mlsanityData to 14 Oct 2026

RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems

arXiv 2606.23927 ↗First posted 22 Jun 2026cs.AIcited by 0

On the map: LLM agents and tool use → Agent threats, guardrails and governance

also in 1 more
Abstract (arXiv)

Agentic AI systems powered by large language models (LLMs) are rapidly evolving into autonomous decision-making systems, exposing attack vectors beyond those of traditional LLM vulnerabilities. Existing security evaluations are often tied to specific implementations or domains, limiting unified comparison across heterogeneous systems. To address this gap, we introduce RIFT-Bench, a representation-driven methodology for dynamic red-teaming that enables unified evaluations across diverse agentic architectures. Building on a novel hierarchical representation, RIFT-Bench operates in two automated phases: Discovery, which extracts system structure, and Scanning, which executes adaptive adversarial attacks. It directly evaluates the examined system using 105 adaptive adversarial probes spanning diverse attack vectors and objectives. We demonstrate the effectiveness of the proposed evaluation pipeline across 45 agentic systems spanning a diverse range of implementations, showing that the approach generalizes effectively to heterogeneous agentic architectures. Beyond systems and attacks, RIFT-Bench also supports direct evaluation of mitigation strategies. These key capabilities make RIFT-Bench a scalable foundation for security evaluation of agentic AI systems in practice. Infrastructure code and benchmark artifacts are available at https://tinyurl.com/RIFTBench.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 25 of its 122 references that are in the map. First posted on arXiv 22 Jun 2026.

Builds on

25 of 122 references.

Closest ancestors · 12

Same direction, newest first

  1. 2026Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents13 Feb
  2. 2026AgenTRIM: Tool Risk Mitigation for Agentic AI18 Jan
  3. 2025A Safety and Security Framework for Real-World Agentic Systems27 Nov
  4. 2025OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety8 Jul
  5. 2025From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows29 Jun
  6. 2025Design Patterns for Securing LLM Agents against Prompt Injections10 Jun
  7. 2025WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks22 Apr
  8. 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasures12 Mar
  9. 2025UDora: A Unified Red Teaming Framework against LLM Agents by Dynamically Hijacking Their Own Reasoning28 Feb
  10. 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents17 Dec
  11. 2024ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents9 Oct
  12. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep

Other references · 13

  1. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  2. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  3. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
  4. 2022Red Teaming Language Models with Language Modelscited by 1,026
  5. 2024Judging the Judges: A Systematic Study of Position Bias in LLM-as-a-Judgecited by 269
  6. 2024MegaAgent: A Large-Scale Autonomous LLM-based Multi-Agent System Without Predefined SOPscited by 47
  7. 2025StableToolBench-MirrorAPI: Modeling Tool Environments as Mirrors of 7,000+ Real-World APIscited by 14
  8. 2025GTM: Simulating the World of Tools for AI Agentscited by 14
  9. 2024Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysiscited by 10
  10. 2025Training-Free Policy Violation Detection via Activation-Space Whitening in LLMscited by 6
  11. 2025SynthTools: A Framework for Scaling Synthetic Tools for Agent Developmentcited by 5
  12. 2025Counterfactual-based Agent Influence Ranker for Agentic AI Workflowscited by 2
1 more
  1. 2026When Scanners Lie: Evaluator Instability in LLM Red-Teamingcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition
  2. 2026Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
  3. 2026REDAgentBench: Executable Red Teaming and Faithful Measurement of LLM Agent Systems
  4. 2026Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming
  5. 2025Mind the Gap: Comparing Model- vs Agentic-Level Red Teaming with Action-Graph Observability on GPT-OSS-20B
  6. 2026Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours
  7. 2026OpenART: Scaling Agent Red Teaming via Open-Ended Environment Evolution
  8. 2025DREAM: Dynamic Red-teaming across Environments for AI Models