{"total":18,"rows":[{"id":"2403.04960","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems","created":"2024-03-08","cited_by_count":130,"area":"agents"},{"id":"2503.12188","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","created":"2025-03-15","cited_by_count":53,"area":"agents"},{"id":"2509.22256","title":"Secure and Efficient Access Control for Computer-Use Agents via Context Space","created":"2025-09-26","cited_by_count":11,"area":"agents"},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2510.22620","title":"Breaking Agent Backbones: Evaluating the Security of Backbone LLMs in AI Agents","created":"2025-10-26","cited_by_count":8,"area":"agents"},{"id":"2510.16558","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","created":"2025-10-18","cited_by_count":5,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2605.13044","title":"No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills","created":"2026-05-13","cited_by_count":5,"area":"agents"},{"id":"2507.02699","title":"Your Mailbox Is Mine: Prompt Injection Attacks Against Real-World LLM Email Agents","created":"2025-07-03","cited_by_count":2,"area":"agents"},{"id":"2607.01640","title":"AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs","created":"2026-07-02","cited_by_count":2,"area":"agents"},{"id":"2607.06195","title":"LogicHunter: Testing LLM Agent Frameworks with an Agentic Oracle","created":"2026-07-07","cited_by_count":2,"area":"agents"},{"id":"2605.07135","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.20351","title":"Refusal Evaluation in Coding LLMs and Code Agents: A Systematic Review of Thirteen Malicious-Code Prompt Corpora (2023-2025)","created":"2026-05-19","cited_by_count":1,"area":"agents"},{"id":"2609.15516","title":"Misleading the Planner through Deceptive Resumes: Registration-Time Injection in Centralized Multi-Agent Systems","created":"2026-09-14","cited_by_count":1,"area":"agents"},{"id":"2607.02857","title":"MOSAIC: Knowledge-Guided CLI Command Composition Attack in LLM Coding Agents","created":"2026-07-03","cited_by_count":0,"area":"agents"},{"id":"2607.03821","title":"DualView: Preventing Indirect Prompt Injection in Personal AI Agents","created":"2026-07-04","cited_by_count":0,"area":"agents"},{"id":"2608.10281","title":"From Prompt Injection to Web Exploitation: Revisiting Classic Vulnerabilities in LLM-Integrated Applications","created":"2026-08-10","cited_by_count":0,"area":"agents"},{"id":"2609.39065","title":"Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"}],"next_cursor":null}