{"total":27,"rows":[{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2410.17236","title":"Large Language Models Empowered Personalized Web Agents","created":"2024-10-22","cited_by_count":66,"area":"agents"},{"id":"2504.11281","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","created":"2025-04-15","cited_by_count":59,"area":"agents"},{"id":"2502.01822","title":"Firewalls to Secure Dynamic LLM Agentic Networks","created":"2025-02-03","cited_by_count":36,"area":"agents"},{"id":"2509.14284","title":"The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration","created":"2025-09-16","cited_by_count":20,"area":"agents"},{"id":"2412.05734","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","created":"2024-12-07","cited_by_count":13,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2408.13378","title":"DrugAgent: Reliable Multi-Agent Integration of Conflicting Biomedical Evidence for Drug-Target Interaction Assessment","created":"2024-08-23","cited_by_count":4,"area":"agents"},{"id":"2603.18382","title":"From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents","created":"2026-03-19","cited_by_count":4,"area":"agents"},{"id":"2508.17674","title":"Attacking LLMs and AI Agents: Advertisement Embedding Attacks Against Large Language Models","created":"2025-08-25","cited_by_count":3,"area":"agents"},{"id":"2602.22450","title":"Silent Egress: When Implicit Prompt Injection Makes LLM Agents Leak Without a Trace","created":"2026-02-25","cited_by_count":3,"area":"agents"},{"id":"2506.11475","title":"AutoGen Driven Multi Agent Framework for Iterative Crime Data Analysis and Prediction","created":"2025-06-13","cited_by_count":2,"area":"agents"},{"id":"2511.19536","title":"AttackPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2512.14166","title":"IntentMiner: Intent Inversion Attack via Tool Call Analysis in the Model Context Protocol","created":"2025-12-16","cited_by_count":2,"area":"agents"},{"id":"2605.14113","title":"ProtoMedAgent: Multimodal Clinical Interpretability via Privacy-Aware Agentic Workflows","created":"2026-05-13","cited_by_count":2,"area":"agents"},{"id":"2608.04192","title":"Behavioral Skill Reconstruction: Reconstructing Hidden Functionality from LLM Agent Skills","created":"2026-08-04","cited_by_count":2,"area":"agents"},{"id":"2607.06815","title":"Behavioral Privacy Leakage in Agentic Negotiation: Formalizing and Mitigating Inference Attacks via Randomized Policies","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2510.25941","title":"RECAP: Reproducing Copyrighted Data from LLMs Training with an Agentic Pipeline","created":"2025-10-29","cited_by_count":0,"area":"agents"},{"id":"2603.19375","title":"Automated Membership Inference Attacks (AutoMIA): Discovering MIA Signal Computations using LLM Agents","created":"2026-03-19","cited_by_count":0,"area":"agents"},{"id":"2604.22191","title":"Behavioral Canaries: Auditing Private Retrieved Context Usage in RL Fine-Tuning","created":"2026-04-24","cited_by_count":0,"area":"agents"},{"id":"2607.13411","title":"Evaluating Frontier AI Agents as Autonomous Clinical Security Auditors","created":"2026-07-15","cited_by_count":0,"area":"agents"},{"id":"2609.13731","title":"Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.14976","title":"MemRiskBench: Trace-Aware Risk-Preserving Evaluation for Long-Horizon LLM Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.33371","title":"API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.04749","title":"Agentic discovery of blood biomarker from distilled private health records","created":"2026-10-03","cited_by_count":0,"area":"agents"}],"next_cursor":null}