{"data":{"id":"884fa9bf-93fb-4fb5-b98f-b676fd9fb763","title":"Intent-Aware Protection for AI Agents","summary":"Researchers introduce Intent-Aware Security, a framework that treats an AI agent's trusted intent as a security object, defined through Intent Preservation and Intent Drift and operationalized as an Intent Profile. On an 887-sample benchmark across 35 agents, Intent Profile-based protection raises four-class macro-F1 from 45% to 79%, with Out-of-Scope F1 rising from 8% to 76%. On more than 10,000 executed AgentDojo trajectories, profile-based post-execution detection reaches 0.949 AUROC, versus 0.909 for AlignmentCheck.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.16122v1","publishedAt":"2026-11-12T00:17:31.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AgentDojo"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-12T00:17:31.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}