{"total":29,"rows":[{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2502.02542","title":"OverThink: Slowdown Attacks on Reasoning LLMs","created":"2025-02-04","cited_by_count":96,"area":"lr"},{"id":"2307.09476","title":"Overthinking the Truth: Understanding how Language Models Process False Demonstrations","created":"2023-07-18","cited_by_count":81,"area":"lr"},{"id":"2503.24370","title":"Effectively Controlling Reasoning Models through Thinking Intervention","created":"2025-03-31","cited_by_count":65,"area":"lr"},{"id":"2505.05849","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","created":"2025-05-09","cited_by_count":42,"area":"lr"},{"id":"2409.09822","title":"Causal Inference with Large Language Model: A Survey","created":"2024-09-15","cited_by_count":32,"area":"lr"},{"id":"2503.01908","title":"UDora: A Unified Red Teaming Framework against LLM Agents by Dynamically Hijacking Their Own Reasoning","created":"2025-02-28","cited_by_count":21,"area":"lr"},{"id":"2405.00622","title":"Causal Evaluation of Language Models","created":"2024-05-01","cited_by_count":18,"area":"lr"},{"id":"2609.31142","title":"JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models","created":"2026-09-25","cited_by_count":10,"area":"lr"},{"id":"2509.17938","title":"D-REX: A Benchmark for Detecting Deceptive Reasoning in Large Language Models","created":"2025-09-22","cited_by_count":7,"area":"lr"},{"id":"2508.06361","title":"Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts","created":"2025-08-08","cited_by_count":5,"area":"lr"},{"id":"2603.27517","title":"A Security Analysis of the OpenClaw AI Agent Framework","created":"2026-03-29","cited_by_count":5,"area":"lr"},{"id":"2508.06457","title":"ScamAgents: How AI Agents Can Simulate Human-Level Scam Calls","created":"2025-08-08","cited_by_count":4,"area":"lr"},{"id":"2605.08876","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","created":"2026-05-09","cited_by_count":3,"area":"lr"},{"id":"2606.04425","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection","created":"2026-06-03","cited_by_count":3,"area":"lr"},{"id":"2606.25013","title":"Do Thinking Tokens Help with Safety?","created":"2026-06-23","cited_by_count":3,"area":"lr"},{"id":"2510.06002","title":"Deterministic Legal Agents: A Canonical Primitive API for Auditable Reasoning over Temporal Knowledge Graphs","created":"2025-10-07","cited_by_count":2,"area":"lr"},{"id":"2602.01795","title":"RedVisor: Reasoning-Aware Prompt Injection Defense via Zero-Copy KV Cache Reuse","created":"2026-02-02","cited_by_count":2,"area":"lr"},{"id":"2510.20188","title":"TRUST: A Decentralized Framework for Auditing Large Language Model Reasoning","created":"2025-10-23","cited_by_count":1,"area":"lr"},{"id":"2602.17022","title":"ReIn: Conversational Error Recovery with Reasoning Inception","created":"2026-02-19","cited_by_count":1,"area":"lr"},{"id":"2604.03242","title":"DRAFT: Task Decoupled Latent Reasoning for Agent Safety","created":"2026-02-11","cited_by_count":1,"area":"lr"},{"id":"2604.27132","title":"TRUST: A Framework for Decentralized AI Service v.0.1","created":"2026-04-29","cited_by_count":0,"area":"lr"},{"id":"2605.12746","title":"CoT-Guard: Small Models for Strong Monitoring","created":"2026-05-12","cited_by_count":0,"area":"lr"},{"id":"2605.30686","title":"Depth-Dependent Indirect Prompt Injection in Tool-Calling ReAct Agents: Injection Depth, Payload Framing, and Turn-Budget Sensitivity","created":"2026-05-29","cited_by_count":0,"area":"lr"},{"id":"2605.30837","title":"Send a SCOUT First: Pre-hoc Reasoning for Adaptive Detector Allocation in Prompt-Injection Defense","created":"2026-05-29","cited_by_count":0,"area":"lr"},{"id":"2606.04435","title":"Cascading Hallucination in Agentic RAG: The CHARM Framework for Detection and Mitigation","created":"2026-06-03","cited_by_count":0,"area":"lr"},{"id":"2606.07968","title":"RecurGuard: Runtime Monitoring for Reasoning-Token Consumption Attacks","created":"2026-06-06","cited_by_count":0,"area":"lr"},{"id":"2606.19588","title":"Analyzing the Narration Gap in LLM-Solver Loops","created":"2026-06-17","cited_by_count":0,"area":"lr"},{"id":"2610.18566","title":"Rethinking Quality in Large Language Model Routing: Security-Conditioned Model-and-Budget Selection","created":"2026-10-13","cited_by_count":0,"area":"lr"}],"next_cursor":null}