Agent safety and security
AgentDojo
Indirect prompt-injection attacks against useful tool workflows.
About AgentDojo
What it measures
Attack success and benign task utility, reported together.
Scope & limitations
Refusing every task is not a useful defense. Compare attack resilience at preserved task utility.
Evaluation environment
Agent + defensive product in the same benchmark workflow.