Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents
StakeBench evaluates prompt-injection harm to different stakeholders in shopping web-agent workflows. Its executable cases separate attack objectives and assess both outcomes and execution processes to reveal how the same attack pattern can affect different parties.
AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.
What is this resource?
- Resource type
- Research papers
- Environment
- web
- Topics
- evaluation, safety-security, web-navigation
- Record publication date
- 2026-06-11
- Evidence retrieved
- 2026-10-16T06:36:36Z
- Resource ID
- arxiv:2606.13385
Recorded paper version
Version updated: 2026-07-27T14:19:24Z.
This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.
Abstract fingerprint
88b7e2ee8717661e4f8b417916e35b844171ecd8a8a2add657cf341c8f759536Authors
Zihao Wang, Yiming Li, Yutong Wu, Kangjie Chen, Zheyu Liu, Fok Kar Wai, Pin-Yu Chen, Vrizlynn L. L. Thing, Bo Li, Dacheng Tao, Tianwei Zhang
Cite this paper
Download BibTeX · Download CSL JSON
Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.
Explore related topics
Scope and limitations
The annotation and scope were reviewed against the primary paper abstract. Experimental results and released artifacts have not been independently reproduced.
Primary evidence and verification
Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.
- arxiv api
Retrieved 2026-10-16T06:36:36Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.
Content fingerprint
aeacc1a41bb90f3d296823356174fe77d1547ffbe7cd56652cf9d98fca09206c - editorial primary review
Retrieved 2026-10-16T06:36:36Z. Supports: name, kind, summary, environments, topics, scope.
Content fingerprint
aeacc1a41bb90f3d296823356174fe77d1547ffbe7cd56652cf9d98fca09206c
Suggest a correction
Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.