Skip to content

[new-research] arXiv:2610.03153 — EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agen #196

Open

Description

@github-actions

New arXiv Research Paper

arXiv ID: 2610.03153
Title: EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents
Authors: Shiyi Kuang, Xuemei Luo, Kun Liu, Junhai Li, Rui Tian, Feng Shi, Bo Shen, Nianyu Li, Dehui Li, Ping Chen
Published: 2026-10-02T11:22:36Z
URL: https://arxiv.org/abs/2610.03153

Abstract (first 300 chars)

Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources. Existing benchmarks leave gaps in executable coverage of their runtime security risks, while evolving model capabilities, harnesses, tools, and thre…

Suggested OWASP Mapping

No automatic mapping — manual review recommended

Suggested Action

Review this paper against the OWASP GenAI Crosswalk entries and update relevant mapping files if new attack patterns or mitigations are identified.

Activity

  1. emmanuelgjr commented on Oct 9, 2026

    @emmanuelgjr
    Contributor

    Routed to the benchmark catalogue — rule 3.

    EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents introduces a benchmark for runtime security risks in workspace agents: "a reproducible dataset of 450 adversarial tasks across six scenarios", run against nine model-harness configurations (three models × Claude Code, Codex and OpenClaw).

    Routed per docs/TRIAGE_RULES.md:

    • Not an incident. The attacks run in isolated environments the authors built; no deployed system failed.
    • A catalogue row. Rule 3 covers a structural benchmark meant for testing systems, so it gets a row in evals/EXTERNAL_BENCHMARKS.md.
    • Release: the abstract says the cases and platform "will be released after completion of artifact safety and reproducibility checks", so the row will record it as not released, as with PrivDrift.

    The row's OWASP entry column lands as DRAFT — SME review required. This issue closes when the catalogue PR merges.

  2. emmanuelgjr commented on Oct 9, 2026

    @emmanuelgjr
    Contributor

    Row added in #222.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions