{"total":27,"rows":[{"id":"2304.08354","title":"Tool Learning with Foundation Models","created":"2023-04-17","cited_by_count":302,"area":"agents"},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2506.08837","title":"Design Patterns for Securing LLM Agents against Prompt Injections","created":"2025-06-10","cited_by_count":73,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2309.11653","title":"\"It's a Fair Game\", or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agents","created":"2023-09-20","cited_by_count":60,"area":"agents"},{"id":"2505.11717","title":"WebInject: Prompt Injection Attack to Web Agents","created":"2025-05-16","cited_by_count":51,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2510.01354","title":"WAInjectBench: Benchmarking Prompt Injection Detections for Web Agents","created":"2025-10-01","cited_by_count":24,"area":"agents"},{"id":"2512.09321","title":"ObliInjection: Order-Oblivious Prompt Injection Attack to LLM Agents with Multi-source Data","created":"2025-12-10","cited_by_count":18,"area":"agents"},{"id":"2507.14799","title":"Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree","created":"2025-07-20","cited_by_count":14,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2405.20770","title":"Large Language Model Sentinel: LLM Agent for Adversarial Purification","created":"2024-05-24","cited_by_count":10,"area":"agents"},{"id":"2412.01547","title":"Improved Large Language Model Jailbreak Detection via Pretrained Embeddings","created":"2024-12-02","cited_by_count":10,"area":"agents"},{"id":"2505.18397","title":"An Outlook on the Opportunities and Challenges of Multi-Agent AI Systems","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2407.09295","title":"Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents","created":"2024-07-12","cited_by_count":5,"area":"agents"},{"id":"2508.17674","title":"Attacking LLMs and AI Agents: Advertisement Embedding Attacks Against Large Language Models","created":"2025-08-25","cited_by_count":3,"area":"agents"},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3,"area":"agents"},{"id":"2505.15738","title":"Checkpoint-GCG: Auditing and Attacking Fine-Tuning-Based Prompt Injection Defenses","created":"2025-05-21","cited_by_count":2,"area":"agents"},{"id":"2209.02167","title":"Red Teaming with Mind Reading: White-Box Adversarial Policies Against RL Agents","created":"2022-09-05","cited_by_count":1,"area":"agents"},{"id":"2512.08139","title":"Robust Agents in Open-Ended Worlds","created":"2025-12-09","cited_by_count":1,"area":"agents"},{"id":"2607.13411","title":"Evaluating Frontier AI Agents as Autonomous Clinical Security Auditors","created":"2026-07-15","cited_by_count":0,"area":"agents"},{"id":"2607.15246","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","created":"2026-07-16","cited_by_count":0,"area":"agents"},{"id":"2608.16806","title":"Breaking Planner Integrity Boundary: Enviroment State-Text Injection Attack on LLM-Driven Embodied Agents","created":"2026-08-17","cited_by_count":0,"area":"agents"},{"id":"2609.02393","title":"CAPTCHAs in the Agentic Era: Solvers That Learn from Every Encounter","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2610.14350","title":"Natural Code Transformation Confuses Agents in Vulnerability Analysis","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}