{"total":66,"rows":[{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2403.04783","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","created":"2024-03-02","cited_by_count":145,"area":"agents"},{"id":"2404.08144","title":"LLM Agents can Autonomously Exploit One-day Vulnerabilities","created":"2024-04-11","cited_by_count":128,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2402.06664","title":"LLM Agents can Autonomously Hack Websites","created":"2024-02-06","cited_by_count":109,"area":"agents"},{"id":"2406.01637","title":"Teams of LLM Agents can Exploit Zero-Day Vulnerabilities","created":"2024-06-02","cited_by_count":95,"area":"agents"},{"id":"2411.07781","title":"RedCode: Risky Code Execution and Generation Benchmark for Code Agents","created":"2024-11-12","cited_by_count":90,"area":"agents"},{"id":"2410.17520","title":"MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Control","created":"2024-10-23","cited_by_count":51,"area":"agents"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2407.16667","title":"RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agent","created":"2024-07-23","cited_by_count":44,"area":"agents"},{"id":"2407.20242","title":"BadRobot: Jailbreaking Embodied LLM Agents in the Physical World","created":"2024-07-16","cited_by_count":43,"area":"agents"},{"id":"2312.03815","title":"LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystem","created":"2023-12-06","cited_by_count":38,"area":"agents"},{"id":"2312.14302","title":"Exploiting Novel GPT-4 APIs","created":"2023-12-21","cited_by_count":28,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2407.17915","title":"The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models","created":"2024-07-25","cited_by_count":20,"area":"agents"},{"id":"2511.06626","title":"Spilling the Beans: Teaching LLMs to Self-Report Their Hidden Objectives","created":"2025-11-10","cited_by_count":15,"area":"agents"},{"id":"2511.18538","title":"From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence","created":"2025-11-23","cited_by_count":15,"area":"agents"},{"id":"2604.05485","title":"Auditable Agents","created":"2026-04-07","cited_by_count":15,"area":"agents"},{"id":"2502.15865","title":"Standard Benchmarks Fail -- Auditing LLM Agents in Finance Must Prioritize Risk","created":"2025-02-21","cited_by_count":13,"area":"agents"},{"id":"2512.20798","title":"A Benchmark for Evaluating Outcome-Driven Constraint Violations in Autonomous AI Agents","created":"2025-12-23","cited_by_count":13,"area":"agents"},{"id":"2505.17767","title":"Position: The Real Barrier to LLM Agent Usability is Agentic ROI","created":"2025-05-23","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2405.20770","title":"Large Language Model Sentinel: LLM Agent for Adversarial Purification","created":"2024-05-24","cited_by_count":10,"area":"agents"},{"id":"2508.14031","title":"Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigation","created":"2025-08-19","cited_by_count":9,"area":"agents"},{"id":"2504.01278","title":"Strategize Globally, Adapt Locally: A Multi-Turn Red Teaming Agent with Dual-Level Learning","created":"2025-04-02","cited_by_count":8,"area":"agents"},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2601.04034","title":"HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense","created":"2026-01-07","cited_by_count":8,"area":"agents"},{"id":"2502.20757","title":"The Rise of Darkness: Safety-Utility Trade-Offs in Role-Playing Dialogue Agents","created":"2025-02-28","cited_by_count":7,"area":"agents"},{"id":"2511.16709","title":"AutoBackdoor: Automating Backdoor Attacks via LLM Agents","created":"2025-11-20","cited_by_count":7,"area":"agents"},{"id":"2605.30883","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","created":"2026-05-29","cited_by_count":7,"area":"agents"},{"id":"2410.10871","title":"Applying Refusal-Vector Ablation to Llama 3.1 70B Agents","created":"2024-10-08","cited_by_count":6,"area":"agents"},{"id":"2602.22303","title":"Training Agents to Self-Report Misbehavior","created":"2026-02-25","cited_by_count":6,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2509.25271","title":"RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2509.26495","title":"OffTopicEval: When Large Language Models Enter the Wrong Chat, Almost Always!","created":"2025-09-30","cited_by_count":4,"area":"agents"},{"id":"2511.07315","title":"JPRO: Automated Multimodal Jailbreaking via Multi-Agent Collaboration Framework","created":"2025-11-10","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2510.05484","title":"Evaluating LLM Safety Across Child Development Stages: A Simulated Agent Approach","created":"2025-10-07","cited_by_count":3,"area":"agents"},{"id":"2510.16255","title":"Detecting Adversarial Fine-tuning with Auditing Agents","created":"2025-10-17","cited_by_count":3,"area":"agents"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2606.06223","title":"From Reward-Hack Activations to Agentic Risk States: Context-Calibrated Mechanistic Monitoring in LLM Agents","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2602.13234","title":"Stay in Character, Stay Safe: Dual-Cycle Adversarial Self-Evolution for Safety Role-Playing Agents","created":"2026-01-29","cited_by_count":2,"area":"agents"},{"id":"2607.10750","title":"Filtering Harmful Actions Isn't Enough: Phantom Transfer in Agentic SDF","created":"2026-07-12","cited_by_count":2,"area":"agents"},{"id":"2503.17753","title":"Building Resource-Constrained Language Agents: A Korean Case Study on Chemical Toxicity Information","created":"2025-03-22","cited_by_count":1,"area":"agents"},{"id":"2508.15068","title":"S3LoRA: Safe Spectral Sharpness-Guided Pruning in Adaptation of Agent Planner","created":"2025-08-20","cited_by_count":1,"area":"agents"},{"id":"2510.17431","title":"Agentic Reinforcement Learning for Search Misaligns Instruction-Tuning","created":"2025-10-20","cited_by_count":1,"area":"agents"},{"id":"2512.04691","title":"Towards Ethical Multi-Agent Systems of Large Language Models: A Mechanistic Interpretability Perspective","created":"2025-12-04","cited_by_count":1,"area":"agents"},{"id":"2603.02229","title":"Safety Training May Persist Through Helpfulness Optimization in LLM Agents","created":"2026-02-13","cited_by_count":1,"area":"agents"},{"id":"2603.18235","title":"Toward Reliable, Safe, and Secure LLMs for Scientific Applications","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2604.07831","title":"Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection","created":"2026-04-09","cited_by_count":1,"area":"agents"},{"id":"2606.20638","title":"RIZZ: Routing Interactions to Near Zero-Interference Zones for Continual Adaptation of Black-Box Agents","created":"2026-06-02","cited_by_count":1,"area":"agents"},{"id":"2510.05743","title":"Artificially intelligent agents in the social and behavioral sciences: A history and outlook","created":"2025-10-07","cited_by_count":0,"area":"agents"},{"id":"2602.11220","title":"Patch the Distribution Mismatch: RL Rewriting Agent for Stable Off-Policy SFT","created":"2026-02-11","cited_by_count":0,"area":"agents"},{"id":"2603.14417","title":"Questionnaire Responses Do not Capture the Safety of AI Agents","created":"2026-03-15","cited_by_count":0,"area":"agents"},{"id":"2605.02914","title":"When Safety Geometry Collapses: Fine-Tuning Vulnerabilities in Agentic Guard Models","created":"2026-04-08","cited_by_count":0,"area":"agents"},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2607.22545","title":"Semalith v1.4: A Calibrated 184M Safety Classifier Achieving State-of-the-Art Prompt-Injection Detection at 44x Fewer Parameters than Llama-Guard-3-8B","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2608.11274","title":"Agent Safety Should Be a Runtime Contract","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.25817","title":"SkillShield: Prompt-Space Security Skills for LLM Coding Agents","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.02265","title":"CAPTURE: Disentangling Preference Drift from Memory Poisoning in Personalized LLM Agents","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.35596","title":"SEABench: Benchmarking Endogenous Misalignment In Self-Evolving Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.00949","title":"PG-SFT: Balancing Capability Acquisition and Retention in Offline Agent Fine-Tuning","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.18424","title":"Receiver Decides Agent-to-Agent Negotiations","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}