1 paper
Pratibha Revankar, Kargi Chauhan, Jihye Kim +3
When LLM agents are coerced into covertly encoding sensitive data (Base64, ROT13, acrostic, synonym chains, and beyond), the resulting outputs evade output-side detection but the u…