[44],"paper,":[46],"we":[47,84],"identify":[48],"schema-formatted":[49,109],"tool":[50,78,95,103],"specifications":[51,104,110],"a":[53],"primary":[54],"agent":[57],"safety":[58,92],"show,":[61],"through":[62],"white-box":[63,122],"representation":[64],"analysis,":[65],"that":[66,90],"they":[67],"weaken":[68],"model's":[70],"internal":[71],"refusal":[72,130],"signals":[73],"contribute":[75],"unsafe":[77],"execution.":[79,112],"Building":[80],"on":[81],"finding,":[83],"propose":[85],"SafeKeep,":[86],"an":[87],"inference-time":[88],"safeguard":[89],"decouples":[91],"judgment":[93],"from":[94,135,150],"execution:":[96],"it":[97],"assesses":[98],"requests":[99,134],"using":[100],"flattened":[101],"textual":[102],"while":[105],"retaining":[106],"original":[108],"for":[111,132],"Across":[113],"two":[114],"representative":[115],"benchmarks":[116],"four":[118],"LLMs,":[119],"including":[120],"both":[121],"black-box":[124],"models,":[125],"SafeKeep":[126],"increases":[127],"average":[129,142],"rate":[131,145],"harmful":[133],"23.8%":[136],"70.6%":[138],"reduces":[140],"attack":[143],"success":[144],"under":[146],"observation-level":[147],"prompt":[148],"injection":[149],"25.6%":[151],"2.5%.":[153],"It":[154],"also":[155],"outperforms":[156],"existing":[157],"safeguards":[158],"preserves":[160],"task-handling":[161],"capability.":[162],"We":[163],"release":[164],"code":[166],"data":[168],"at":[169],"https://github.com/snowcatsmoking/SafeKeep":[170],".":[171]},"counts_by_year":[],"updated_date":"2026-08-04T08:18:43.703281","created_date":"2026-08-04T00:00:00"}