{"total":30,"rows":[{"id":"2601.10338","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","created":"2026-01-15","cited_by_count":105,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2603.00195","title":"Formal Analysis and Supply Chain Security for Agentic AI Skills","created":"2026-02-27","cited_by_count":25,"area":"agents"},{"id":"2604.06550","title":"SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills","created":"2026-04-08","cited_by_count":20,"area":"agents"},{"id":"2606.07131","title":"MalSkillBench: A Runtime-Verified Benchmark of Malicious Agent Skills","created":"2026-06-05","cited_by_count":19,"area":"agents"},{"id":"2604.05485","title":"Auditable Agents","created":"2026-04-07","cited_by_count":15,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2604.08407","title":"Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain","created":"2026-04-09","cited_by_count":13,"area":"agents"},{"id":"2607.02357","title":"Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware","created":"2026-07-02","cited_by_count":10,"area":"agents"},{"id":"2603.19974","title":"Trojan's Whisper: Stealthy Manipulation of OpenClaw through Injected Bootstrapped Guidance","created":"2026-03-20","cited_by_count":8,"area":"agents"},{"id":"2606.07943","title":"Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents","created":"2026-06-06","cited_by_count":7,"area":"agents"},{"id":"2605.14460","title":"Exploiting LLM Agent Supply Chains via Payload-less Skills","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2605.09594","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","created":"2026-05-10","cited_by_count":5,"area":"agents"},{"id":"2607.13987","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","created":"2026-07-15","cited_by_count":5,"area":"agents"},{"id":"2603.22447","title":"Latent Reuse in Agent Skills: Multi-modal Clone Detection at Ecosystem Scale","created":"2026-03-23","cited_by_count":4,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2606.26924","title":"A Deterministic Control Plane for LLM Coding Agents","created":"2026-06-25","cited_by_count":3,"area":"agents"},{"id":"2607.25619","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","created":"2026-07-28","cited_by_count":3,"area":"agents"},{"id":"2607.00911","title":"From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintained","created":"2026-07-01","cited_by_count":2,"area":"agents"},{"id":"2505.08842","title":"LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Libraries","created":"2025-05-13","cited_by_count":1,"area":"agents"},{"id":"2601.12148","title":"Many Hands Make Light Work: An LLM-based Multi-Agent System for Detecting Malicious PyPI Packages","created":"2026-01-17","cited_by_count":1,"area":"agents"},{"id":"2604.24657","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","created":"2026-04-27","cited_by_count":1,"area":"agents"},{"id":"2606.13757","title":"SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2601.06838","title":"CHASE: LLM Agents for Dissecting Malicious PyPI Packages","created":"2026-01-11","cited_by_count":0,"area":"agents"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2608.08468","title":"SkillsMetric: Mapping the Detection Boundary of Static Analysis for Malicious Agent Skills","created":"2026-08-09","cited_by_count":0,"area":"agents"},{"id":"2609.35889","title":"SINGED: Correct Outputs Do Not Certify Safe Execution in LLM Agents","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.39065","title":"Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.17727","title":"SkillScreen: High-Recall Screening of Malicious Agent Skills with Decision Models","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}