REALM: Identifying Minimal Task Assets for LLM Agents

Summary

REALM is an approach for identifying and maintaining the assets an LLM agent's task requires, including assets discovered only during execution. It represents them as Dependency Graph nodes, separates discovering an asset from authorizing its use, and exposes resource-bound Partial APIs inside a Task Container. Across 60 clean tasks and 560 injected cases in AgentDyn, it completes 40.0% and 36.4% of tasks and reduces ASR from 16.6% to 0.2% with qwen3.5-flash as the base model.

Related items

• InfoUnderstanding and Mitigating Role Spoofing in LLMsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-119050: Agno PandasTools unsafe reflection allows code execution via prompt injectionSimilar attack · NVD/CVE Database
• Low3 Ways AI Agents Already Operate in Your BrowserSimilar attack · BleepingComputer
• InfoAdversa AI Launches Coding Agent Security Platform to Block Cyberattacks on AI Agents in Real TimeSimilar attack · Adversa AI Blog
• InfoSEAL: Sealed Queries for Local Sanitization against Indirect Prompt InjectionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)