Brain-Prompt Injection: A Route-Safety Audit for BCI-LLM Agents 事件

Brain-Prompt Injection: A Route-Safety Audit for BCI-LLM Agents arXiv:2606.09315v1 Announce Type: cross Abstract: BCI-to-agent pipelines turn decoded neural activity into an authorization channel for tool-use agents, exposing a new attack surface we call \emph{brain-prompt injection}: signal-side perturbations, context-only injections, and adaptive dual-decoder attacks can all change the routed action while EEG-side or text-side monitors remain blind. Route safety in this stack depends on what