{"total":185,"rows":[{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2507.21504","title":"Evaluation and Benchmarking of LLM Agents: A Survey","created":"2025-07-29","cited_by_count":152,"area":"agents"},{"id":"2410.06703","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2412.13178","title":"SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents","created":"2024-12-17","cited_by_count":116,"area":"agents"},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2507.15219","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","created":"2025-07-21","cited_by_count":108,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2411.07781","title":"RedCode: Risky Code Execution and Generation Benchmark for Code Agents","created":"2024-11-12","cited_by_count":90,"area":"agents"},{"id":"2502.11448","title":"AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection","created":"2025-02-17","cited_by_count":89,"area":"agents"},{"id":"2503.23350","title":"A Survey of WebAgents: Towards Next-Generation AI Agents for Web Automation with Large Foundation Models","created":"2025-03-30","cited_by_count":87,"area":"agents"},{"id":"2502.11211","title":"A Survey of LLM-based Agents in Medicine: How far are we from Baymax?","created":"2025-02-16","cited_by_count":85,"area":"agents"},{"id":"2402.10753","title":"ToolSword: Unveiling Safety Issues of Large Language Models in Tool Learning Across Three Stages","created":"2024-02-16","cited_by_count":82,"area":"agents"},{"id":"2502.05174","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","created":"2025-02-07","cited_by_count":77,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2411.02305","title":"CRMArena: Understanding the Capacity of LLM Agents to Perform Professional CRM Tasks in Realistic Environments","created":"2024-11-04","cited_by_count":71,"area":"agents"},{"id":"2604.06132","title":"Claw-Eval: Towards Trustworthy Evaluation of Autonomous Agents","created":"2026-04-07","cited_by_count":64,"area":"agents"},{"id":"2410.17520","title":"MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Control","created":"2024-10-23","cited_by_count":51,"area":"agents"},{"id":"2509.18970","title":"LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directions","created":"2025-09-23","cited_by_count":50,"area":"agents"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2507.22358","title":"Magentic-UI: Towards Human-in-the-loop Agentic Systems","created":"2025-07-30","cited_by_count":43,"area":"agents"},{"id":"2604.02022","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","created":"2026-04-02","cited_by_count":36,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2604.04989","title":"SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement","created":"2026-04-05","cited_by_count":30,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2511.05269","title":"TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systems","created":"2025-11-07","cited_by_count":26,"area":"agents"},{"id":"2410.14569","title":"When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs","created":"2024-10-18","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2402.10196","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","created":"2024-02-15","cited_by_count":22,"area":"agents"},{"id":"2404.17833","title":"Testing and Understanding Erroneous Planning in LLM Agents through Synthesized User Inputs","created":"2024-04-27","cited_by_count":22,"area":"agents"},{"id":"2505.23020","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","created":"2025-05-29","cited_by_count":21,"area":"agents"},{"id":"2502.14529","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","created":"2025-02-20","cited_by_count":20,"area":"agents"},{"id":"2510.24411","title":"OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows","created":"2025-10-28","cited_by_count":19,"area":"agents"},{"id":"2508.02994","title":"When AIs Judge AIs: The Rise of Agent-as-a-Judge Evaluation for LLMs","created":"2025-08-05","cited_by_count":17,"area":"agents"},{"id":"2607.10059","title":"AgentAbstain: Do LLM Agents Know When Not to Act?","created":"2026-07-11","cited_by_count":17,"area":"agents"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2510.03285","title":"WAREX: Web Agent Reliability Evaluation on Existing Benchmarks","created":"2025-09-28","cited_by_count":15,"area":"agents"},{"id":"2602.06443","title":"TrajAD: Trajectory Anomaly Detection for Trustworthy LLM Agents","created":"2026-02-06","cited_by_count":15,"area":"agents"},{"id":"2604.05485","title":"Auditable Agents","created":"2026-04-07","cited_by_count":15,"area":"agents"},{"id":"2505.11368","title":"GuideBench: Benchmarking Domain-Oriented Guideline Following for LLM Agents","created":"2025-05-16","cited_by_count":14,"area":"agents"},{"id":"2512.01939","title":"An Empirical Study of Agent Developer Practices in AI Agent Frameworks","created":"2025-12-01","cited_by_count":14,"area":"agents"},{"id":"2502.15865","title":"Standard Benchmarks Fail -- Auditing LLM Agents in Finance Must Prioritize Risk","created":"2025-02-21","cited_by_count":13,"area":"agents"},{"id":"2604.28139","title":"Claw-Eval-Live: A Live Agent Benchmark for Evolving Real-World Workflows","created":"2026-04-30","cited_by_count":13,"area":"agents"},{"id":"2605.09163","title":"FORTIS: Benchmarking Over-Privilege in Agent Skills","created":"2026-05-09","cited_by_count":13,"area":"agents"},{"id":"2605.18583","title":"Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks","created":"2026-05-18","cited_by_count":13,"area":"agents"},{"id":"2606.15242","title":"Benign in Isolation, Harmful in Composition: Security Risks in Agent Skill Ecosystems","created":"2026-06-13","cited_by_count":13,"area":"agents"},{"id":"2604.10577","title":"The Blind Spot of Agent Safety: How Benign User Instructions Expose Critical Vulnerabilities in Computer-Use Agents","created":"2026-04-12","cited_by_count":12,"area":"agents"},{"id":"2604.15415","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","created":"2026-04-16","cited_by_count":11,"area":"agents"},{"id":"2407.11843","title":"Preemptive Detection and Correction of Misaligned Actions in LLM Agents","created":"2024-07-16","cited_by_count":10,"area":"agents"},{"id":"2607.02294","title":"Coding Agents Are Guessing: Measuring Action-Boundary Violations in Underspecified DevOps Instructions","created":"2026-07-02","cited_by_count":10,"area":"agents"},{"id":"2505.14289","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","created":"2025-05-20","cited_by_count":9,"area":"agents"},{"id":"2505.20824","title":"MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems","created":"2025-05-27","cited_by_count":9,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2510.02609","title":"RedCodeAgent: Automatic Red-teaming Agent against Diverse Code Agents","created":"2025-10-02","cited_by_count":9,"area":"agents"},{"id":"2511.18467","title":"Shadows in the Code: Exploring the Risks and Defenses of LLM-based Multi-Agent Software Development Systems","created":"2025-11-23","cited_by_count":9,"area":"agents"},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2604.13954","title":"HINTBench: Horizon-agent Intrinsic Non-attack Trajectory Benchmark","created":"2026-04-15","cited_by_count":9,"area":"agents"},{"id":"2608.05179","title":"Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap","created":"2026-06-29","cited_by_count":9,"area":"agents"},{"id":"2508.00935","title":"Measuring Harmfulness of Computer-Using Agents","created":"2025-07-31","cited_by_count":8,"area":"agents"},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2510.14319","title":"Metacognitive Self-Correction for Multi-Agent System via Prototype-Guided Next-Execution Reconstruction","created":"2025-10-16","cited_by_count":7,"area":"agents"},{"id":"2604.09155","title":"CORA: Conformal Risk-Controlled Agents for Safeguarded Mobile GUI Automation","created":"2026-04-10","cited_by_count":7,"area":"agents"},{"id":"2605.11770","title":"Behavioral Integrity Verification for AI Agent Skills","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2505.17735","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","created":"2025-05-23","cited_by_count":6,"area":"agents"},{"id":"2508.13465","title":"LM Agents May Fail to Act on Their Own Risk Knowledge","created":"2025-08-19","cited_by_count":6,"area":"agents"},{"id":"2511.21460","title":"MADRA: Multi-Agent Debate for Risk-Aware Embodied Planning","created":"2025-11-26","cited_by_count":6,"area":"agents"},{"id":"2603.22341","title":"T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search","created":"2026-03-21","cited_by_count":6,"area":"agents"},{"id":"2605.14859","title":"Do Coding Agents Understand Least-Privilege Authorization?","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2606.01317","title":"SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces","created":"2026-05-31","cited_by_count":6,"area":"agents"},{"id":"2606.13884","title":"Capability Minimization as a Safety Primitive: Risk-Aware Causal Gating for Least-Privilege LLM Agents","created":"2026-06-11","cited_by_count":6,"area":"agents"},{"id":"2609.00006","title":"Harness Engineering: Anatomy, Architecture, and Evolution of Coding Agents -- A Source-Code Study of Eleven Systems","created":"2026-07-15","cited_by_count":6,"area":"agents"},{"id":"2402.07744","title":"Towards Unified Alignment Between Agents, Humans, and Environment","created":"2024-02-12","cited_by_count":5,"area":"agents"},{"id":"2408.11021","title":"Athena: Safe Autonomous Agents with Verbal Contrastive Learning","created":"2024-08-20","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2606.30755","title":"Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens","created":"2026-06-29","cited_by_count":5,"area":"agents"},{"id":"2508.12412","title":"LumiMAS: A Comprehensive Framework for Real-Time Monitoring and Enhanced Observability in Multi-Agent Systems","created":"2025-08-17","cited_by_count":4,"area":"agents"},{"id":"2509.18661","title":"Agentic AutoSurvey: Let LLMs Survey LLMs","created":"2025-09-23","cited_by_count":4,"area":"agents"},{"id":"2603.10268","title":"SpecOps: A Fully Automated AI Agent Testing Framework in Real-World GUI Environments","created":"2026-03-10","cited_by_count":4,"area":"agents"},{"id":"2603.25747","title":"BeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional Environments","created":"2026-01-30","cited_by_count":4,"area":"agents"},{"id":"2604.00835","title":"Agentic Tool Use in Large Language Models","created":"2026-04-01","cited_by_count":4,"area":"agents"},{"id":"2605.04785","title":"AgentTrust: Runtime Safety Evaluation and Interception for AI Agent Tool Use","created":"2026-05-06","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2605.25707","title":"AgentHijack: Benchmarking Computer Use Agent Robustness to Common Environment Corruptions","created":"2026-05-25","cited_by_count":4,"area":"agents"},{"id":"2606.01166","title":"BraveGuard: From Open-World Threats to Safer Computer-Use Agents","created":"2026-05-31","cited_by_count":4,"area":"agents"},{"id":"2607.20982","title":"GuardianAgentBench: Where Agents Fail and How to Guard Them","created":"2026-07-23","cited_by_count":4,"area":"agents"},{"id":"2605.17169","title":"Responsible Agentic AI Requires Explicit Provenance","created":"2026-05-16","cited_by_count":3,"area":"agents"},{"id":"2606.02965","title":"Designing for Doubt: The Case for Informed Abstention in Autonomous Agents","created":"2026-06-01","cited_by_count":3,"area":"agents"},{"id":"2606.22673","title":"AgentLens: Interpretable Safety Steering via Mechanistic Subspaces for Multi-Turn Coding Agent","created":"2026-06-21","cited_by_count":3,"area":"agents"}],"next_cursor":"100"}