{"total":26,"rows":[{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2604.09378","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","created":"2026-04-10","cited_by_count":27,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2503.16248","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","created":"2025-03-20","cited_by_count":24,"area":"safety"},{"id":"2510.05244","title":"Indirect Prompt Injections: Are Firewalls All You Need, or Stronger Benchmarks?","created":"2025-10-06","cited_by_count":18,"area":"safety"},{"id":"2603.22489","title":"Model Context Protocol Threat Modeling and Analyzing Vulnerabilities to Prompt Injection with Tool Poisoning","created":"2026-03-23","cited_by_count":10,"area":"safety"},{"id":"2408.10722","title":"MEGen: Generative Backdoor into Large Language Models via Model Editing","created":"2024-08-20","cited_by_count":8,"area":"safety"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2607.07184","title":"Predicting LLM Safety Before Release by Simulating Deployment","created":"2026-07-08","cited_by_count":8,"area":"safety"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2603.00991","title":"Tracking Capabilities for Safer Agents","created":"2026-03-01","cited_by_count":4,"area":"safety"},{"id":"2512.20677","title":"Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models","created":"2025-12-21","cited_by_count":2,"area":"safety"},{"id":"2410.05304","title":"Developing Assurance Cases for Adversarial Robustness and Regulatory Compliance in LLMs","created":"2024-10-04","cited_by_count":1,"area":"safety"},{"id":"2602.05484","title":"Clouding the Mirror: Stealthy Prompt Injection Attacks Targeting LLM-based Phishing Detection","created":"2026-02-05","cited_by_count":0,"area":"safety"},{"id":"2606.09935","title":"GitInject: Real-World Prompt Injection Attacks in AI-Powered CI/CD Pipelines","created":"2026-06-07","cited_by_count":0,"area":"safety"},{"id":"2606.12918","title":"MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems","created":"2026-06-11","cited_by_count":0,"area":"safety"},{"id":"2607.15218","title":"When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Space","created":"2026-07-16","cited_by_count":0,"area":"safety"},{"id":"2608.05560","title":"From Sports to Safety: Benchmarking Proactive Risk Inference in MLLMs","created":"2026-08-06","cited_by_count":0,"area":"safety"},{"id":"2609.03247","title":"Trust Me, I'm Your Developer: Self-Issued Authentication in Large Language Models","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2609.06966","title":"MOLE: Detecting Insider Threats in AI Agents","created":"2026-09-07","cited_by_count":0,"area":"safety"},{"id":"2609.19630","title":"From Intent to Action: Benchmarking LLM Safety in Vehicle Voice Command Authorization","created":"2026-09-17","cited_by_count":0,"area":"safety"},{"id":"2609.27336","title":"CART: Closed-Loop Adaptive Red Teaming for Large Language Models","created":"2026-09-23","cited_by_count":0,"area":"safety"},{"id":"2610.05163","title":"Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.15153","title":"Can agents whose sole duty is to keep humans alive be hijacked to kill? Delayed multi-turn derived-action trap attacks in simulated high-stakes environments","created":"2026-10-10","cited_by_count":0,"area":"safety"},{"id":"2610.17457","title":"BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}