Abstract
LLM agents retrieve untrusted content and act through tools, creating indirect prompt-injection risks that can cause unauthorized actions or persistent state changes. Existing automated red-teaming largely optimizes payloads for pre-specified scenarios, leaving latent vulnerabilities across the agent's behavior space unexplored. We present ASPIRE, an Agentic Safety & Prompt Injection Red-teaming Engine for open-ended, behavior-level vulnerability discovery. ASPIRE maintains an evolving Agent Security Behavior Graph and uses complementary Explore and Exploit experts to discover, verify, and generalize consequence-centric tests. Trajectory evidence updates the graph and diagnoses partial or failed attempts, while cross-run memory transfers useful red-team strategies. Experiments on various benchmarks show that ASPIRE substantially expands coverage across consequences, injection methods, environments, and behavior paths while maintaining strong attack success.
Keywords
Subject
Publication details
- Journal
- Not available
- Open access
- Green open access
Cite this article
APA 7
He, P., Mitra, D., Sharma, V., Tang, J., Rao, V. S., Pfister, T., & Le, L. T. (2026). ASPIRE: Agentic Safety & Prompt Injection Red-teaming Engine. https://omanscience.com/en/articles/aspire-agentic-safety-prompt-injection-red-teaming-engine
MLA 9
He, Pengfei, et al. "ASPIRE: Agentic Safety & Prompt Injection Red-teaming Engine." https://omanscience.com/en/articles/aspire-agentic-safety-prompt-injection-red-teaming-engine.
Chicago (author–date)
He, Pengfei, Deep Mitra, Vishesh Sharma, Jiliang Tang, Vinay S Rao, Tomas Pfister, and Long T. Le. 2026. "ASPIRE: Agentic Safety & Prompt Injection Red-teaming Engine." https://omanscience.com/en/articles/aspire-agentic-safety-prompt-injection-red-teaming-engine.
Harvard
He, P., Mitra, D., Sharma, V., Tang, J., Rao, V. S., Pfister, T. and Le, L. T. (2026) 'ASPIRE: Agentic Safety & Prompt Injection Red-teaming Engine', Available at: https://omanscience.com/en/articles/aspire-agentic-safety-prompt-injection-red-teaming-engine.
Vancouver
He P, Mitra D, Sharma V, Tang J, Rao VS, Pfister T, et al. ASPIRE: Agentic Safety & Prompt Injection Red-teaming Engine. https://omanscience.com/en/articles/aspire-agentic-safety-prompt-injection-red-teaming-engine
IEEE
P. He, D. Mitra, V. Sharma, J. Tang, V. S. Rao, T. Pfister, and L. T. Le, "ASPIRE: Agentic Safety & Prompt Injection Red-teaming Engine," https://omanscience.com/en/articles/aspire-agentic-safety-prompt-injection-red-teaming-engine.