{"total":154,"rows":[{"id":"2401.05566","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","created":"2024-01-10","cited_by_count":529,"area":"agents"},{"id":"2401.05459","title":"Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security","created":"2024-01-10","cited_by_count":260,"area":"agents"},{"id":"2404.18231","title":"From Persona to Personalization: A Survey on Role-Playing Language Agents","created":"2024-04-28","cited_by_count":212,"area":"agents"},{"id":"2403.04783","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","created":"2024-03-02","cited_by_count":145,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2405.05175","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","created":"2024-05-08","cited_by_count":94,"area":"agents"},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2401.11880","title":"PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety","created":"2024-01-22","cited_by_count":80,"area":"agents"},{"id":"2506.12104","title":"DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents","created":"2025-06-13","cited_by_count":66,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2410.17401","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","created":"2024-10-22","cited_by_count":59,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2402.16965","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","created":"2024-02-26","cited_by_count":51,"area":"agents"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2410.01606","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","created":"2024-10-02","cited_by_count":45,"area":"agents"},{"id":"2407.16667","title":"RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agent","created":"2024-07-23","cited_by_count":44,"area":"agents"},{"id":"2602.16901","title":"AgentLAB: Benchmarking LLM Agents against Long-Horizon Attacks","created":"2026-02-18","cited_by_count":39,"area":"agents"},{"id":"2412.10198","title":"From Allies to Adversaries: Manipulating LLM Tool-Calling through Adversarial Injection","created":"2024-12-13","cited_by_count":38,"area":"agents"},{"id":"2503.04392","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","created":"2025-03-06","cited_by_count":38,"area":"agents"},{"id":"2604.12374","title":"Nemotron 3 Super: Open, Efficient Mixture-of-Experts Hybrid Mamba-Transformer Model for Agentic Reasoning","created":"2026-04-14","cited_by_count":38,"area":"agents"},{"id":"2411.03814","title":"MRJ-Agent: An Effective Jailbreak Agent for Multi-Round Dialogue","created":"2024-11-06","cited_by_count":33,"area":"agents"},{"id":"2508.19461","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","created":"2025-08-26","cited_by_count":31,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2604.04989","title":"SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement","created":"2026-04-05","cited_by_count":30,"area":"agents"},{"id":"2410.15686","title":"NetSafe: Exploring the Topological Safety of Multi-agent Networks","created":"2024-10-21","cited_by_count":29,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2406.08689","title":"Security of AI Agents","created":"2024-06-12","cited_by_count":26,"area":"agents"},{"id":"2510.02554","title":"ToolTweak: An Attack on Tool Selection in LLM-based Agents","created":"2025-10-02","cited_by_count":26,"area":"agents"},{"id":"2502.01236","title":"Eliciting Language Model Behaviors with Investigator Agents","created":"2025-02-03","cited_by_count":23,"area":"agents"},{"id":"2602.09222","title":"MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks","created":"2026-02-09","cited_by_count":21,"area":"agents"},{"id":"2407.17915","title":"The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models","created":"2024-07-25","cited_by_count":20,"area":"agents"},{"id":"2502.14529","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","created":"2025-02-20","cited_by_count":20,"area":"agents"},{"id":"2603.15714","title":"How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2512.04864","title":"Are Your Agents Upward Deceivers?","created":"2025-12-04","cited_by_count":16,"area":"agents"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2502.00757","title":"AgentBreeder: Mitigating the AI Safety Risks of Multi-Agent Scaffolds via Self-Improvement","created":"2025-02-02","cited_by_count":14,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2605.03378","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","created":"2026-05-05","cited_by_count":14,"area":"agents"},{"id":"2406.11978","title":"Dialogue Action Tokens: Steering Language Models in Goal-Directed Dialogue with a Multi-Turn Planner","created":"2024-06-17","cited_by_count":13,"area":"agents"},{"id":"2412.05734","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","created":"2024-12-07","cited_by_count":13,"area":"agents"},{"id":"2506.00781","title":"CoP: Agentic Red-teaming for Large Language Models using Composition of Principles","created":"2025-06-01","cited_by_count":13,"area":"agents"},{"id":"2507.04724","title":"Who's the Mole? Modeling and Detecting Intention-Hiding Malicious Agents in LLM-Based Multi-Agent Systems","created":"2025-07-07","cited_by_count":13,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2604.15415","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","created":"2026-04-16","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2512.08417","title":"Attention is All You Need to Defend Against Indirect Prompt Injection Attacks in LLMs","created":"2025-12-09","cited_by_count":10,"area":"agents"},{"id":"2602.07398","title":"AgentSys: Secure and Dynamic LLM Agents Through Explicit Hierarchical Memory Management","created":"2026-02-07","cited_by_count":10,"area":"agents"},{"id":"2607.06000","title":"Context-to-Execution Integrity for LLM Agents","created":"2026-07-07","cited_by_count":10,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2510.23853","title":"Your LLM Agents are Temporally Blind: The Misalignment Between Tool Use Decisions and Human Time Perception","created":"2025-10-27","cited_by_count":9,"area":"agents"},{"id":"2511.09710","title":"Echoing: Identity Failures when LLM Agents Talk to Each Other","created":"2025-11-12","cited_by_count":9,"area":"agents"},{"id":"2512.00966","title":"Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis","created":"2025-11-30","cited_by_count":9,"area":"agents"},{"id":"2504.01278","title":"Strategize Globally, Adapt Locally: A Multi-Turn Red Teaming Agent with Dual-Level Learning","created":"2025-04-02","cited_by_count":8,"area":"agents"},{"id":"2601.04034","title":"HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense","created":"2026-01-07","cited_by_count":8,"area":"agents"},{"id":"2507.06323","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","created":"2025-07-08","cited_by_count":7,"area":"agents"},{"id":"2511.16709","title":"AutoBackdoor: Automating Backdoor Attacks via LLM Agents","created":"2025-11-20","cited_by_count":7,"area":"agents"},{"id":"2602.05176","title":"Among Us: Measuring and Mitigating Malicious Contributions in Model Collaboration Systems","created":"2026-02-05","cited_by_count":7,"area":"agents"},{"id":"2605.24659","title":"IterInject: Indirect Prompt Injection Against LLM Agents via Feedback-Guided Iterative Optimization","created":"2026-05-23","cited_by_count":7,"area":"agents"},{"id":"2605.30883","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","created":"2026-05-29","cited_by_count":7,"area":"agents"},{"id":"2606.10525","title":"Assessing Automated Prompt Injection Attacks in Agentic Environments","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2603.22341","title":"T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search","created":"2026-03-21","cited_by_count":6,"area":"agents"},{"id":"2608.09885","title":"SHE: Trajectory-driven Safety Harness Evolution for LLM Agents","created":"2026-08-10","cited_by_count":6,"area":"agents"},{"id":"2506.07153","title":"Mind the Web: The Security of Web Use Agents","created":"2025-06-08","cited_by_count":5,"area":"agents"},{"id":"2507.08207","title":"Toward a Dynamic Stackelberg Game-Theoretic Framework for Agentic AI Defense Against LLM Jailbreaking","created":"2025-07-10","cited_by_count":5,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2605.24279","title":"ContextEcho: A Benchmark for Persona Drift in Long Agentic-Coding Sessions","created":"2026-05-22","cited_by_count":5,"area":"agents"},{"id":"2606.15057","title":"AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents","created":"2026-06-13","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2506.22557","title":"MetaCipher: A Time-Persistent and Universal Multi-Agent Framework for Cipher-Based Jailbreak Attacks for LLMs","created":"2025-06-27","cited_by_count":4,"area":"agents"},{"id":"2509.25271","title":"RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2509.26495","title":"OffTopicEval: When Large Language Models Enter the Wrong Chat, Almost Always!","created":"2025-09-30","cited_by_count":4,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2511.07315","title":"JPRO: Automated Multimodal Jailbreaking via Multi-Agent Collaboration Framework","created":"2025-11-10","cited_by_count":4,"area":"agents"},{"id":"2603.13940","title":"GroupGuard: A Framework for Modeling and Defending Collusive Attacks in Multi-Agent Systems","created":"2026-03-14","cited_by_count":4,"area":"agents"},{"id":"2608.10218","title":"Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems","created":"2026-08-10","cited_by_count":4,"area":"agents"},{"id":"2502.12630","title":"Automating Prompt Leakage Attacks on Large Language Models Using Agentic Approach","created":"2025-02-18","cited_by_count":3,"area":"agents"},{"id":"2510.17862","title":"When \"Correct\" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?","created":"2025-10-15","cited_by_count":3,"area":"agents"},{"id":"2601.10758","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","created":"2026-01-14","cited_by_count":3,"area":"agents"},{"id":"2604.20300","title":"FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memory","created":"2026-04-22","cited_by_count":3,"area":"agents"},{"id":"2605.02307","title":"SOTOPIA-TOM: Evaluating Privacy and Information Management in Multi-Agent Interaction with Theory of Mind","created":"2026-05-04","cited_by_count":3,"area":"agents"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2606.20922","title":"Think Twice Before You Act: Protecting LLM Agents Against Tool Description Poisoning via Isolated Planning","created":"2026-06-18","cited_by_count":3,"area":"agents"},{"id":"2507.02699","title":"Your Mailbox Is Mine: Prompt Injection Attacks Against Real-World LLM Email Agents","created":"2025-07-03","cited_by_count":2,"area":"agents"},{"id":"2510.23675","title":"QueryIPI: Query-agnostic Indirect Prompt Injection on Coding Agents","created":"2025-10-27","cited_by_count":2,"area":"agents"},{"id":"2511.04707","title":"Jailbreaking in the Haystack","created":"2025-11-05","cited_by_count":2,"area":"agents"},{"id":"2511.06396","title":"Efficient LLM Safety Evaluation through Multi-Agent Debate","created":"2025-11-09","cited_by_count":2,"area":"agents"},{"id":"2602.13234","title":"Stay in Character, Stay Safe: Dual-Cycle Adversarial Self-Evolution for Safety Role-Playing Agents","created":"2026-01-29","cited_by_count":2,"area":"agents"},{"id":"2604.04060","title":"CoopGuard: Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Round Attacks","created":"2026-04-05","cited_by_count":2,"area":"agents"},{"id":"2604.22871","title":"AutoRISE: Agent-Driven Strategy Evolution for Red-Teaming Large Language Models","created":"2026-04-23","cited_by_count":2,"area":"agents"},{"id":"2605.11891","title":"Proteus: A Self-Evolving Red Team for Agent Skill Ecosystems","created":"2026-05-12","cited_by_count":2,"area":"agents"},{"id":"2606.18356","title":"SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Using LLM Agents","created":"2026-06-16","cited_by_count":2,"area":"agents"},{"id":"2606.20470","title":"Analyzing Defensive Misdirection Against Model-Guided Automated Attacks on Agentic AI Systems","created":"2026-06-18","cited_by_count":2,"area":"agents"},{"id":"2606.31227","title":"Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming","created":"2026-06-30","cited_by_count":2,"area":"agents"}],"next_cursor":"100"}