{"total":21,"rows":[{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2512.08417","title":"Attention is All You Need to Defend Against Indirect Prompt Injection Attacks in LLMs","created":"2025-12-09","cited_by_count":10,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2604.09443","title":"Many-Tier Instruction Hierarchy in LLM Agents","created":"2026-04-10","cited_by_count":6,"area":"agents"},{"id":"2508.20282","title":"Network-Level Prompt and Trait Leakage in Local Research Agents","created":"2025-08-27","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2601.21233","title":"Just Ask: Curious Code Agents Reveal System Prompts in Frontier LLMs","created":"2026-01-29","cited_by_count":4,"area":"agents"},{"id":"2502.12630","title":"Automating Prompt Leakage Attacks on Large Language Models Using Agentic Approach","created":"2025-02-18","cited_by_count":3,"area":"agents"},{"id":"2608.04192","title":"Behavioral Skill Reconstruction: Reconstructing Hidden Functionality from LLM Agent Skills","created":"2026-08-04","cited_by_count":2,"area":"agents"},{"id":"2511.08710","title":"Convergence dynamics of Agent-to-Agent Interactions with Misaligned objectives","created":"2025-11-11","cited_by_count":1,"area":"agents"},{"id":"2607.05120","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","created":"2026-07-06","cited_by_count":1,"area":"agents"},{"id":"2404.07439","title":"Behavior Trees Enable Structured Programming of Language Model Agents","created":"2024-04-11","cited_by_count":0,"area":"agents"},{"id":"2510.22963","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","created":"2025-10-27","cited_by_count":0,"area":"agents"},{"id":"2604.01039","title":"Evaluation and Hardening of LLM System Instructions Against Extraction via Encoding Attacks","created":"2026-04-01","cited_by_count":0,"area":"agents"},{"id":"2608.30441","title":"ECLIPSE: Self-Evolving Stealthy Prompt Injection Attack against Long-Horizon Agentic Systems","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.01663","title":"Context Inference Attacks Without Jailbreaks","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.12808","title":"K-Bench: A Benchmark for LLM Unlearning in Agentic Deployments","created":"2026-09-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}