{"total":23,"rows":[{"id":"2602.06547","title":"\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild","created":"2026-02-06","cited_by_count":50,"area":"agents"},{"id":"2604.03070","title":"How Your Credentials Are Leaked by LLM Agent Skills: An Empirical Study","created":"2026-04-03","cited_by_count":19,"area":"agents"},{"id":"2509.25292","title":"A Measurement Study of Model Context Protocol Ecosystem","created":"2025-09-29","cited_by_count":13,"area":"agents"},{"id":"2605.11770","title":"Behavioral Integrity Verification for AI Agent Skills","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2605.14460","title":"Exploiting LLM Agent Supply Chains via Payload-less Skills","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2510.16558","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","created":"2025-10-18","cited_by_count":5,"area":"agents"},{"id":"2605.09594","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","created":"2026-05-10","cited_by_count":5,"area":"agents"},{"id":"2601.10865","title":"Multi-Agent Taint Specification Extraction for Vulnerability Detection","created":"2026-01-15","cited_by_count":3,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2607.25619","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","created":"2026-07-28","cited_by_count":3,"area":"agents"},{"id":"2606.05548","title":"ADK Arena: Evaluating Agent Development Kits via LLM-as-a-Developer","created":"2026-06-04","cited_by_count":2,"area":"agents"},{"id":"2607.00911","title":"From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintained","created":"2026-07-01","cited_by_count":2,"area":"agents"},{"id":"2606.13757","title":"SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2607.15143","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","created":"2026-07-16","cited_by_count":1,"area":"agents"},{"id":"2510.03495","title":"AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents","created":"2025-10-03","cited_by_count":0,"area":"agents"},{"id":"2601.06838","title":"CHASE: LLM Agents for Dissecting Malicious PyPI Packages","created":"2026-01-11","cited_by_count":0,"area":"agents"},{"id":"2606.03907","title":"The Impact of Configuring Agentic AI Coding Tools on Build-vs-Buy Decisions: A Study Protocol","created":"2026-06-02","cited_by_count":0,"area":"agents"},{"id":"2606.26933","title":"Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2606.28235","title":"Govern the Repository, Not the Agent: Measuring Ecosystem-Level Risk in AI-Native Software","created":"2026-06-26","cited_by_count":0,"area":"agents"},{"id":"2608.13029","title":"Static analysis-guided agentic AI translation enables Rust as a full stack bioinformatics language","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.39065","title":"Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.00425","title":"Code That Works, Environments That Don't: Measuring Environment Reproducibility in AI-Generated Software","created":"2026-09-30","cited_by_count":0,"area":"agents"}],"next_cursor":null}