{"total":24,"rows":[{"id":"2407.12784","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","created":"2024-07-17","cited_by_count":429,"area":"agents"},{"id":"2410.02644","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","created":"2024-10-03","cited_by_count":369,"area":"agents"},{"id":"2503.18666","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","created":"2025-03-24","cited_by_count":223,"area":"agents"},{"id":"2503.03704","title":"Memory Injection Attacks on LLM Agents via Query-Only Interaction","created":"2025-03-05","cited_by_count":144,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2502.13172","title":"Unveiling Privacy Risks in LLM Agent Memory","created":"2025-02-17","cited_by_count":101,"area":"agents"},{"id":"2505.16067","title":"How Memory Management Impacts LLM Agents: An Empirical Study of Experience-Following Behavior","created":"2025-05-21","cited_by_count":101,"area":"agents"},{"id":"2412.16682","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","created":"2024-12-21","cited_by_count":99,"area":"agents"},{"id":"2401.00812","title":"If LLM Is the Wizard, Then Code Is the Wand: A Survey on How Code Empowers Large Language Models to Serve as Intelligent Agents","created":"2024-01-01","cited_by_count":79,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2510.04550","title":"TRAJECT-Bench:A Trajectory-Aware Benchmark for Evaluating Agentic Tool Use","created":"2025-10-06","cited_by_count":51,"area":"agents"},{"id":"2406.01587","title":"PlanAgent: A Multi-modal Large Language Agent for Closed-loop Vehicle Motion Planning","created":"2024-06-03","cited_by_count":38,"area":"agents"},{"id":"2504.18875","title":"Generative to Agentic AI: Survey, Conceptualization, and Challenges","created":"2025-04-26","cited_by_count":33,"area":"agents"},{"id":"2401.03630","title":"Why Solving Multi-agent Path Finding with Large Language Model has not Succeeded Yet","created":"2024-01-08","cited_by_count":22,"area":"agents"},{"id":"2406.11132","title":"RePrompt: Planning by Automatic Prompt Engineering for Large Language Models Agents","created":"2024-06-17","cited_by_count":16,"area":"agents"},{"id":"2601.04566","title":"BackdoorAgent: A Unified Framework for Backdoor Attacks on LLM-based Agents","created":"2026-01-08","cited_by_count":16,"area":"agents"},{"id":"2601.12560","title":"Agentic Artificial Intelligence (AI): Architectures, Taxonomies, and Evaluation of Large Language Model Agents","created":"2026-01-18","cited_by_count":14,"area":"agents"},{"id":"2605.18930","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","created":"2026-05-18","cited_by_count":14,"area":"agents"},{"id":"2405.17009","title":"Position: Foundation Agents as the Paradigm Shift for Decision Making","created":"2024-05-27","cited_by_count":9,"area":"agents"},{"id":"2604.09747","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","created":"2026-04-10","cited_by_count":5,"area":"agents"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}