AI 安全
SafeKeep Finds Tool Schemas Weaken Models’ Refusal Signals, Cutting Prompt Injection Success to 2.5%
New research suggests that the JSON-style tool specifications used by agents are not merely neutral interfaces and may suppress models’ internal refusal representations. By separately evaluating safety before execution using flattened text specifications, SafeKeep increased the average refusal rate for harmful requests from 23.8% to 70.6%.