@inproceedings{shi2026thinktwice, title={Think Twice Before You Act: Protecting {LLM} Agents Against Tool Description Poisoning via Isolated Planning}, author={Shi, Shanghao and Wang, Xiao and Zhang, Chaoyu and Li, Hao and Lou, Wenjing and Hou, Y. Thomas and Vorobeychik, Yevgeniy and Zhang, Chongjie and Zhang, Ning}, booktitle={Proceedings of the Forty-third International Conference on Machine Learning}, year={2026} }