Prompt Injection Attack to Tool Selection in LLM Agents

Shi, Jiawen, Yuan, Zenghui, Tie, Guiyao · arXiv · 2025