Step-Zero Attack: Agent Safety Before Observability
Existing attacks and defenses for coding agents act once content enters the model context: injected text persuades the model, and guards inspect what the model reads. Yet to judge whether processing an unknown archive, network response, or image is safe, an agent often must process it first, and that step can do harm before any content reaches the model. We call this first processing Step Zero,…
We haven't written up this one. arXiv cs.AI has the full story — the link below goes straight to it.
