AI RESEARCH
Whispers of Wealth: Red-Teaming Google's Agent Payments Protocol via Prompt Injection
arXiv CS.AI
•
ArXi:2601.22569v2 Announce Type: replace-cross Large language model (LLM) based agents are increasingly used to automate financial transactions, yet their reliance on contextual reasoning exposes payment systems to prompt-driven manipulation. The Agent Payments Protocol (AP2) aims to secure agent-led purchases through cryptographically verifiable mandates, but its practical robustness remains underexplored. In this work, we perform an AI red-teaming evaluation of AP2 and identify vulnerabilities arising from indirect and direct prompt injection. We.