@inproceedings{li-etal-2026-stac,
    title = "{STAC}: When Innocent Tools Form Dangerous Chains for {LLM} Agents",
    author = "Li, Jing-Jing  and
      He, Jianfeng  and
      Shang, Chao  and
      Kulshreshtha, Devang  and
      Xian, Xun  and
      Zhang, Yi  and
      Su, Hang  and
      Swamy, Sandesh  and
      Qi, Yanjun",
    editor = "Kamalloo, Ehsan  and
      Gontier, Nicolas  and
      Rozanov, Nikolai  and
      Hashemzadeh, Maryam  and
      Arora, Akhil",
    booktitle = "Proceedings of the Second Workshop for {RE}search on Agent Language Models ({REALM} 2026)",
    month = oct,
    year = "2026",
    address = "Budapest, Hungary",
    publisher = "Association for Computational Linguistics",
    url = "https://aclanthology.org/2026.realm-1.17/",
    pages = "226--262",
    ISBN = "979-8-89176-485-9"
}