{"data":{"id":"35ea374b-c512-4d6a-a24d-2a2a184b7242","title":"Least-Privilege Auditing of Agent Tool Calls with Intent Graphs and Reasoning-Guided Escalation","summary":"This research presents a runtime audit for LLM agents that calls tools, aimed at indirect prompt injection in tool outputs. The audit derives an intent graph from the user's objective and tool catalog with one LLM call per task, then checks each tool call against it with a deterministic loop, median 5.7 microseconds per call. Flagged calls are escalated to a reasoning guardian that sees only the objective, plan, call history without tool outputs, and the flagged call, and the authors note end-to-end validation remains open.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.11305v1","publishedAt":"2026-11-08T11:05:45.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-08T11:05:45.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}