{"total":51,"rows":[{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264,"area":"safety"},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2403.04960","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems","created":"2024-03-08","cited_by_count":130,"area":"agents"},{"id":"2409.19091","title":"System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective","created":"2024-09-27","cited_by_count":96,"area":"safety"},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77,"area":null},{"id":"2402.01864","title":"(A)I Am Not a Lawyer, But...: Engaging Legal Experts towards Responsible LLM Policies for Legal Advice","created":"2024-02-02","cited_by_count":63,"area":null},{"id":"2309.11653","title":"\"It's a Fair Game\", or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agents","created":"2023-09-20","cited_by_count":60,"area":"agents"},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2402.11755","title":"SPML: A DSL for Defending Language Models Against Prompt Attacks","created":"2024-02-19","cited_by_count":34,"area":null},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2603.00195","title":"Formal Analysis and Supply Chain Security for Agentic AI Skills","created":"2026-02-27","cited_by_count":25,"area":"agents"},{"id":"2503.16248","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","created":"2025-03-20","cited_by_count":24,"area":"safety"},{"id":"2402.01749","title":"Towards Urban General Intelligence: A Review and Outlook of Urban Foundation Models","created":"2024-01-30","cited_by_count":23,"area":null},{"id":"2504.03111","title":"Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents","created":"2025-04-04","cited_by_count":22,"area":"agents"},{"id":"2511.17959","title":"Towards Automating Data Access Permissions in AI Agents","created":"2025-11-22","cited_by_count":21,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2404.16891","title":"Attacks on Third-Party APIs of Large Language Models","created":"2024-04-24","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2603.22868","title":"Agent-Sentry: Bounding LLM Agents via Execution Provenance","created":"2026-03-24","cited_by_count":15,"area":"agents"},{"id":"2407.08422","title":"On the (In)Security of LLM App Stores","created":"2024-07-11","cited_by_count":14,"area":null},{"id":"2408.13247","title":"An In-Depth Investigation of Data Collection in LLM App Ecosystems","created":"2024-08-23","cited_by_count":14,"area":null},{"id":"2505.06493","title":"System Prompt Poisoning: Persistent Attacks on Large Language Models Beyond User Injection","created":"2025-05-10","cited_by_count":14,"area":"safety"},{"id":"2311.11415","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","created":"2023-11-19","cited_by_count":12,"area":null},{"id":"2604.15415","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","created":"2026-04-16","cited_by_count":11,"area":"agents"},{"id":"2504.00018","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","created":"2025-03-27","cited_by_count":10,"area":null},{"id":"2403.08701","title":"Review of Generative AI Methods in Cybersecurity","created":"2024-03-13","cited_by_count":9,"area":"safety"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2606.23416","title":"Detecting Malicious Agent Skills in the Wild using Attention","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2605.00314","title":"Semia: Auditing Agent Skills via Constraint-Guided Representation Synthesis","created":"2026-05-01","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2606.01494","title":"ClawHub Security Signals: When VirusTotal, Static Analysis, and SkillSpector Disagree","created":"2026-05-31","cited_by_count":6,"area":null},{"id":"2512.02321","title":"LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems","created":"2025-12-02","cited_by_count":5,"area":"agents"},{"id":"2402.12617","title":"Generative AI Security: Challenges and Countermeasures","created":"2024-02-20","cited_by_count":4,"area":null},{"id":"2601.19914","title":"Simulating Complex Multi-Turn Tool Calling Interactions in Stateless Execution Environments","created":"2026-01-06","cited_by_count":3,"area":"agents"},{"id":"2508.08629","title":"Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment","created":"2025-08-12","cited_by_count":2,"area":"safety"},{"id":"2511.21758","title":"A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2601.16824","title":"Privacy in Human-AI Romantic Relationships: Concerns, Boundaries, and Agency","created":"2026-01-23","cited_by_count":2,"area":null},{"id":"2605.11891","title":"Proteus: A Self-Evolving Red Team for Agent Skill Ecosystems","created":"2026-05-12","cited_by_count":2,"area":"agents"},{"id":"2407.06718","title":"A Simple Architecture for Enterprise Large Language Model Applications based on Role based security and Clearance Levels using Retrieval-Augmented Generation or Mixture of Experts","created":"2024-07-09","cited_by_count":0,"area":"rag"},{"id":"2503.05737","title":"Local Differences, Global Lessons: Insights from Organisation Policies for International Legislation","created":"2025-02-19","cited_by_count":0,"area":null},{"id":"2505.07759","title":"\"I Apologize For Not Understanding Your Policy\": Exploring the Specification and Evaluation of User-Managed Access Control Policies by AI Virtual Assistants","created":"2025-05-12","cited_by_count":0,"area":null},{"id":"2602.19450","title":"Red-Teaming Claude Opus and ChatGPT-based Security Advisors for Trusted Execution Environments","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2603.10163","title":"Compatibility at a Cost: Systematic Discovery and Exploitation of MCP Clause-Compliance Vulnerabilities","created":"2026-03-10","cited_by_count":0,"area":"agents"},{"id":"2604.26334","title":"Efficient, VRAM-Constrained xLM Inference on Clients","created":"2026-04-29","cited_by_count":0,"area":"mllm"},{"id":"2605.10176","title":"When Prompts Become Payloads: A Framework for Mitigating SQL Injection Attacks in Large Language Model-Driven Applications","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2608.12610","title":"@skills: Attention is all you have","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2609.17274","title":"After the Party: Growth, Governance, and Security Scanning in the OpenClaw Agent Skill Ecosystem","created":"2026-09-15","cited_by_count":0,"area":null},{"id":"2609.29547","title":"When Agents Act Unwatched: The Reduced-Supervision Paradox in Agentic AI","created":"2026-08-28","cited_by_count":0,"area":"agents"}],"next_cursor":null}