TRAP: Tool-result Replay Attack for Probing Misbinding in LLM Agents.

arXiv:2610.16333v1 Announce Type: new Abstract: As AI agents increasingly act through external tools, tool results are no longer simple outputs but execution artifacts that must remain correctly associated with the context that produced them. Yet as results pe