AgentShield: Deception-based Compromise Detection for Tool-using LLM Agents
DGX agentarXiv:2605.11026v1 Announce Type: cross Abstract: Defenses against indirect prompt injection (IPI) in tool-using LLM agents share two structural weaknesses. First, they all attempt to prevent attacks