{"total":19,"rows":[{"id":"2401.05566","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","created":"2024-01-10","cited_by_count":529,"area":"agents"},{"id":"2407.12784","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","created":"2024-07-17","cited_by_count":429,"area":"agents"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2602.20156","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","created":"2026-02-23","cited_by_count":90,"area":"agents"},{"id":"2604.03081","title":"Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems","created":"2026-04-03","cited_by_count":45,"area":"agents"},{"id":"2602.05665","title":"Graph-based Agent Memory: Taxonomy, Techniques, and Applications","created":"2026-02-05","cited_by_count":25,"area":"agents"},{"id":"2410.22339","title":"DAWN: Designing Distributed Agents in a Worldwide Network","created":"2024-10-11","cited_by_count":6,"area":"agents"},{"id":"2510.05159","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","created":"2025-10-03","cited_by_count":6,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2508.06059","title":"Fact2Fiction: Targeted Poisoning Attack to Agentic Fact-checking System","created":"2025-08-08","cited_by_count":4,"area":"agents"},{"id":"2506.23978","title":"LLM Agents Are the Antidote to Walled Gardens","created":"2025-06-30","cited_by_count":3,"area":"agents"},{"id":"2605.12729","title":"Large Language Models for Agentic NetOps and AIOps: Architectures, Evaluation, and Safety","created":"2026-05-12","cited_by_count":2,"area":"agents"},{"id":"2511.19874","title":"Cross-LLM Generalization of Behavioral Backdoor Detection in AI Agent Supply Chains","created":"2025-11-25","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2608.14667","title":"Position: AI Agents in Scientific Teams Should Be Studied as Human-Agent Systems","created":"2026-08-02","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.19705","title":"SoK: Trading Agents or Market Crashers? Dissecting Robustness and Security Failures in Academic Financial LLM Trading Schemes","created":"2026-09-17","cited_by_count":0,"area":"agents"},{"id":"2609.33371","title":"API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary","created":"2026-09-27","cited_by_count":0,"area":"agents"}],"next_cursor":null}