Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis

Jeffrey Yang Fan Chiang , Seungjae Lee , Jia-Bin Huang , Furong Huang , Yizheng Chen

🏛 Institutions: UMD
📅 Date: February 27, 2025
📑 Publisher: arXiv
💻 Env: Web
🔑 Keywords: security component-level analysis harmfulness taxonomy observational capabilities OpenHands

TLDR

This paper analyzes why web AI agents are more vulnerable than standalone LLMs even when they use the same underlying models. It attributes the gap to user-goal embedding in system prompts, multi-step action generation, and observational signals, and proposes a more granular evaluation taxonomy for studying those failures.

Open paper arXiv Report issue