Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents
arXiv:2606.13385v2 Announce Type: replace-cross Abstract: LLM-based web agents are increasingly deployed in real-world settings such as e-commerce, where they interact extensively with untrusted web content while executing actions that carry direct financial consequences. This makes them vulnerable to prompt-injection attacks, in which seemingly benign web content conceals adversarial instructions that manipulate the agent's behavior. Existing security benchmarks adopt an \textit{attack-centric}
Record details
Published: 28 July 2026
Source: arXiv cs.CY
Category: Research
Topics: Agents & autonomy
Retrieved: 28 July 2026
Related evidence
These records share source-supplied organisations, an exact publisher byline, automatic topics or regions. The reason is shown on every link; related does not mean supporting, agreeing with or verifying this record.
CollabSkill: Evaluating Human-Agent Collaboration On Real-World Tasks
arXiv cs.CY · 28 July 2026
Coherent Without Grounding, Grounded Without Success: Observability and Epistemic Failure
arXiv cs.CY · 28 July 2026
Mapping the Reddit Bot Ecosystem: Taxonomy and Evolution
arXiv cs.CY · 28 July 2026
Separating Capability from Permission: A Governance Framework for Agentic AI Autonomy Levels
arXiv cs.CY · 28 July 2026
Share No More Than the Request Requires: Federated Disclosure for Perspective-Aware AI
arXiv cs.CY · 28 July 2026
State-dependent error correlations shape voting thresholds in committees of AI agents
arXiv cs.CY · 28 July 2026
How to cite this record
ethics.ai (28 July 2026), “Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents,” evidence record 13817, https://ethics.ai/record/13817 (originally published by arXiv cs.CY).
Use and limitations
This page is a stable index and citation surface for a source record. ethics.ai did not author the underlying report and has not independently verified every claim. Automatic topics may be imperfect. For consequential use, quote and cite the original publisher.