most citedBrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

1 citations · 1 across the 7 of their papers we have counts for

collaborators

9 papers

cs.CR2026

RATION: Towards Quantitative Risk-Based Access Control for AI Agents

Yuntao Du, Harsh Chaudhari, Yuetian Chen +8

AI agents increasingly interact with external environments to complete complex user tasks. These interactions can lead to unexpected behavior and expose agents to security threats…

cs.CR2026

BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views

Yuetian Chen, Kaiyuan Zhang, Yuntao Du +6

Browser agents need to make decisions and execute actions on behalf of users while consuming untrusted webpages, creating opportunities for malicious instructions embedded in webpa…

cs.CL2026

PII-TRACE: A Benchmark for Context-Aware PII Detection in Multi-Turn LLM Conversations

Kaiyuan Zhang, Chuan Wang, Joey Zhong +4

LLM assistants and agentic systems log long multi-turn conversations. AI providers often scan these conversations for Personally Identifiable Information (PII) and mask the PII bef…

cs.LG2026

WANDR: A Benchmark for Wide and Deep Research

Vitaliy Polshkov, Marcin Pitera, Jeremy Yang +7

WANDR (Wide ANd Deep Research) is a benchmark of 500 realistic, challenging data-collection tasks for research agents. Each task requires a system to discover a large set of entiti…

cs.AI2026

How AI Agents Reshape Knowledge Work: Autonomy, Efficiency, and Scope

Jeremy Yang, Kate Zyskowski, Noah Yonack +1

Frontier AI systems are bridging the gap between intelligence and utility by shifting from conversational assistants to autonomous agents that execute tasks end to end. Using produ…

cs.LG2026

Security Considerations for Artificial Intelligence Agents

Ninghui Li, Kaiyuan Zhang, Kyle Polley +1

This article, a lightly adapted version of Perplexity's response to NIST/CAISI Request for Information 2025-0035, details our observations and recommendations concerning the securi…

cs.LG2026

DRACO: a Cross-Domain Benchmark for Deep Research Accuracy, Completeness, and Objectivity

Joey Zhong, Hao Zhang, Clare Southern +7

We present DRACO (Deep Research Accuracy, Completeness, and Objectivity), a benchmark of complex deep research tasks. These tasks, which span 10 domains and draw on information sou…

cs.LG2025

The Adoption and Usage of AI Agents: Early Evidence from Perplexity

Jeremy Yang, Noah Yonack, Kate Zyskowski +3

This paper presents the first large-scale field study of the adoption, usage intensity, and use cases of general-purpose AI agents operating in open-world web environments. Our ana…

cs.LG2025★ 1 cited

BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Kaiyuan Zhang, Mark Tenenholtz, Kyle Polley +3

The integration of artificial intelligence (AI) agents into web browsers introduces security challenges that go beyond traditional web application threat models. Prior work has ide…