AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents - Debenedetti, Edoardo; Zhang, Jie; Balunovic, Mislav; Beurer-Kellner, Luca; Fischer, Marc; Tramèr, Florian (Advances in Neural Information Processing Systems, 2024)