Cheng-Cheng Wan

Datura: Progressive Red Teaming Testing for Tool Invocation Chain in LLM Agents

LLM agents that invoke external tools face critical safety vulnerabilities when malicious manipulations exploit their implicit trust in tool outputs and metadata. However, identifying these vulnerabilities through testing is challenging due to the need to bypass safety guardrails with semantically legitimate inputs, th...