ToolFence: Fine-Grained Authorization for Secure Tool-Using LLM Agents

Yanjie Li, Xiangyu He, Xuelong Dai +1

Tool-using LLM agents remain vulnerable to indirect prompt injection because trusted instructions and untrusted observations share one context, allowing malicious content to steer…