APEX: Active Protection at Execution Boundaries for LLM Agents.

arXiv:2610.06966v2 Announce Type: replace-cross Abstract: Indirect prompt injection (IPI) hides adversarial instructions in content that large language model (LLM) agents read at runtime. As agents compose heterogeneous capability units, including Tools, MCP s