{"total":20,"rows":[{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2506.02456","title":"VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents","created":"2025-06-03","cited_by_count":45,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2506.01055","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","created":"2025-06-01","cited_by_count":26,"area":"agents"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2510.08240","title":"The Alignment Waltz: Jointly Training Agents to Collaborate for Safety","created":"2025-10-09","cited_by_count":10,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2310.15065","title":"Synergizing Human-AI Agency: A Guide of 23 Heuristics for Service Co-Creation with LLM-Based Agents","created":"2023-10-23","cited_by_count":5,"area":"agents"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2510.16255","title":"Detecting Adversarial Fine-tuning with Auditing Agents","created":"2025-10-17","cited_by_count":3,"area":"agents"},{"id":"2604.12284","title":"WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2512.20293","title":"AprielGuard","created":"2025-12-23","cited_by_count":2,"area":"agents"},{"id":"2605.27375","title":"LCO: LLM-based Constraint Optimization for Safer Agentic LLMs in Real-world Tasks","created":"2026-04-08","cited_by_count":0,"area":"agents"},{"id":"2606.00603","title":"Toward Agentic Governance: What Shapes LLM-Agent Intervention in Public Forums?","created":"2026-05-30","cited_by_count":0,"area":"agents"},{"id":"2606.14831","title":"Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis","created":"2026-06-12","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.29206","title":"Benevolent Bias in Multi-Turn Human-Agent Dialogue","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2609.33955","title":"Designing Reliable LLM-as-a-Judge Measurement Systems for Multi-Turn Business Agents","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.07089","title":"Towards a Unified Misuse Monitoring Benchmark","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}