{"total":34,"rows":[{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2411.07781","title":"RedCode: Risky Code Execution and Generation Benchmark for Code Agents","created":"2024-11-12","cited_by_count":90,"area":"agents"},{"id":"2409.16165","title":"EnIGMA: Interactive Tools Substantially Assist LM Agents in Finding Security Vulnerabilities","created":"2024-09-24","cited_by_count":52,"area":"agents"},{"id":"2604.20779","title":"SWE-chat: Coding Agent Interactions From Real Users in the Wild","created":"2026-04-22","cited_by_count":43,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2508.00910","title":"Cyber-Zero: Training Cybersecurity Agents without Runtime","created":"2025-07-29","cited_by_count":22,"area":"agents"},{"id":"2508.18370","title":"Training Language Model Agents to Find Vulnerabilities with CTF-Dojo","created":"2025-08-25","cited_by_count":15,"area":"agents"},{"id":"2504.21205","title":"SecRepoBench: Benchmarking Code Agents for Secure Code Completion in Real-World Repositories","created":"2025-04-29","cited_by_count":14,"area":"agents"},{"id":"2603.11214","title":"Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios","created":"2026-03-11","cited_by_count":14,"area":"agents"},{"id":"2509.22097","title":"SecureVibeBench: Benchmarking Secure Vibe Coding of AI Agents via Reconstructing Vulnerability-Introducing Scenarios","created":"2025-09-26","cited_by_count":13,"area":"agents"},{"id":"2510.02609","title":"RedCodeAgent: Automatic Red-teaming Agent against Diverse Code Agents","created":"2025-10-02","cited_by_count":9,"area":"agents"},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2601.00477","title":"Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub","created":"2026-01-01","cited_by_count":7,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2506.07313","title":"SCGAgent: Recreating the Benefits of Reasoning Models for Secure Code Generation with Agentic Workflows","created":"2025-06-08","cited_by_count":4,"area":"agents"},{"id":"2604.18718","title":"Towards Optimal Agentic Architectures for Offensive Security Tasks","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2505.23634","title":"MCP Safety Training: Learning to Refuse Falsely Benign MCP Exploits using Improved Preference Alignment","created":"2025-05-29","cited_by_count":3,"area":"agents"},{"id":"2510.17862","title":"When \"Correct\" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?","created":"2025-10-15","cited_by_count":3,"area":"agents"},{"id":"2605.22643","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","created":"2026-05-21","cited_by_count":3,"area":"agents"},{"id":"2510.12200","title":"HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities","created":"2025-10-14","cited_by_count":2,"area":"agents"},{"id":"2511.20709","title":"DualGauge: Automated Joint Security-Functionality Benchmarking of Specification-Only Code Generation by LLMs and Coding Agents","created":"2025-11-24","cited_by_count":1,"area":"agents"},{"id":"2603.13384","title":"VulnAgent-R2: Evidence-Calibrated Multi-Agent Auditing for Repository-Level Vulnerability Detection","created":"2026-03-11","cited_by_count":1,"area":"agents"},{"id":"2605.04019","title":"Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours","created":"2026-05-05","cited_by_count":1,"area":"agents"},{"id":"2605.08382","title":"SecureForge: Finding and Preventing Vulnerabilities in LLM-Generated Code via Prompt Optimization","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.20351","title":"Refusal Evaluation in Coding LLMs and Code Agents: A Systematic Review of Thirteen Malicious-Code Prompt Corpora (2023-2025)","created":"2026-05-19","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.04317","title":"Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2606.25195","title":"SoK: AI Secure Code Generation: Progress, Pitfalls, and Paths Forward","created":"2026-06-23","cited_by_count":0,"area":"agents"},{"id":"2607.03968","title":"Refused in Chat, Written in Code: Workflow-Level Jailbreak Construction in IDE Coding Agents","created":"2026-07-04","cited_by_count":0,"area":"agents"},{"id":"2608.25457","title":"MACGen: Toward Functionally Correct and Secure Code Generation via Multi-Agent Collaboration","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2610.06514","title":"ANT: A Multi-Granularity Network Traffic Dataset and Benchmark for Agents Behavior Auditing","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.14766","title":"Last Secure Code Benchmark: Is the Code You Vibe Secure?","created":"2026-10-10","cited_by_count":0,"area":"agents"},{"id":"2610.17837","title":"ProtoArena: Can AI Agents Discover and Exploit Real-World Cross-Component Protocol Vulnerabilities?","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}