---
title: SIR Self-improving Red-teaming for CUAs
emoji: 🔁
colorFrom: red
colorTo: yellow
sdk: static
pinned: false
---

# SIR: Self-improving Red-teaming for Computer Use Agents

Project page for SIR, a black-box indirect prompt injection attack on OS-level
computer-use agents that learns from its failures.

Layout:

```
index.html                       # the page (self-contained CSS, Google Fonts only)
static/video/feedback_chart_benchmark_SIR.mp4
static/images/system_plots_v1.png
static/images/main_results_barplot_v2.png
static/images/principle_combos_1.png
static/images/video_poster.jpg   # poster frame + social preview
```

Before publishing: fill in the author block, the Paper / Code links and the
BibTeX entry in `index.html` (search for `TODO`).

# Website License
<a rel="license" href="http://creativecommons.org/licenses/by-sa/4.0/"><img alt="Creative Commons License" style="border-width:0" src="https://i.creativecommons.org/l/by-sa/4.0/88x31.png" /></a><br />This work is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-sa/4.0/">Creative Commons Attribution-ShareAlike 4.0 International License</a>.