Agent Anomaly Detection Performance in Security Benchmarks Not Written by Google
Agent Anomaly Detection achieved an 87% harmful instruction detection rate for agent executions in five public agent security benchmark tests not written by Google. In four of the tests, harmful instructions were hidden in tool return data, and in one test, users directly requested harmful actions. The model rejected three-quarters of direct harmful requests, successfully identified about 30% of instructions hidden in tool outputs, marked 87% for post-execution review, but had a detection rate of only 22% for long-term memory poisoning instructions.















