{"total":30,"rows":[{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2403.12881","title":"Agent-FLAN: Designing Data and Methods of Effective Agent Tuning for Large Language Models","created":"2024-03-19","cited_by_count":100,"area":"agents"},{"id":"2403.11807","title":"How Far Are We on the Decision-Making of LLMs? Evaluating LLMs' Gaming Ability in Multi-Agent Environments","created":"2024-03-18","cited_by_count":67,"area":"agents"},{"id":"2410.17520","title":"MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Control","created":"2024-10-23","cited_by_count":51,"area":"agents"},{"id":"2409.00557","title":"Learning to Ask: When LLM Agents Meet Unclear Instruction","created":"2024-08-31","cited_by_count":42,"area":"agents"},{"id":"2411.03814","title":"MRJ-Agent: An Effective Jailbreak Agent for Multi-Round Dialogue","created":"2024-11-06","cited_by_count":33,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2407.17915","title":"The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models","created":"2024-07-25","cited_by_count":20,"area":"agents"},{"id":"2510.10073","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","created":"2025-10-11","cited_by_count":19,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2508.00344","title":"PilotRL: Training Language Model Agents via Global Planning-Guided Progressive Reinforcement Learning","created":"2025-08-01","cited_by_count":11,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2601.04034","title":"HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense","created":"2026-01-07","cited_by_count":8,"area":"agents"},{"id":"2502.06589","title":"Hephaestus: Improving Fundamental Agent Capabilities of Large Language Models through Continual Pre-Training","created":"2025-02-10","cited_by_count":6,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2509.25271","title":"RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2510.09093","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","created":"2025-10-10","cited_by_count":3,"area":"agents"},{"id":"2602.13234","title":"Stay in Character, Stay Safe: Dual-Cycle Adversarial Self-Evolution for Safety Role-Playing Agents","created":"2026-01-29","cited_by_count":2,"area":"agents"},{"id":"2508.15526","title":"SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarking","created":"2025-08-21","cited_by_count":1,"area":"agents"},{"id":"2512.23717","title":"HarmTransform: Transforming Explicit Harmful Queries into Stealthy via Multi-Agent Debate","created":"2025-12-09","cited_by_count":1,"area":"agents"},{"id":"2604.22427","title":"Automation-Exploit: A Multi-Agent LLM Framework for Adaptive Offensive Security with Digital Twin-Based Risk-Mitigated Exploitation","created":"2026-04-24","cited_by_count":1,"area":"agents"},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2605.27375","title":"LCO: LLM-based Constraint Optimization for Safer Agentic LLMs in Real-world Tasks","created":"2026-04-08","cited_by_count":0,"area":"agents"},{"id":"2608.25817","title":"SkillShield: Prompt-Space Security Skills for LLM Coding Agents","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2608.26008","title":"A Self-Evolving Multi-Agent Framework Defense against LLM Jailbreak Attacks","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.13731","title":"Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.37196","title":"ToolFence: Fine-Grained Authorization for Secure Tool-Using LLM Agents","created":"2026-09-29","cited_by_count":0,"area":"agents"}],"next_cursor":null}