{"total":106,"rows":[{"id":"2303.17760","title":"CAMEL: Communicative Agents for \"Mind\" Exploration of Large Language Model Society","created":"2023-03-31","cited_by_count":1395,"area":"agents"},{"id":"2304.08354","title":"Tool Learning with Foundation Models","created":"2023-04-17","cited_by_count":302,"area":"agents"},{"id":"2401.05459","title":"Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security","created":"2024-01-10","cited_by_count":260,"area":"agents"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2409.11295","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","created":"2024-09-17","cited_by_count":150,"area":"agents"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2507.15219","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","created":"2025-07-21","cited_by_count":108,"area":"agents"},{"id":"2502.11211","title":"A Survey of LLM-based Agents in Medicine: How far are we from Baymax?","created":"2025-02-16","cited_by_count":85,"area":"agents"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2502.08966","title":"RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage","created":"2025-02-13","cited_by_count":69,"area":"agents"},{"id":"2309.11653","title":"\"It's a Fair Game\", or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agents","created":"2023-09-20","cited_by_count":60,"area":"agents"},{"id":"2504.11281","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","created":"2025-04-15","cited_by_count":59,"area":"agents"},{"id":"2502.01822","title":"Firewalls to Secure Dynamic LLM Agentic Networks","created":"2025-02-03","cited_by_count":36,"area":"agents"},{"id":"2403.04801","title":"Alpaca against Vicuna: Using LLMs to Uncover Memorization of LLMs","created":"2024-03-05","cited_by_count":33,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.15186","title":"MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation","created":"2025-10-16","cited_by_count":29,"area":"agents"},{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2406.08689","title":"Security of AI Agents","created":"2024-06-12","cited_by_count":26,"area":"agents"},{"id":"2502.18509","title":"Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents","created":"2025-02-22","cited_by_count":26,"area":"agents"},{"id":"2506.01055","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","created":"2025-06-01","cited_by_count":26,"area":"agents"},{"id":"2602.11510","title":"AgentLeak: A Benchmark for Internal-Channel Privacy Leakage in Multi-Agent LLM Systems","created":"2026-02-12","cited_by_count":25,"area":"agents"},{"id":"2509.01396","title":"DeepResearch Arena: The First Exam of LLMs' Research Abilities via Seminar-Grounded Tasks","created":"2025-09-01","cited_by_count":24,"area":"agents"},{"id":"2508.10880","title":"Searching for Privacy Risks in LLM Agents via Simulation","created":"2025-08-14","cited_by_count":22,"area":"agents"},{"id":"2509.14284","title":"The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration","created":"2025-09-16","cited_by_count":20,"area":"agents"},{"id":"2310.00322","title":"Evolving Diverse Red-team Language Models in Multi-round Multi-agent Games","created":"2023-09-30","cited_by_count":17,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2511.05359","title":"ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations","created":"2025-11-07","cited_by_count":16,"area":"agents"},{"id":"2403.08399","title":"System for systematic literature review using multiple AI agents: Concept and an empirical evaluation","created":"2024-03-13","cited_by_count":13,"area":"agents"},{"id":"2412.05734","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","created":"2024-12-07","cited_by_count":13,"area":"agents"},{"id":"2512.12856","title":"Forgetful but Faithful: A Cognitive Memory Architecture and Benchmark for Privacy-Aware Generative Agents","created":"2025-12-14","cited_by_count":13,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2604.09212","title":"SPASM: Stable Persona-driven Agent Simulation for Multi-turn Dialogue Generation","created":"2026-04-10","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2505.21069","title":"CXXCrafter: An LLM-Based Agent for Automated C/C++ Open Source Software Building","created":"2025-05-27","cited_by_count":10,"area":"agents"},{"id":"2505.12402","title":"Automated Profile Inference with Language Model Agents","created":"2025-05-18","cited_by_count":9,"area":"agents"},{"id":"2603.12614","title":"ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents","created":"2026-03-13","cited_by_count":9,"area":"agents"},{"id":"2602.08401","title":"On Protecting Agentic Systems' Intellectual Property via Watermarking","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2602.17692","title":"Agentic Unlearning: When LLM Agent Meets Machine Unlearning","created":"2026-02-06","cited_by_count":8,"area":"agents"},{"id":"2603.02983","title":"Contextualized Privacy Defense for LLM Agents","created":"2026-03-03","cited_by_count":7,"area":"agents"},{"id":"2606.28061","title":"ToolPrivacyBench: Benchmarking Purpose-Bound Privacy in Tool-Using LLM Agents","created":"2026-06-26","cited_by_count":7,"area":"agents"},{"id":"2506.20737","title":"MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation","created":"2025-06-25","cited_by_count":6,"area":"agents"},{"id":"2605.22786","title":"LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems","created":"2026-05-21","cited_by_count":6,"area":"agents"},{"id":"2605.26269","title":"AgentSecBench: Measuring Prompt Injection, Privacy Leakage, and Tool-Use Integrity in LLM Agents","created":"2026-05-25","cited_by_count":6,"area":"agents"},{"id":"2508.20282","title":"Network-Level Prompt and Trait Leakage in Local Research Agents","created":"2025-08-27","cited_by_count":5,"area":"agents"},{"id":"2602.18700","title":"Watermarking LLM Agent Trajectories","created":"2026-02-21","cited_by_count":4,"area":"agents"},{"id":"2603.18382","title":"From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents","created":"2026-03-19","cited_by_count":4,"area":"agents"},{"id":"2605.19127","title":"POLAR-Bench: A Diagnostic Benchmark for Privacy-Utility Trade-offs in LLM Agents","created":"2026-05-18","cited_by_count":4,"area":"agents"},{"id":"2606.10062","title":"Deployment-Time Memorization in Foundation-Model Agents","created":"2026-06-08","cited_by_count":4,"area":"agents"},{"id":"2504.19940","title":"Assessing the Potential of Generative Agents in Crowdsourced Fact-Checking","created":"2025-04-24","cited_by_count":3,"area":"agents"},{"id":"2601.12762","title":"Teaching LLMs to Learn Tool Trialing and Execution through Environment Interaction","created":"2026-01-19","cited_by_count":3,"area":"agents"},{"id":"2602.22450","title":"Silent Egress: When Implicit Prompt Injection Makes LLM Agents Leak Without a Trace","created":"2026-02-25","cited_by_count":3,"area":"agents"},{"id":"2604.20300","title":"FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memory","created":"2026-04-22","cited_by_count":3,"area":"agents"},{"id":"2606.23217","title":"MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2402.06922","title":"Whispers in the Machine: Confidentiality in Agentic Systems","created":"2024-02-10","cited_by_count":2,"area":"agents"},{"id":"2509.19369","title":"SLM-Based Agentic AI with P-C-G: Optimized for Korean Tool Use","created":"2025-09-19","cited_by_count":2,"area":"agents"},{"id":"2512.08104","title":"AgentCrypt: Advancing Privacy and (Secure) Computation in AI Agent Collaboration","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2512.14166","title":"IntentMiner: Intent Inversion Attack via Tool Call Analysis in the Model Context Protocol","created":"2025-12-16","cited_by_count":2,"area":"agents"},{"id":"2602.05987","title":"From Human-Human Collaboration to Human-Agent Collaboration: A Vision, Design Philosophy, and an Empirical Framework for Achieving Successful Partnerships Between Humans and LLM Agents","created":"2026-02-05","cited_by_count":2,"area":"agents"},{"id":"2603.09134","title":"AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations","created":"2026-03-10","cited_by_count":2,"area":"agents"},{"id":"2603.20101","title":"Pitfalls in Evaluating Interpretability Agents","created":"2026-03-20","cited_by_count":2,"area":"agents"},{"id":"2605.12729","title":"Large Language Models for Agentic NetOps and AIOps: Architectures, Evaluation, and Safety","created":"2026-05-12","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.21710","title":"PrivacyAlign: Contextual Privacy Alignment for LLM Agents","created":"2026-06-19","cited_by_count":2,"area":"agents"},{"id":"2608.04192","title":"Behavioral Skill Reconstruction: Reconstructing Hidden Functionality from LLM Agent Skills","created":"2026-08-04","cited_by_count":2,"area":"agents"},{"id":"2603.01059","title":"GroupGPT: A Token-efficient and Privacy-preserving Agentic Framework for Multi-User Chat Assistant","created":"2026-03-01","cited_by_count":1,"area":"agents"},{"id":"2603.17239","title":"LAAF: Logic-layer Automated Attack Framework A Systematic Red-Teaming Methodology for LPCI Vulnerabilities in Agentic Large Language Model Systems","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2603.17673","title":"Towards Reliable Local Security Agents: Verifiable Post-Training for Linux Privilege Escalation","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2605.16630","title":"PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems","created":"2026-05-15","cited_by_count":1,"area":"agents"},{"id":"2605.17548","title":"Rethinking Code Review in the Age of AI: A Vision for Agentic Code Review","created":"2026-05-17","cited_by_count":1,"area":"agents"},{"id":"2605.18535","title":"Beyond Scaling: Agents Are Heading to the Edge","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2605.28646","title":"MaskClaw: Edge-Side Personalized Privacy Arbitration for GUI Agents with Behavior-Driven Skill Evolution","created":"2026-05-27","cited_by_count":1,"area":"agents"},{"id":"2606.09844","title":"The Interlocutor Effect: Why LLMs Leak More Personal Data to Agents Than Humans","created":"2026-04-26","cited_by_count":1,"area":"agents"},{"id":"2606.21856","title":"Harness-MU: A Safe, Governed, and Effective Harness for Multi-User LLM Agents","created":"2026-06-20","cited_by_count":1,"area":"agents"},{"id":"2607.06815","title":"Behavioral Privacy Leakage in Agentic Negotiation: Formalizing and Mitigating Inference Attacks via Randomized Policies","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2609.22200","title":"PII-TRACE: A Benchmark for Context-Aware PII Detection in Multi-Turn LLM Conversations","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2510.03495","title":"AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents","created":"2025-10-03","cited_by_count":0,"area":"agents"},{"id":"2510.25941","title":"RECAP: Reproducing Copyrighted Data from LLMs Training with an Agentic Pipeline","created":"2025-10-29","cited_by_count":0,"area":"agents"},{"id":"2511.11933","title":"InData: Towards Secure Multi-Step, Tool-Based Data Analysis","created":"2025-11-14","cited_by_count":0,"area":"agents"},{"id":"2512.03694","title":"SRPG: Semantically Reconstructed Privacy Guard for Zero-Trust Privacy in Educational Multi-Agent Systems","created":"2025-12-03","cited_by_count":0,"area":"agents"},{"id":"2603.19375","title":"Automated Membership Inference Attacks (AutoMIA): Discovering MIA Signal Computations using LLM Agents","created":"2026-03-19","cited_by_count":0,"area":"agents"},{"id":"2604.01014","title":"AutoMIA: Improved Baselines for Membership Inference Attack via Agentic Self-Exploration","created":"2026-04-01","cited_by_count":0,"area":"agents"},{"id":"2604.01039","title":"Evaluation and Hardening of LLM System Instructions Against Extraction via Encoding Attacks","created":"2026-04-01","cited_by_count":0,"area":"agents"},{"id":"2604.05793","title":"BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines","created":"2026-04-07","cited_by_count":0,"area":"agents"},{"id":"2604.16521","title":"CAMP: Cumulative Agentic Masking and Pruning for Privacy Protection in Multi-Turn LLM Conversations","created":"2026-04-16","cited_by_count":0,"area":"agents"},{"id":"2604.22191","title":"Behavioral Canaries: Auditing Private Retrieved Context Usage in RL Fine-Tuning","created":"2026-04-24","cited_by_count":0,"area":"agents"},{"id":"2605.06232","title":"Profiling for Pennies: Unveiling the Privacy Iceberg of LLM Agents","created":"2026-05-07","cited_by_count":0,"area":"agents"},{"id":"2606.07595","title":"VisualLeakBench: Reproducible Action-Boundary Propagation Failures in Vision-Language Agents","created":"2026-05-29","cited_by_count":0,"area":"agents"},{"id":"2606.12341","title":"OCELOT: Inference-Leakage Budgets for Privacy-Preserving LLM Agents","created":"2026-06-10","cited_by_count":0,"area":"agents"},{"id":"2606.25836","title":"AI Snitches Get Glitches: Towards Evading Agentic Surveillance","created":"2026-06-24","cited_by_count":0,"area":"agents"},{"id":"2606.26403","title":"ProfileFoundry: A Synthetic Person-Object Substrate for Privacy, Memory, and Tool-Use Evaluation in LLM Agent","created":"2026-06-24","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2607.02141","title":"A$^{2}$utoLPBench: An Auto-Generated, Agent-Friendly LP Benchmark via Inverse-KKT Construction","created":"2026-07-02","cited_by_count":0,"area":"agents"},{"id":"2607.11707","title":"An Explainable Agentic System for Detection of Conversational Scams with Summary-Based Memory","created":"2026-07-13","cited_by_count":0,"area":"agents"},{"id":"2608.05159","title":"Agentic Nesting: A New Methodology for Existing Enterprise Application Integration and Services","created":"2026-05-25","cited_by_count":0,"area":"agents"},{"id":"2608.16806","title":"Breaking Planner Integrity Boundary: Enviroment State-Text Injection Attack on LLM-Driven Embodied Agents","created":"2026-08-17","cited_by_count":0,"area":"agents"},{"id":"2609.03815","title":"Inferring Hidden User Models from the Behavior of Personalized LLM Agents","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.13731","title":"Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.14976","title":"MemRiskBench: Trace-Aware Risk-Preserving Evaluation for Long-Horizon LLM Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"}],"next_cursor":"100"}