{"total":27,"rows":[{"id":"2602.20867","title":"SoK: Agentic Skills -- Beyond Tool Use in LLM Agents","created":"2026-02-24","cited_by_count":130,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2606.07131","title":"MalSkillBench: A Runtime-Verified Benchmark of Malicious Agent Skills","created":"2026-06-05","cited_by_count":19,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2604.08407","title":"Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain","created":"2026-04-09","cited_by_count":13,"area":"agents"},{"id":"2605.11770","title":"Behavioral Integrity Verification for AI Agent Skills","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2606.07943","title":"Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents","created":"2026-06-06","cited_by_count":7,"area":"agents"},{"id":"2607.02514","title":"Distributed Attacks in Persistent-State AI Control","created":"2026-07-02","cited_by_count":5,"area":"agents"},{"id":"2607.13987","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","created":"2026-07-15","cited_by_count":5,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2606.26924","title":"A Deterministic Control Plane for LLM Coding Agents","created":"2026-06-25","cited_by_count":3,"area":"agents"},{"id":"2607.25619","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","created":"2026-07-28","cited_by_count":3,"area":"agents"},{"id":"2512.23480","title":"Agentic AI for Autonomous Defense in Software Supply Chain Security: Beyond Provenance to Vulnerability Mitigation","created":"2025-12-29","cited_by_count":2,"area":"agents"},{"id":"2607.00911","title":"From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintained","created":"2026-07-01","cited_by_count":2,"area":"agents"},{"id":"2505.08842","title":"LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Libraries","created":"2025-05-13","cited_by_count":1,"area":"agents"},{"id":"2606.13757","title":"SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2607.15143","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","created":"2026-07-16","cited_by_count":1,"area":"agents"},{"id":"2605.02187","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2606.03907","title":"The Impact of Configuring Agentic AI Coding Tools on Build-vs-Buy Decisions: A Study Protocol","created":"2026-06-02","cited_by_count":0,"area":"agents"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.30614","title":"Subjects, Not Authors: The Authorship Hazard in Agentic Dataspaces","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.35889","title":"SINGED: Correct Outputs Do Not Certify Safe Execution in LLM Agents","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.12849","title":"Co-Modifying Application Code and Deployment Infrastructure: A Causal Study of AI Agent Pull Requests","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}