{"total":22,"rows":[{"id":"2304.08354","title":"Tool Learning with Foundation Models","created":"2023-04-17","cited_by_count":302,"area":"agents"},{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223,"area":"agents"},{"id":"2302.10329","title":"Harms from Increasingly Agentic Algorithmic Systems","created":"2023-02-20","cited_by_count":135,"area":"agents"},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2405.05175","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","created":"2024-05-08","cited_by_count":94,"area":"agents"},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2410.17401","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","created":"2024-10-22","cited_by_count":59,"area":"agents"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2205.02392","title":"Robust Conversational Agents against Imperceptible Toxicity Triggers","created":"2022-05-05","cited_by_count":23,"area":"agents"},{"id":"2507.14799","title":"Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree","created":"2025-07-20","cited_by_count":14,"area":"agents"},{"id":"2605.03378","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","created":"2026-05-05","cited_by_count":14,"area":"agents"},{"id":"2509.14285","title":"A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks","created":"2025-09-16","cited_by_count":11,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2605.26269","title":"AgentSecBench: Measuring Prompt Injection, Privacy Leakage, and Tool-Use Integrity in LLM Agents","created":"2026-05-25","cited_by_count":6,"area":"agents"},{"id":"2410.19920","title":"Reinforcement Learning for Aligning Large Language Models Agents with Interactive Environments: Quantifying and Mitigating Prompt Overfitting","created":"2024-10-25","cited_by_count":4,"area":"agents"},{"id":"2510.13543","title":"In-Browser LLM-Guided Fuzzing for Real-Time Prompt Injection Testing in Agentic AI Browsers","created":"2025-10-15","cited_by_count":2,"area":"agents"},{"id":"2403.17860","title":"Illuminating Blind Spots of Language Models with Targeted Agent-in-the-Loop Synthetic Data","created":"2024-03-26","cited_by_count":1,"area":"agents"},{"id":"2606.30555","title":"Linguistic Firewall: Geometry as Defense in Multi-Agent Systems Routing","created":"2026-06-29","cited_by_count":1,"area":"agents"},{"id":"2607.05120","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","created":"2026-07-06","cited_by_count":1,"area":"agents"},{"id":"2604.13206","title":"Numerical Instability and Chaos: Quantifying the Unpredictability of Large Language Models","created":"2026-04-14","cited_by_count":0,"area":"agents"},{"id":"2606.24245","title":"AutoSpec: Safety Rule Evolution for LLM Agents via Inductive Logic Programming","created":"2026-06-23","cited_by_count":0,"area":"agents"},{"id":"2608.08264","title":"OBLIVION: Workflow-Level Operational Skill Unlearning for Deployed Agents","created":"2026-08-08","cited_by_count":0,"area":"agents"}],"next_cursor":null}