AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories
arXiv:2609.06972v1 Announce Type: cross Abstract: LLM agents complete tasks by issuing sequences of tool calls, and every observation they read is a channel through which an indirect prompt injection