@article{stacwheninnocenttoolsformdangerouschains,
  title = {STAC: When Innocent Tools Form Dangerous Chains to Jailbreak LLM Agents},
  author = {Jing-Jing Li and Jianfeng He and Chao Shang and Devang Kulshreshtha and Xun Xian and Yi Zhang and Hang Su and Sandesh Swamy and Yanjun Qi},
  year = {2025},
  eprint = {2509.25624},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2509.25624},
}