{"total":71,"rows":[{"id":"2409.11295","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","created":"2024-09-17","cited_by_count":150,"area":"agents"},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2405.05175","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","created":"2024-05-08","cited_by_count":94,"area":"agents"},{"id":"2403.08715","title":"SOTOPIA-$\\pi$: Interactive Learning of Socially Intelligent Language Agents","created":"2024-03-13","cited_by_count":93,"area":"agents"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2504.11281","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","created":"2025-04-15","cited_by_count":59,"area":"agents"},{"id":"2410.17520","title":"MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Control","created":"2024-10-23","cited_by_count":51,"area":"agents"},{"id":"2502.01822","title":"Firewalls to Secure Dynamic LLM Agentic Networks","created":"2025-02-03","cited_by_count":36,"area":"agents"},{"id":"2509.17488","title":"Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agents","created":"2025-09-22","cited_by_count":36,"area":"agents"},{"id":"2510.15186","title":"MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation","created":"2025-10-16","cited_by_count":29,"area":"agents"},{"id":"2502.18509","title":"Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents","created":"2025-02-22","cited_by_count":26,"area":"agents"},{"id":"2508.10880","title":"Searching for Privacy Risks in LLM Agents via Simulation","created":"2025-08-14","cited_by_count":22,"area":"agents"},{"id":"2509.14284","title":"The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration","created":"2025-09-16","cited_by_count":20,"area":"agents"},{"id":"2511.05359","title":"ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations","created":"2025-11-07","cited_by_count":16,"area":"agents"},{"id":"2411.01344","title":"Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent","created":"2024-11-02","cited_by_count":14,"area":"agents"},{"id":"2604.21308","title":"CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents","created":"2026-04-23","cited_by_count":14,"area":"agents"},{"id":"2606.24535","title":"Governed Shared Memory for Multi-Agent LLM Systems","created":"2026-06-23","cited_by_count":13,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2512.08417","title":"Attention is All You Need to Defend Against Indirect Prompt Injection Attacks in LLMs","created":"2025-12-09","cited_by_count":10,"area":"agents"},{"id":"2505.12402","title":"Automated Profile Inference with Language Model Agents","created":"2025-05-18","cited_by_count":9,"area":"agents"},{"id":"2602.13840","title":"PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training","created":"2026-02-14","cited_by_count":7,"area":"agents"},{"id":"2603.02983","title":"Contextualized Privacy Defense for LLM Agents","created":"2026-03-03","cited_by_count":7,"area":"agents"},{"id":"2604.01487","title":"AgentSocialBench: Evaluating Privacy Risks in Human-Centered Agentic Social Networks","created":"2026-04-01","cited_by_count":7,"area":"agents"},{"id":"2605.09823","title":"CalBench: Evaluating Coordination-Privacy Trade-offs in Multi-Agent LLMs","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2606.28061","title":"ToolPrivacyBench: Benchmarking Purpose-Bound Privacy in Tool-Using LLM Agents","created":"2026-06-26","cited_by_count":7,"area":"agents"},{"id":"2506.20737","title":"MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation","created":"2025-06-25","cited_by_count":6,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2606.00152","title":"PrivacyPeek: Auditing What LLM-Based Agents Acquire, Not Just What They Say","created":"2026-05-29","cited_by_count":6,"area":"agents"},{"id":"2605.23989","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2410.20140","title":"MAD-Sherlock: Multi-Agent Debate for Visual Misinformation Detection","created":"2024-10-26","cited_by_count":4,"area":"agents"},{"id":"2512.05065","title":"Personalizing Agent Privacy Decisions via Logical Entailment","created":"2025-12-04","cited_by_count":4,"area":"agents"},{"id":"2603.18382","title":"From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents","created":"2026-03-19","cited_by_count":4,"area":"agents"},{"id":"2605.19127","title":"POLAR-Bench: A Diagnostic Benchmark for Privacy-Utility Trade-offs in LLM Agents","created":"2026-05-18","cited_by_count":4,"area":"agents"},{"id":"2606.10062","title":"Deployment-Time Memorization in Foundation-Model Agents","created":"2026-06-08","cited_by_count":4,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2605.02307","title":"SOTOPIA-TOM: Evaluating Privacy and Information Management in Multi-Agent Interaction with Theory of Mind","created":"2026-05-04","cited_by_count":3,"area":"agents"},{"id":"2605.08647","title":"AgentCollabBench: Diagnosing When Good Agents Make Bad Collaborators","created":"2026-05-09","cited_by_count":3,"area":"agents"},{"id":"2606.23189","title":"Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2606.23217","title":"MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2402.06922","title":"Whispers in the Machine: Confidentiality in Agentic Systems","created":"2024-02-10","cited_by_count":2,"area":"agents"},{"id":"2601.08235","title":"MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agents","created":"2026-01-13","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.21710","title":"PrivacyAlign: Contextual Privacy Alignment for LLM Agents","created":"2026-06-19","cited_by_count":2,"area":"agents"},{"id":"2607.05318","title":"PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems","created":"2026-07-06","cited_by_count":2,"area":"agents"},{"id":"2601.14660","title":"NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents","created":"2026-01-21","cited_by_count":1,"area":"agents"},{"id":"2604.11666","title":"Playing Along: Learning a Double-Agent Defender for Belief Steering via Theory of Mind","created":"2026-04-13","cited_by_count":1,"area":"agents"},{"id":"2605.16630","title":"PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems","created":"2026-05-15","cited_by_count":1,"area":"agents"},{"id":"2608.24957","title":"ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposure","created":"2026-08-25","cited_by_count":1,"area":"agents"},{"id":"2609.22200","title":"PII-TRACE: A Benchmark for Context-Aware PII Detection in Multi-Turn LLM Conversations","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2609.26076","title":"Selection-Invariant Communication Compilers for Privacy-Aware Multi-Agent LLM Workflows","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2604.16521","title":"CAMP: Cumulative Agentic Masking and Pruning for Privacy Protection in Multi-Turn LLM Conversations","created":"2026-04-16","cited_by_count":0,"area":"agents"},{"id":"2606.12341","title":"OCELOT: Inference-Leakage Budgets for Privacy-Preserving LLM Agents","created":"2026-06-10","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2608.02613","title":"MemArena: An Ego-Centric Benchmark for On-Device Agentic Personal Memory Assistants at Scale","created":"2026-05-20","cited_by_count":0,"area":"agents"},{"id":"2608.03130","title":"DP-MemView: A Memory Interface for Attribute-Level Transcript Privacy in Long-Term LLM Agents","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.20658","title":"The Claws in Plain Sight: Unauthorized Context Disclosure through LLM Agent Tool Calls","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.21209","title":"Personalized Privacy Control in LLMs via Attention Head Intervention","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.27348","title":"INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2608.29028","title":"Facts Without Rules: Boundary Metadata Collapse in Multi-Agent LLM Handoffs","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2609.03815","title":"Inferring Hidden User Models from the Behavior of Personalized LLM Agents","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.14003","title":"Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.17817","title":"Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.33017","title":"Trust and Task Completion in the World of Consumer AI Agents","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.35937","title":"PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.39065","title":"Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.16039","title":"When Agents Talk, Secrets Travel: Topology-Driven Leakage and Recipient-Conditioned Sanitization in Multi-Agent LLM Systems","created":"2026-10-12","cited_by_count":0,"area":"agents"},{"id":"2610.18007","title":"Cost-Efficient Privacy Enforcement for Email-Generating LLM Agents under Strategic Information Requests","created":"2026-10-13","cited_by_count":0,"area":"agents"},{"id":"2610.18157","title":"Fan Out or Relay? Ownership-Aware Routing for LLM Agents Querying Siloed Tables","created":"2026-10-13","cited_by_count":0,"area":"agents"},{"id":"2610.19158","title":"AgentCIScope: Grounded Contextual Integrity Evaluation for LLM Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}