{"total":32,"rows":[{"id":"2407.12784","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","created":"2024-07-17","cited_by_count":429,"area":"agents"},{"id":"2503.18666","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","created":"2025-03-24","cited_by_count":223,"area":"agents"},{"id":"2503.03704","title":"Memory Injection Attacks on LLM Agents via Query-Only Interaction","created":"2025-03-05","cited_by_count":144,"area":"agents"},{"id":"2510.02373","title":"A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory","created":"2025-09-29","cited_by_count":67,"area":"agents"},{"id":"2605.02240","title":"PhysicianBench: Evaluating LLM Agents in Real-World EHR Environments","created":"2026-05-04","cited_by_count":21,"area":"agents"},{"id":"2410.17657","title":"ReflecTool: Towards Reflection-Aware Tool-Augmented Clinical Agents","created":"2024-10-23","cited_by_count":20,"area":"agents"},{"id":"2603.05344","title":"Building Effective AI Coding Agents for the Terminal: Scaffolding, Harness, Context Engineering, and Lessons Learned","created":"2026-03-05","cited_by_count":18,"area":"agents"},{"id":"2506.15253","title":"RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environments","created":"2025-06-18","cited_by_count":17,"area":"agents"},{"id":"2601.04566","title":"BackdoorAgent: A Unified Framework for Backdoor Attacks on LLM-based Agents","created":"2026-01-08","cited_by_count":16,"area":"agents"},{"id":"2605.18930","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","created":"2026-05-18","cited_by_count":14,"area":"agents"},{"id":"2509.23614","title":"PSG-Agent: Personality-Aware Safety Guardrail for LLM-based Agents","created":"2025-09-28","cited_by_count":12,"area":"agents"},{"id":"2601.12449","title":"AgenTRIM: Tool Risk Mitigation for Agentic AI","created":"2026-01-18","cited_by_count":11,"area":"agents"},{"id":"2603.05860","title":"Evolving Medical Imaging Agents via Experience-driven Self-skill Discovery","created":"2026-03-06","cited_by_count":11,"area":"agents"},{"id":"2604.01350","title":"No Attacker Needed: Unintentional Cross-User Contamination in Shared-State LLM Agents","created":"2026-04-01","cited_by_count":6,"area":"agents"},{"id":"2604.14475","title":"Evo-MedAgent: Beyond One-Shot Diagnosis with Agents That Remember, Reflect, and Improve","created":"2026-04-15","cited_by_count":6,"area":"agents"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2606.01961","title":"AutoMedBench: Towards Medical AutoResearch with Agentic AI Models","created":"2026-06-01","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2606.18203","title":"RubricsTree: Scalable and Evolving Open-Ended Evaluation of Personal Health Agents across Health Memory and Medical Skills","created":"2026-06-16","cited_by_count":4,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2606.22673","title":"AgentLens: Interpretable Safety Steering via Mechanistic Subspaces for Multi-Turn Coding Agent","created":"2026-06-21","cited_by_count":3,"area":"agents"},{"id":"2505.23055","title":"CDR-Agent: Intelligent Selection and Execution of Clinical Decision Rules Using Large Language Model Agents","created":"2025-05-29","cited_by_count":2,"area":"agents"},{"id":"2507.10281","title":"Toward Real-World Table Agents: Capabilities, Workflows, and Design Principles for LLM-based Table Intelligence","created":"2025-07-14","cited_by_count":2,"area":"agents"},{"id":"2606.12737","title":"PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections","created":"2026-06-10","cited_by_count":2,"area":"agents"},{"id":"2607.23444","title":"Isolated but Exposed: Persistence-Based Memory Extraction Attack on LLM Agents","created":"2026-07-26","cited_by_count":2,"area":"agents"},{"id":"2602.04813","title":"Agentic AI in Healthcare & Medicine: A Seven-Dimensional Taxonomy for Empirical Evaluation of LLM-based Agents","created":"2026-02-04","cited_by_count":1,"area":"agents"},{"id":"2601.05257","title":"KP-Agent: Keyword Pruning in Sponsored Search Advertising via LLM-Powered Contextual Bandits","created":"2025-10-20","cited_by_count":0,"area":"agents"},{"id":"2602.19502","title":"Human-Guided Agentic AI for Multimodal Clinical Prediction: Lessons from the AgentDS Healthcare Benchmark","created":"2026-02-23","cited_by_count":0,"area":"agents"},{"id":"2607.25489","title":"Agentic AI in medicine: architectures, applications, evaluation, and challenges for clinical translation","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2607.26155","title":"ClinLens: Towards Long-Horizon Coding Agents for Longitudinal Multimodal Clinical Data Science","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2609.15011","title":"Semantic-TVM: Structure-Preserving Trustworthy Virtual Memory for Memory-Augmented and Tool-Using Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}