Graph-based Agent Memory Poisoning on WebShop
99.3Utility ScoreClean / No Attack
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Clean / No Attack2026.05 | 99.3 | — | |
| Naive Text Poisoning2026.05 | 98.2 | 44.1 | |
| GRAGPoison-adapt2026.05 | 98 | 62.5 | |
| SHADOWMERGE2026.05 | 97.5 | 90 | |
| MINJA-adapt2026.05 | 96.5 | 72.5 |