← back to paper
arxiv: 2605.03378 · 2 revisions
ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection