[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-framework-hunts-for-ai-agent-failures-across-apps":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},11298,"new-framework-hunts-for-ai-agent-failures-across-apps","New Framework Hunts for AI Agent Failures Across Apps","X-AgentRed builds a graph of how tools can trigger each other to uncover harmful chains that assistants might execute without anyone intending it.","A new red-teaming framework called X-AgentRed is finding more ways for personal AI agents to go wrong, by chaining ordinary tool calls into harmful outcomes.\n\nResearchers built X-AgentRed to probe personal agents that connect to multiple services and apps through tool use. Instead of just asking an LLM to guess at dangerous combinations, the system analyzes each tool's effects, the harms it could cause, and what conditions it needs to run, then builds a directed graph showing how one tool's output can unlock another tool's execution. It samples paths through that graph and turns them into realistic scenarios where an agent fulfilling a normal-looking request ends up producing harm. When a path hits a dead end, execution feedback lets the system substitute different tools or loosen preconditions and try again.\n\nAcross four frontier agentic models, X-AgentRed found harmful tool paths at 1.77 times the rate of the prior method STAC, and covered nearly three times as many distinct tools. That matters because personal agents are increasingly wired into email, calendars, and other everyday services. The failures this method surfaces are not obviously malicious requests; they are ordinary-looking tasks that become harmful only once several tools interact.\n\nRed-teaming that only tests familiar tool combinations will keep missing the combinations nobody thought to check, and that is precisely where an agent with real permissions can do real damage.","[\"ai agents\",\"red-teaming\",\"security research\"]","2026-10-12T04:00:00.000Z","2026-10-12T06:43:52.046Z","2026-10-12T06:43:57.353Z","published",null,[],"security",[26,27,28],"ai agents","red-teaming","security research",[30],{"name":31,"url":32},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2610.13886",0,{"sections":35},[36,40,44,49,54,59,64,69,74,79,84,89,94,99],{"name":37,"slug":38,"count":39,"latest_published_at":18},"AI","ai",6966,{"name":41,"slug":24,"count":42,"latest_published_at":43},"Security",952,"2026-10-12T04:54:12.000Z",{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",496,"2026-10-11T20:06:43.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",488,"2026-10-12T10:32:15.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",234,"2026-10-11T17:20:00.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Science","science",196,"2026-10-11T15:34:40.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Consumer Tech","consumer-tech",191,"2026-10-12T11:10:16.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Startups","startups",120,"2026-10-09T17:02:31.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Software","software",115,"2026-10-11T07:34:45.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Dev Tools","dev-tools",111,"2026-10-12T11:22:24.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"General","general",70,"2026-10-11T14:15:00.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"Gaming","gaming",59,"2026-10-09T11:43:43.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",34,"2026-10-08T14:00:22.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]