AgentWatcher: Rule-Based Prompt Injection Monitor with Explicit Detection Rules for Long-Context Agents
arXiv·high signal
Proposes AgentWatcher to address two key limitations of current prompt injection detectors: (1) effectiveness degrades significantly as context length increases, and (2) detection decisions are implicit and opaque. AgentWatcher uses explicit, interpretable rules defining what constitutes prompt injection, making decisions transparent and auditable. Directly addresses OWASP LLM Top 10 concerns for agent deployments with growing context windows.