Appreciation Teaches Unauthorized Execution: Self-Evolution Degrades the Robustness of Personal Agents to Indirect Prompt Injection
Learning from user feedback can weaken agents against indirect prompt injection. Skill evolution raised attack success by 14.0 to 48.8 points against the base agent.
Explainer · on the wire
The explainer for this story is still on the wire.
The claim, the mechanism, and the figures land here once generated.
Source · arXiv