{"total":21,"rows":[{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2509.25885","title":"SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents","created":"2025-09-30","cited_by_count":17,"area":"agents"},{"id":"2603.15714","title":"How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2505.21499","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","created":"2025-05-27","cited_by_count":10,"area":"agents"},{"id":"2504.03759","title":"Emerging Cyber Attack Risks of Medical AI Agents","created":"2025-04-02","cited_by_count":8,"area":"agents"},{"id":"2510.07709","title":"Multimodal Safety Evaluation in Generative Agent Social Simulations","created":"2025-10-09","cited_by_count":6,"area":"agents"},{"id":"2601.12822","title":"MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction","created":"2026-01-19","cited_by_count":5,"area":"agents"},{"id":"2506.22557","title":"MetaCipher: A Time-Persistent and Universal Multi-Agent Framework for Cipher-Based Jailbreak Attacks for LLMs","created":"2025-06-27","cited_by_count":4,"area":"agents"},{"id":"2511.07315","title":"JPRO: Automated Multimodal Jailbreaking via Multi-Agent Collaboration Framework","created":"2025-11-10","cited_by_count":4,"area":"agents"},{"id":"2603.20198","title":"Visual Exclusivity Attacks: Automatic Multimodal Red Teaming via Agentic Planning","created":"2026-02-05","cited_by_count":4,"area":"agents"},{"id":"2602.21447","title":"Adversarial Intent is a Latent Variable: Stateful Trust Inference for Securing Multimodal Agentic RAG","created":"2026-02-24","cited_by_count":2,"area":"agents"},{"id":"2602.07379","title":"Aegis: Towards Governance, Integrity, and Security of AI Voice Agents","created":"2026-02-07","cited_by_count":1,"area":"agents"},{"id":"2607.08147","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","created":"2026-07-09","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2606.07595","title":"VisualLeakBench: Reproducible Action-Boundary Propagation Failures in Vision-Language Agents","created":"2026-05-29","cited_by_count":0,"area":"agents"}],"next_cursor":null}