REALM: Identifying Minimal Task Assets for LLM Agents.

arXiv:2610.39155v1 Announce Type: cross Abstract: Large language model (LLM) agents often receive access to more files, accounts, and services than a task requires. Prompt injection turns this excess access into an opportunity to redirect execution toward unre