{"total":33,"rows":[{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2311.11855","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","created":"2023-11-20","cited_by_count":106,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2505.18882","title":"Personalized Safety in LLMs: A Benchmark and A Planning-Based Agent Approach","created":"2025-05-24","cited_by_count":16,"area":"agents"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2606.28733","title":"Agentic Abstention: Do Agents Know When to Stop Instead of Act?","created":"2026-06-27","cited_by_count":15,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2510.08240","title":"The Alignment Waltz: Jointly Training Agents to Collaborate for Safety","created":"2025-10-09","cited_by_count":10,"area":"agents"},{"id":"2605.11882","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","created":"2026-05-12","cited_by_count":8,"area":"agents"},{"id":"2506.11083","title":"RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates","created":"2025-06-04","cited_by_count":7,"area":"agents"},{"id":"2603.16733","title":"IQuest-Coder-V1 Technical Report","created":"2026-03-17","cited_by_count":6,"area":"agents"},{"id":"2606.14154","title":"SkillMutator: Benchmarking and Defending Language-and-Code Cross-modal Attacks on LLM Agent Skills","created":"2026-06-12","cited_by_count":5,"area":"agents"},{"id":"2505.14215","title":"Safety Degradation in AI Agents","created":"2025-05-20","cited_by_count":2,"area":"agents"},{"id":"2510.11851","title":"Deep Research Agents Brings Deeper Harm","created":"2025-10-13","cited_by_count":2,"area":"agents"},{"id":"2512.20293","title":"AprielGuard","created":"2025-12-23","cited_by_count":2,"area":"agents"},{"id":"2604.16870","title":"Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives","created":"2026-04-18","cited_by_count":1,"area":"agents"},{"id":"2606.02644","title":"A New Framework for Cybersecurity Refusals in AI Agents","created":"2026-05-31","cited_by_count":1,"area":"agents"},{"id":"2607.01153","title":"Adversarial Pragmatics for AI Safety Evaluation: A Diagnostic Framework and Seed Benchmark for Language-Mediated Control","created":"2026-07-01","cited_by_count":1,"area":"agents"},{"id":"2607.23999","title":"ContainmentBench: Trace-Based Evaluation of Post-Exposure Containment in Tool-Using LLM Agents","created":"2026-07-27","cited_by_count":1,"area":"agents"},{"id":"2608.12654","title":"SteerBench-Work: A Benchmark for Agent Steering at Action Boundaries","created":"2026-08-12","cited_by_count":1,"area":"agents"},{"id":"2609.33658","title":"AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents","created":"2026-09-27","cited_by_count":1,"area":"agents"},{"id":"2604.07883","title":"An Agentic Evaluation Architecture for Historical Bias Detection in Educational Textbooks","created":"2026-04-09","cited_by_count":0,"area":"agents"},{"id":"2604.19049","title":"Refute-or-Promote: An Adversarial Stage-Gated Multi-Agent Review Methodology for High-Precision LLM-Assisted Defect Discovery","created":"2026-04-21","cited_by_count":0,"area":"agents"},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2605.19722","title":"Measuring Safety Alignment Effects in Autonomous Security Agents","created":"2026-05-19","cited_by_count":0,"area":"agents"},{"id":"2608.25711","title":"Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2608.26204","title":"ADeptS-Bench: Measuring the Trustworthiness of Computer Use Agents Across Devices","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2609.02265","title":"CAPTURE: Disentangling Preference Drift from Memory Poisoning in Personalized LLM Agents","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.14157","title":"When Tools Get in the Way: The Effect of Unnecessary Tool Availability on LLM Answering","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.14758","title":"Fabrication After Tool Failure: Tool-Augmented Agents Assert Values Their Tools Did Not Return","created":"2026-09-13","cited_by_count":0,"area":"agents"},{"id":"2609.32021","title":"SilentCall: Hidden Tool-Call Backdoors in Open-Weight Agents, and How to Catch Them","created":"2026-09-25","cited_by_count":0,"area":"agents"},{"id":"2609.33017","title":"Trust and Task Completion in the World of Consumer AI Agents","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.39549","title":"Speculative Safety Honeypot: Toward Proactive Defense Against Multi-turn Agent Attacks","created":"2026-09-30","cited_by_count":0,"area":"agents"}],"next_cursor":null}