Tag
This research demonstrates that text-based safety guardrails fail to detect attacks on LLM agents with tool access, as attacks are embedded in tool-call sequences rather than text, achieving a high bypass rate against state-of-the-art defenses.