{"total":17,"rows":[{"id":"2406.13352","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","created":"2024-06-19","cited_by_count":145,"area":"agents"},{"id":"2412.16682","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","created":"2024-12-21","cited_by_count":99,"area":"agents"},{"id":"2503.03750","title":"The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systems","created":"2025-03-05","cited_by_count":72,"area":"agents"},{"id":"2508.14925","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","created":"2025-08-19","cited_by_count":66,"area":"agents"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2601.04748","title":"When Single-Agent with Skills Replace Multi-Agent Systems and When They Fail","created":"2026-01-08","cited_by_count":35,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2507.06323","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","created":"2025-07-08","cited_by_count":7,"area":"agents"},{"id":"2602.22303","title":"Training Agents to Self-Report Misbehavior","created":"2026-02-25","cited_by_count":6,"area":"agents"},{"id":"2607.20468","title":"InferenceBench: A Benchmark for Open-Ended LLM Inference Optimization by AI Agents","created":"2026-05-20","cited_by_count":5,"area":"agents"},{"id":"2512.07665","title":"Reliable agent engineering should integrate machine-compatible organizational principles","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2605.17281","title":"ContractBench: Can LLM Agents Preserve Observation Contracts?","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2605.05716","title":"More Is Not Always Better: Cross-Component Interference in LLM Agent Scaffolding","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2607.16961","title":"Lomekwi: Resource-Bounded Tool Discovery in LLM Agents","created":"2026-07-18","cited_by_count":0,"area":"agents"},{"id":"2609.04373","title":"Why Better Models Can Create Riskier Systems: Evidence from LLM Agents in Financial Markets","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.19843","title":"A Dual-Process Perspective on Nudge Susceptibility in LLM-Based GUI Agents","created":"2026-09-17","cited_by_count":0,"area":"agents"}],"next_cursor":null}