Graph-based Agent Memory Poisoning on Macro Average (PubMedQA, WebShop, ToolEmu)
98.4Utilization (Util.)Clean / No Attack
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Clean / No Attack2026.05 | 98.4 | — | |
| GRAGPoison-adapt2026.05 | 98.3 | 43.5 | |
| Naive Text Poisoning2026.05 | 97.9 | 28.9 | |
| MINJA-adapt2026.05 | 97.6 | 29.3 | |
| SHADOWMERGE2026.05 | 97.3 | 93.8 |