@article{autodojoadaptiveblackboxattacksrevealthe,
  title = {AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents},
  author = {Xinhang Ma and Taoran Li and Chaowei Xiao and Zhiyuan Yu and Ning Zhang and Yevgeniy Vorobeychik},
  year = {2026},
  eprint = {2606.15057},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2606.15057},
}