Superplatforms Have to Attack AI Agents
On the map: LLM agents and tool use → Social simulation and multi-agent debate
Abstract (arXiv)
Over the past decades, superplatforms, digital companies that integrate a vast range of third-party services and applications into a single, unified ecosystem, have built their fortunes on monopolizing user attention through targeted advertising and algorithmic content curation. Yet the emergence of AI agents driven by large language models (LLMs) threatens to upend this business model. Agents can not only free user attention with autonomy across diverse platforms and therefore bypass the user-attention-based monetization, but might also become the new entrance for digital traffic. Hence, we argue that superplatforms have to attack AI agents to defend their centralized control of digital traffic entrance. Specifically, we analyze the fundamental conflict between user-attention-based monetization and agent-driven autonomy through the lens of our gatekeeping theory. We show how AI agents can disintermediate superplatforms and potentially become the next dominant gatekeepers, thereby forming the urgent necessity for superplatforms to proactively constrain and attack AI agents. Moreover, we go through the potential technologies for superplatform-initiated attacks, covering a brand-new, unexplored technical area with unique challenges. We have to emphasize that, despite our position, this paper does not advocate for adversarial attacks by superplatforms on AI agents, but rather offers an envisioned trend to highlight the emerging tensions between superplatforms and AI agents. Our aim is to raise awareness and encourage critical discussion for collaborative solutions, prioritizing user interests and perserving the openness of digital ecosystems in the age of AI agents.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 18 of its 31 references that are in the map. First posted on arXiv 23 May 2025.
Builds on
18 of 31 references.
References · 18
- 2023The Dawn of LMMs: Preliminary Explorations with GPT-4V(ision)cited by 681
- 2023Certifying LLM Safety against Adversarial Promptingcited by 266
- 2024EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakagecited by 150
- 2024Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agentscited by 137
- 2024Dissecting Adversarial Robustness of Multimodal LM Agentscited by 120
- 2024Attacking Vision-Language Computer Agents via Pop-upscited by 116
- 2024BadAgent: Inserting and Activating Backdoor Attacks in LLM Agentscited by 115
- 2025A Survey of AI Agent Protocolscited by 81
- 2024AdvAgent: Controllable Blackbox Red-teaming on Web Agentscited by 59
- 2025The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injectionscited by 59
- 2024Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractionscited by 56
- 2025Foot-In-The-Door: A Multi-turn Jailbreak for LLMscited by 54
6 more
- 2025Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attackscited by 22
- 2024Agentic Information Retrievalcited by 21
- 2024CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attackscited by 19
- 2024Exploring the Adversarial Robustness of CLIP for AI-generated Image Detectioncited by 11
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2025QAVA: Query-Agnostic Visual Attack to Large Vision-Language Modelscited by 7
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineeringcited by 74
- 2026Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanizationcited by 3
- 2026Position: Academic Conferences are Potentially Facing Denominator Gaming Caused by Fully Automated Scientific Agentscited by 2
- 2026Position: Academic Conferences are Potentially Facing Denominator Gaming Caused by Fully Automated Scientific Agents11 May 2026
- 2026Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineering9 Apr 2026
- 2026Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization24 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2024Beyond the Sum: Unlocking AI Agents Potential Through Market Forces
- 2026Agentic AI: User Empowerment or Foreclosure?
- 2025Agentic AI: Autonomy, Accountability, and the Algorithmic Society
- 2026The End of Trust: How Agentic AI Breaks Security Assumptions
- 2025The Agentic Economy
- 2026CAVEAT: Towards Robust Computer-Use Agents in Incentive-Misaligned Environments
- 2025LLM Agents Are the Antidote to Walled Gardens
- 2026I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crime