# Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis

Analyzes web-agent vulnerabilities at the component level, examining goal placement in prompts, multistep action generation, and observations as sources of increased susceptibility.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2502-20383/
- Original source: https://arxiv.org/abs/2502.20383
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, evaluation, web-navigation
- Evidence checked: 2026-10-17T11:20:04Z
- ID: arxiv:2502.20383

## Limitations

Reviewed against the exact-version official arXiv abstract page; its complete title, ordered author list, visible version, and normalized abstract SHA match the retained snapshot. The original API response body was not locally available. Experimental results and artifact availability have not been independently reproduced.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2502-20383/record.json

## Authors

Jeffrey Yang Fan Chiang, Seungjae Lee, Jia-Bin Huang, Furong Huang, Yizheng Chen

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2502-20383/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2502-20383/citation.csl.json

## Recorded arXiv snapshot

- Version: 3
- Version source: https://arxiv.org/abs/2502.20383v3
- First submission: 2025-02-27T18:56:26Z
- Version updated: 2025-09-21T22:29:53Z
- Abstract SHA-256: 27eacc2668411e2b7f79423940aa12293fa57aa81390c64587d3074c141dcb4f
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?id_list=2501.06497%2C2501.06994%2C2501.07834%2C2501.07927%2C2501.11233%2C2501.15570%2C2501.16403%2C2501.16609%2C2501.17391%2C2502.00372%2C2502.00392%2C2502.00964%2C2502.00988%2C2502.01562%2C2502.01839%2C2502.03723%2C2502.05174%2C2502.05227%2C2502.08489%2C2502.11221%2C2502.12130%2C2502.14496%2C2502.16587%2C2502.16786%2C2502.16796%2C2502.18356%2C2502.18512%2C2502.20383%2C2502.20390%2C2502.20582%2C2503.06378%2C2503.08026%2C2503.10613%2C2503.10809%2C2503.11579%2C2503.12228%2C2503.12461%2C2503.13843%2C2503.14495%2C2503.15426%2C2503.16036%2C2503.16248%2C2503.16975%2C2503.17671%2C2503.18102%2C2503.21889%2C2503.21949%2C2503.23803%2C2504.01328%2C2504.01377&max_results=50 (retrieved 2026-10-17T07:57:44Z; SHA-256 9ca057ee6538002c739e58a7b3f86fc51a434d085a33e5590f0720e4f27c6b24)
- https://arxiv.org/abs/2502.20383v3 (retrieved 2026-10-17T11:20:04Z; SHA-256 0118540c95d316ed30aabf783c072d413677aaf89539316e08e1d81ddab2c5e6)