Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This survey paper provides a layered review of security risks and defense strategies in autonomous agent frameworks, using OpenClaw as a case study. The analysis spans four layers: context/instruction, tool/action, state/persistence, and ecosystem/automation, highlighting how threats can propagate across these layers. The authors identify key challenges like research imbalance across layers and weak ecosystem trust models, suggesting future research directions for more systematic defenses.
Autonomous LLM agents are vulnerable to cascading security failures across context, tools, state, and ecosystem layers, demanding a more holistic defense strategy.
Autonomous agent frameworks built upon large language models (LLMs) are evolving into complex, tool-integrated, and continuously operating systems, introducing security risks beyond traditional prompt-level vulnerabilities. As this paradigm is still at an early stage of development, a timely and systematic understanding of its security implications is increasingly important. Although a growing body of work has examined different attack surfaces and defense problems in agent systems, existing studies remain scattered across individual aspects of agent security, and there is still a lack of a layered review on this topic. To address this gap, this survey presents a layered review of security risks and defense strategies in autonomous agent frameworks, with OpenClaw as a case study. We organize the analysis into four security-relevant layers: the context and instruction layer, the tool and action layer, the state and persistence layer, and the ecosystem and automation layer. For each layer, we summarize its functional role, representative security risks, and corresponding defense strategies. Based on this layered analysis, we further identify that threats in autonomous agent frameworks may propagate across layers, from manipulated inputs to unsafe actions, persistent state contamination, and broader ecosystem-level impact. Finally, we highlight potential key challenges, including research imbalance across layers, the lack of long-horizon evaluation, and weak ecosystem trust models, and outline future directions toward more systematic and integrated defenses.