{"total":58,"rows":[{"id":"2602.20867","title":"SoK: Agentic Skills -- Beyond Tool Use in LLM Agents","created":"2026-02-24","cited_by_count":130,"area":"agents"},{"id":"2406.10279","title":"We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs","created":"2024-06-12","cited_by_count":65,"area":null},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2606.07131","title":"MalSkillBench: A Runtime-Verified Benchmark of Malicious Agent Skills","created":"2026-06-05","cited_by_count":19,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2410.04490","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","created":"2024-10-06","cited_by_count":14,"area":null},{"id":"2403.15600","title":"Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers","created":"2024-03-22","cited_by_count":13,"area":null},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2604.08407","title":"Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain","created":"2026-04-09","cited_by_count":13,"area":"agents"},{"id":"2308.04898","title":"An Empirical Study on Using Large Language Models to Analyze Software Supply Chain Security Failures","created":"2023-08-09","cited_by_count":11,"area":null},{"id":"2605.11770","title":"Behavioral Integrity Verification for AI Agent Skills","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2606.07943","title":"Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents","created":"2026-06-06","cited_by_count":7,"area":"agents"},{"id":"2412.18442","title":"SoK: On the Offensive Potential of AI","created":"2024-12-24","cited_by_count":5,"area":null},{"id":"2505.19532","title":"Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning","created":"2025-05-26","cited_by_count":5,"area":"deeprl"},{"id":"2607.02514","title":"Distributed Attacks in Persistent-State AI Control","created":"2026-07-02","cited_by_count":5,"area":"agents"},{"id":"2607.13987","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","created":"2026-07-15","cited_by_count":5,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2606.26924","title":"A Deterministic Control Plane for LLM Coding Agents","created":"2026-06-25","cited_by_count":3,"area":"agents"},{"id":"2607.25619","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","created":"2026-07-28","cited_by_count":3,"area":"agents"},{"id":"2504.17198","title":"Automatically Generating Rules of Malicious Software Packages via Large Language Model","created":"2025-04-24","cited_by_count":2,"area":null},{"id":"2509.06703","title":"On the (In)Security of Loading Machine Learning Models","created":"2025-09-08","cited_by_count":2,"area":null},{"id":"2512.23480","title":"Agentic AI for Autonomous Defense in Software Supply Chain Security: Beyond Provenance to Vulnerability Mitigation","created":"2025-12-29","cited_by_count":2,"area":"agents"},{"id":"2607.00911","title":"From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintained","created":"2026-07-01","cited_by_count":2,"area":"agents"},{"id":"2609.05881","title":"Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Them","created":"2026-09-05","cited_by_count":2,"area":null},{"id":"2411.13459","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","created":"2024-11-20","cited_by_count":1,"area":null},{"id":"2412.19088","title":"Integrating Artificial Open Generative Artificial Intelligence into Software Supply Chain Security","created":"2024-12-26","cited_by_count":1,"area":null},{"id":"2505.08842","title":"LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Libraries","created":"2025-05-13","cited_by_count":1,"area":"agents"},{"id":"2509.20277","title":"Investigating Security Implications of Automatically Generated Code on the Software Supply Chain","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2512.01255","title":"Large Language Models Cannot Reliably Detect Vulnerabilities in JavaScript: The First Systematic Benchmark and Evaluation","created":"2025-12-01","cited_by_count":1,"area":null},{"id":"2512.21681","title":"Exploring the Security Threats of Retriever Backdoors in Retrieval-Augmented Code Generation","created":"2025-12-25","cited_by_count":1,"area":"rag"},{"id":"2605.03309","title":"Cryptographic Registry Provenance: Structural Defense Against Dependency Confusion in AI Package Ecosystems","created":"2026-05-05","cited_by_count":1,"area":null},{"id":"2605.06279","title":"Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versions","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2606.13757","title":"SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2607.15143","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","created":"2026-07-16","cited_by_count":1,"area":"agents"},{"id":"2312.10861","title":"Code Ownership in Open-Source AI Software Security","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2405.16655","title":"Predicting Likely-Vulnerable Code Changes: Machine Learning-based Vulnerability Protections for Android Open Source Project","created":"2024-05-26","cited_by_count":0,"area":null},{"id":"2409.00199","title":"Unintentional Security Flaws in Code: Automated Defense via Root Cause Analysis","created":"2024-08-30","cited_by_count":0,"area":null},{"id":"2411.03926","title":"Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning","created":"2024-11-06","cited_by_count":0,"area":null},{"id":"2510.08609","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","created":"2025-10-07","cited_by_count":0,"area":null},{"id":"2602.09182","title":"One RNG to Rule Them All: How Randomness Becomes an Attack Vector in Machine Learning","created":"2026-02-09","cited_by_count":0,"area":null},{"id":"2605.02187","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2605.13115","title":"DiffusionHijack: Supply-Chain PRNG Backdoor Attack on Diffusion Models and Quantum Random Number Defense","created":"2026-05-13","cited_by_count":0,"area":"diffusion"},{"id":"2606.03907","title":"The Impact of Configuring Agentic AI Coding Tools on Build-vs-Buy Decisions: A Study Protocol","created":"2026-06-02","cited_by_count":0,"area":"agents"},{"id":"2606.09935","title":"GitInject: Real-World Prompt Injection Attacks in AI-Powered CI/CD Pipelines","created":"2026-06-07","cited_by_count":0,"area":"safety"},{"id":"2606.11007","title":"Understanding and mitigating the risks of OpenClaw for non-technical users: A practical guide with Skill","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2606.19023","title":"Lifecycle-Aware Dynamic Analysis for Secure ML Model Execution","created":"2026-06-17","cited_by_count":0,"area":null},{"id":"2606.24402","title":"Poisoned Playbooks: Demystifying Knowledge Poisoning Effects on AI Security Agents","created":"2026-06-23","cited_by_count":0,"area":"rag"},{"id":"2606.30587","title":"Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2607.03350","title":"LLM-Enhanced Hierarchical Heterogeneous Graph Representation Learning for Malicious Python Package Detection","created":"2026-07-03","cited_by_count":0,"area":null},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2608.02695","title":"Stylometric Defenses Against Author Impersonation in Software Repositories","created":"2026-08-03","cited_by_count":0,"area":null},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.30614","title":"Subjects, Not Authors: The Authorship Hazard in Agentic Dataspaces","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.31282","title":"Resource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains","created":"2026-09-25","cited_by_count":0,"area":null},{"id":"2609.35889","title":"SINGED: Correct Outputs Do Not Certify Safe Execution in LLM Agents","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.12849","title":"Co-Modifying Application Code and Deployment Infrastructure: A Causal Study of AI Agent Pull Requests","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}