{
  "aliases": [],
  "authors": [
    "Yuke Wang",
    "Benlei Cui",
    "Shen Pang",
    "Xuemei Dong",
    "Longtao Huang",
    "Hui Xue",
    "Yuwen Zhai",
    "Junjie Li",
    "Jingqun Tang",
    "Haiwen Hong"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "da334d943d98b4bf9915c6ca28aab734d736f376e67cbab950aa1af65f540ebf",
      "submitted_at": "2026-10-14T01:30:03Z",
      "updated_at": "2026-10-14T01:30:03Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2610.19384v1"
    },
    "license_review": {
      "document": {
        "evidence_urls": [
          "https://arxiv.org/html/2610.19384v1"
        ],
        "reason": "Paper-specific document declaration only; no code, data or weights permissions are inferred."
      }
    }
  },
  "environments": [
    "web",
    "desktop"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-20T05:52:01Z",
      "role": "primary",
      "sha256": "63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2610.19384%2C2610.22672%2C2610.22697%2C2610.23303%2C2610.23307%2C2610.24729&max_results=6"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-20T19:02:16.329923+00:00",
      "role": "primary",
      "sha256": "ca995ec330f62a43d3d4fbbf28dfe83c5fa8b05f5c1e446929493409760268d1",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "notes",
        "licenses.document"
      ],
      "url": "https://arxiv.org/html/2610.19384v1"
    }
  ],
  "id": "arxiv:2610.19384",
  "identifiers": {
    "arxiv": "2610.19384"
  },
  "kind": "paper",
  "last_verified_at": "2026-10-20T19:02:16.329923+00:00",
  "licenses": {
    "code": null,
    "data": null,
    "document": {
      "basis": "The retained exact-v1 arXiv HTML infobox explicitly declares License: CC BY 4.0 for this document.",
      "declared": "CC-BY-4.0",
      "retrieved_at": "2026-10-20T19:02:16.329923+00:00",
      "url": "https://arxiv.org/html/2610.19384v1"
    },
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2610.19384"
    }
  ],
  "name": "MMA-SafetyBench: A Benchmark for Multimodal Agent Safety Evaluation",
  "notes": "ASR measures predicted coordinates inside an annotated target or compromised generated content; actual clicks, environment changes and downstream harm are not verified. SCR additionally counts adopted adversarial intent or task/schema disruption. Clean-task and attacked-trajectory denominators differ, including 42 clean desktop tasks versus 209 adversarial desktop trajectories. Payloads and injection points are fixed, and neutral prompts change both compliance cues and instruction-priority guidance. GPT-5 judging has a 300-trajectory human-label check, with borderline disagreements. Android-style mobile dialogs do not establish an Android runtime. Code/data links were identified but not inspected; no independent reproduction.",
  "published_at": "2026-10-14",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Builds trajectory-guided visual-injection tests for web, desktop and mobile observations, separating target-matching action predictions from broader semantic compromise.",
  "topics": [
    "evaluation",
    "safety-security",
    "grounding"
  ],
  "updated_at": "2026-10-14",
  "url": "https://arxiv.org/abs/2610.19384"
}