Skip to content
OpenTrain AIFor AI Companies

InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents

Published Mar 1, 2024
arXiv PDF
Researcher verdict
Starting point
Use as implementation starting point
Benchmark evidence
Missing
Not verified yet
Time to first repro
A few days
Plan setup time
Risk flags
1
Review before use

Results and benchmarks

Freshness tier: cold
InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents is the primary contribution described in this paper.

Implementation

Historical official implementation (not recommended for new builds)

Why this implementation
Confidence: low

facebookresearch/meta_secalign is the closest maintained adjacent implementation (Community adoption signal (70 stars)). It is not paper-verified; validate algorithm and evaluation setup against the paper before trusting reported metrics. Community adoption signal: 70 GitHub stars.

Open uiuc-kang-lab/injecagent
Reproduction risks
  • Adjacent implementations are not paper-verified
  • Recommended repository is adjacent and not paper-verified.
  • Adjacent implementation match confidence is low.
  • No direct maintained implementation is currently verified.
  • Only historical official repository was found: uiuc-kang-lab/injecagent.
  • No maintained paper-verified implementation met reliability thresholds.

Compare implementation paths

Compare maintenance quality, reproducibility coverage, and evidence confidence before choosing a reproduction baseline.

uiuc-kang-lab/injecagent
historical official
Maintenance
Stale
Confidence
High
Reproducibility
Moderate
Stars
160
Last push
Jul 2, 2024 (784d)

Official implementation from Papers with Code · Repository link is mentioned in the paper metadata

  • No push in 12+ months
  • No CI pipeline detected
  • No tagged releases
jiangmuran/sentinel
alternative
Maintenance
Recently updated
Confidence
Low
Reproducibility
Strong
Stars
2
Last push
Jul 25, 2026 (31d)

Matched via arXiv identifier search

  • No tagged releases
  • No Docker setup
  • Low confidence match
qualixar/skillfortifybench
alternative
Maintenance
Recently updated
Confidence
Low
Reproducibility
Limited
Stars
3
Last push
Apr 24, 2026 (123d)

Matched via arXiv identifier search

  • No CI pipeline detected
  • No tagged releases
  • No Docker setup

Reproduction readiness

Time to first repro: days
Last checked: Aug 23, 2026

Setup required

Dependencies pinned, manual setup needed

  • uiuc-kang-lab/injecagent has requirements.txt but requires manual environment setup.
  • Last push was 784 days ago, so expect possible dependency version conflicts.
  • No Dockerfile, so you will set up the environment manually.
  • No CI pipeline, so test coverage is unknown.
Open uiuc-kang-lab/injecagent

Hardware requirements

  • Expect multi-day setup/compute for meaningful reproduction based on current guidance.

Quick start

git clone https://github.com/uiuc-kang-lab/injecagent.git
pip install -r requirements.txt

Repositories and ecosystem

Closest related implementations

These are not paper-verified. Use them as reference points when no direct implementation is available.

No additional verified repositories beyond the primary recommendation.

Hugging Face artifacts

No trustworthy direct or curated related Hugging Face artifacts were found yet. Use targeted searches to quickly locate candidate models, datasets, and demos.

Search models Search datasets Search spaces

Tip: start with models, then check datasets and spaces if you need evaluation data or demos.

Research context

Tasks

None detected

Methods

Transformer

Domains

Natural Language Processing

Evaluation and human feedback data

Open this paper in HFEPX to review benchmark signals, evaluation modes, and human-feedback protocol context.

Open in HFEPX
Explore similar papers

Jump to Paper2Code search queries derived from this paper's research context.

Transformer Natural Language Processing

Data includes links from Papers with Code ( CC-BY-SA-4.0 ).