ToolHazard synthesizes adversarial agent environments instead of hand-building them.

arXiv 2608.11878 replaces the handful of manually implemented injection-testing environments with an Environment Simulator, Attacker Agent, and User Simulator that generate executable stateful environments and discover viable injection points automatically. Injection timing and placement materially change attack success, which the hand-built benchmarks couldn't show. Alignment data from the framework improves security on both ToolHazard-Bench and AgentDojo without hurting benign utility.