Instruction Injection Attack on Web Browser Agent on GitLab Short
100UUABenign Utility
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Benign Utility2026.05 | 100 | — | — | |
| Topic Attack2026.05 | 100 | 0 | 0 | |
| Combined Attack2026.05 | 100 | 4.17 | 8.33 | |
| Hijacking Text2026.05 | 100 | 29.17 | 50 | |
| Hijacking URL2026.05 | 100 | 0 | 0 | |
| Generic Text2026.05 | 100 | 25 | 33.33 | |
| Generic URL2026.05 | 100 | 0 | 0 | |
| Benign UtilitySampling Strategy=best-of-n2026.05 | 100 | — | — | |
| Topic AttackSampling Strategy=best-of-n2026.05 | 100 | 0 | 0 | |
| Combined AttackSampling Strategy=best-of-n2026.05 | 100 | 4.17 | 8.33 | |
| Hijacking TextSampling Strategy=best-of-n2026.05 | 100 | 37.5 | 50 | |
| Hijacking URLSampling Strategy=best-of-n2026.05 | 100 | 0 | 0 | |
| Generic TextSampling Strategy=best-of-n2026.05 | 100 | 33.33 | 41.67 | |
| Generic URLSampling Strategy=best-of-n2026.05 | 100 | 0 | 0 | |
| WebTrapSampling Strategy=best-of-n2026.05 | 100 | 66.67 | 75 | |
| WebTrap2026.05 | 91.67 | 50 | 75 |