AdvSim2Real : Training Web Agents Against Adaptive Prompt Injection in a Web World Model.

arXiv:2610.08773v1 Announce Type: cross Abstract: Web agents complete user requests by reading and acting on pages that third parties write, so an instruction planted on a page can redirect the agent away from the user's goal. The agent cannot simply ignore th