{"total":393,"rows":[{"id":"2406.12045","title":"$\\tau$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains","created":"2024-06-17","cited_by_count":1402,"area":"agents"},{"id":"2403.02691","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","created":"2024-03-05","cited_by_count":538,"area":"agents"},{"id":"2410.09024","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","created":"2024-10-11","cited_by_count":437,"area":"agents"},{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223,"area":"agents"},{"id":"2503.18666","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","created":"2025-03-24","cited_by_count":223,"area":"agents"},{"id":"2503.16416","title":"Survey on Evaluation of LLM-based Agents","created":"2025-03-20","cited_by_count":204,"area":"agents"},{"id":"2504.18575","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","created":"2025-04-22","cited_by_count":157,"area":"agents"},{"id":"2507.21504","title":"Evaluation and Benchmarking of LLM Agents: A Survey","created":"2025-07-29","cited_by_count":152,"area":"agents"},{"id":"2406.13352","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","created":"2024-06-19","cited_by_count":145,"area":"agents"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2411.02391","title":"Attacking Vision-Language Computer Agents via Pop-ups","created":"2024-11-04","cited_by_count":116,"area":"agents"},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2507.15219","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","created":"2025-07-21","cited_by_count":108,"area":"agents"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2407.01603","title":"A Review of Large Language Models and Autonomous Agents in Chemistry","created":"2024-06-26","cited_by_count":99,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2411.07781","title":"RedCode: Risky Code Execution and Generation Benchmark for Code Agents","created":"2024-11-12","cited_by_count":90,"area":"agents"},{"id":"2502.11448","title":"AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection","created":"2025-02-17","cited_by_count":89,"area":"agents"},{"id":"2402.10753","title":"ToolSword: Unveiling Safety Issues of Large Language Models in Tool Learning Across Three Stages","created":"2024-02-16","cited_by_count":82,"area":"agents"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2502.05174","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","created":"2025-02-07","cited_by_count":77,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2411.02305","title":"CRMArena: Understanding the Capacity of LLM Agents to Perform Professional CRM Tasks in Realistic Environments","created":"2024-11-04","cited_by_count":71,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2402.01586","title":"TrustAgent: Towards Safe and Trustworthy LLM-based Agents","created":"2024-02-02","cited_by_count":64,"area":"agents"},{"id":"2604.06132","title":"Claw-Eval: Towards Trustworthy Evaluation of Autonomous Agents","created":"2026-04-07","cited_by_count":64,"area":"agents"},{"id":"2405.00823","title":"WorkBench: a Benchmark Dataset for Agents in a Realistic Workplace Setting","created":"2024-05-01","cited_by_count":53,"area":"agents"},{"id":"2410.17520","title":"MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Control","created":"2024-10-23","cited_by_count":51,"area":"agents"},{"id":"2402.11651","title":"Learning From Failure: Integrating Negative Examples when Fine-tuning Large Language Models as Agents","created":"2024-02-18","cited_by_count":50,"area":"agents"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2503.01763","title":"Retrieval Models Aren't Tool-Savvy: Benchmarking Tool Retrieval for Large Language Models","created":"2025-03-03","cited_by_count":47,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2410.23252","title":"Evaluating Cultural and Social Awareness of LLM Web Agents","created":"2024-10-30","cited_by_count":45,"area":"agents"},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2506.16402","title":"IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Tasks","created":"2025-06-19","cited_by_count":41,"area":"agents"},{"id":"2602.16901","title":"AgentLAB: Benchmarking LLM Agents against Long-Horizon Attacks","created":"2026-02-18","cited_by_count":39,"area":"agents"},{"id":"2312.03815","title":"LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystem","created":"2023-12-06","cited_by_count":38,"area":"agents"},{"id":"2605.10912","title":"WildClawBench: A Benchmark for Real-World, Long-Horizon Agent Evaluation","created":"2026-05-11","cited_by_count":37,"area":"agents"},{"id":"2606.04990","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","created":"2026-06-03","cited_by_count":37,"area":"agents"},{"id":"2502.01822","title":"Firewalls to Secure Dynamic LLM Agentic Networks","created":"2025-02-03","cited_by_count":36,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2604.05172","title":"ClawsBench: Evaluating Capability and Safety of LLM Productivity Agents in Simulated Workspaces","created":"2026-04-06","cited_by_count":33,"area":"agents"},{"id":"2508.17281","title":"From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users","created":"2025-08-24","cited_by_count":32,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30,"area":"agents"},{"id":"2602.17753","title":"The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems","created":"2026-02-19","cited_by_count":30,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2604.11790","title":"ClawGuard: A Runtime Security Framework for Tool-Augmented LLM Agents Against Indirect Prompt Injection","created":"2026-04-13","cited_by_count":27,"area":"agents"},{"id":"2511.05269","title":"TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systems","created":"2025-11-07","cited_by_count":26,"area":"agents"},{"id":"2602.10127","title":"\"Humans welcome to observe\": A First Look at the Agent Social Network Moltbook","created":"2026-02-02","cited_by_count":26,"area":"agents"},{"id":"2502.09809","title":"AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration","created":"2025-02-13","cited_by_count":25,"area":"agents"},{"id":"2503.08669","title":"SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints","created":"2025-03-11","cited_by_count":23,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2402.10196","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","created":"2024-02-15","cited_by_count":22,"area":"agents"},{"id":"2410.16950","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","created":"2024-10-22","cited_by_count":22,"area":"agents"},{"id":"2504.03111","title":"Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents","created":"2025-04-04","cited_by_count":22,"area":"agents"},{"id":"2508.10880","title":"Searching for Privacy Risks in LLM Agents via Simulation","created":"2025-08-14","cited_by_count":22,"area":"agents"},{"id":"2512.13526","title":"Async Control: Stress-testing Asynchronous Control Measures for LLM Agents","created":"2025-12-15","cited_by_count":22,"area":"agents"},{"id":"2505.23020","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","created":"2025-05-29","cited_by_count":21,"area":"agents"},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2603.03116","title":"Beyond Task Completion: Revealing Corrupt Success in LLM Agents through Procedure-Aware Evaluation","created":"2026-03-03","cited_by_count":20,"area":"agents"},{"id":"2604.04759","title":"Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw","created":"2026-04-06","cited_by_count":20,"area":"agents"},{"id":"2605.12015","title":"SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces","created":"2026-05-12","cited_by_count":19,"area":"agents"},{"id":"2505.10570","title":"LongFuncEval: Measuring the effectiveness of long context models for function calling","created":"2025-04-30","cited_by_count":18,"area":"agents"},{"id":"2506.01859","title":"CONFETTI: Conversational Function-Calling Evaluation Through Turn-Level Interactions","created":"2025-06-02","cited_by_count":18,"area":"agents"},{"id":"2507.15296","title":"Butterfly Effects in Toolchains: A Comprehensive Analysis of Failed Parameter Filling in LLM Tool-Agent Systems","created":"2025-07-21","cited_by_count":18,"area":"agents"},{"id":"2506.15253","title":"RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environments","created":"2025-06-18","cited_by_count":17,"area":"agents"},{"id":"2607.10059","title":"AgentAbstain: Do LLM Agents Know When Not to Act?","created":"2026-07-11","cited_by_count":17,"area":"agents"},{"id":"2511.05359","title":"ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations","created":"2025-11-07","cited_by_count":16,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2604.24026","title":"From Skill Text to Skill Structure: The Scheduling-Structural-Logical Representation for Agent Skills","created":"2026-04-27","cited_by_count":16,"area":"agents"},{"id":"2502.01635","title":"The AI Agent Index","created":"2025-02-03","cited_by_count":15,"area":"agents"},{"id":"2510.03285","title":"WAREX: Web Agent Reliability Evaluation on Existing Benchmarks","created":"2025-09-28","cited_by_count":15,"area":"agents"},{"id":"2603.22868","title":"Agent-Sentry: Bounding LLM Agents via Execution Provenance","created":"2026-03-24","cited_by_count":15,"area":"agents"},{"id":"2604.05485","title":"Auditable Agents","created":"2026-04-07","cited_by_count":15,"area":"agents"},{"id":"2604.13630","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","created":"2026-04-15","cited_by_count":15,"area":"agents"},{"id":"2607.23929","title":"MemTX: Transactional Belief Commit for Stateful Agent Memory","created":"2026-07-27","cited_by_count":15,"area":"agents"},{"id":"2411.01344","title":"Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent","created":"2024-11-02","cited_by_count":14,"area":"agents"},{"id":"2503.20527","title":"StableToolBench-MirrorAPI: Modeling Tool Environments as Mirrors of 7,000+ Real-World APIs","created":"2025-03-26","cited_by_count":14,"area":"agents"},{"id":"2602.12268","title":"CM2: Reinforcement Learning with Checklist Rewards for Multi-Turn and Multi-Step Agentic Tool Use","created":"2026-02-12","cited_by_count":14,"area":"agents"},{"id":"2604.21308","title":"CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents","created":"2026-04-23","cited_by_count":14,"area":"agents"},{"id":"2605.03378","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","created":"2026-05-05","cited_by_count":14,"area":"agents"},{"id":"2604.28139","title":"Claw-Eval-Live: A Live Agent Benchmark for Evolving Real-World Workflows","created":"2026-04-30","cited_by_count":13,"area":"agents"},{"id":"2605.18583","title":"Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks","created":"2026-05-18","cited_by_count":13,"area":"agents"},{"id":"2606.15242","title":"Benign in Isolation, Harmful in Composition: Security Risks in Agent Skill Ecosystems","created":"2026-06-13","cited_by_count":13,"area":"agents"},{"id":"2510.16492","title":"Check Yourself Before You Wreck Yourself: Selectively Quitting Improves LLM Agent Safety","created":"2025-10-18","cited_by_count":12,"area":"agents"},{"id":"2604.10577","title":"The Blind Spot of Agent Safety: How Benign User Instructions Expose Critical Vulnerabilities in Computer-Use Agents","created":"2026-04-12","cited_by_count":12,"area":"agents"},{"id":"2605.13940","title":"AgentTrap: Measuring Runtime Trust Failures in Third-Party Agent Skills","created":"2026-05-13","cited_by_count":12,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2601.15075","title":"The Why Behind the Action: Unveiling Internal Drivers via Agentic Attribution","created":"2026-01-21","cited_by_count":11,"area":"agents"}],"next_cursor":"100"}