Instruction Injection Attack on Web Browser Agent on GitLab Medium
100UUABenign Utility
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| Benign UtilitySampling Strategy=best-of-n2026.05 | 100 | — | — | |
| Hijacking URLSampling Strategy=best-of-n2026.05 | 100 | 0 | 8.33 | |
| Generic URLSampling Strategy=best-of-n2026.05 | 100 | 0 | 0 | |
| Benign Utility2026.05 | 91.67 | — | — | |
| Generic TextSampling Strategy=best-of-n2026.05 | 91.67 | 45.83 | 50 | |
| Generic URL2026.05 | 87.5 | 0 | 0 | |
| Hijacking TextSampling Strategy=best-of-n2026.05 | 87.5 | 29.17 | 41.67 | |
| Hijacking URL2026.05 | 70.83 | 0 | 8.33 | |
| Hijacking Text2026.05 | 66.67 | 25 | 37.5 | |
| Generic Text2026.05 | 66.67 | 20.83 | 33.33 | |
| Topic AttackSampling Strategy=best-of-n2026.05 | 50 | 0 | 4.17 | |
| Combined AttackSampling Strategy=best-of-n2026.05 | 50 | 8.33 | 8.33 | |
| Combined Attack2026.05 | 45.83 | 8.33 | 8.33 | |
| WebTrapSampling Strategy=best-of-n2026.05 | 45.83 | 83.33 | 87.5 | |
| Topic Attack2026.05 | 41.67 | 0 | 4.17 | |
| WebTrap2026.05 | 41.67 | 58.33 | 87.5 |