{"total":29,"rows":[{"id":"2506.02153","title":"Small Language Models are the Future of Agentic AI","created":"2025-06-02","cited_by_count":270,"area":"agents"},{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223,"area":"agents"},{"id":"2502.08586","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","created":"2025-02-12","cited_by_count":49,"area":"agents"},{"id":"2506.06299","title":"How malicious AI swarms can threaten democracy: The fusion of agentic AI and LLMs marks a new frontier in information warfare","created":"2025-05-18","cited_by_count":20,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2506.05739","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","created":"2025-06-06","cited_by_count":15,"area":"agents"},{"id":"2509.22040","title":"\"Your AI, My Shell\": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors","created":"2025-09-26","cited_by_count":15,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2510.18563","title":"The Trust Paradox in LLM-Based Multi-Agent Systems: When Collaboration Becomes a Security Vulnerability","created":"2025-10-21","cited_by_count":12,"area":"agents"},{"id":"2510.14008","title":"Stop Reducing Responsibility in LLM-Powered Multi-Agent Systems to Local Alignment","created":"2025-10-15","cited_by_count":7,"area":"agents"},{"id":"2512.02410","title":"Decentralized Multi-Agent System with Trust-Aware Communication","created":"2025-12-02","cited_by_count":7,"area":"agents"},{"id":"2510.05159","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","created":"2025-10-03","cited_by_count":6,"area":"agents"},{"id":"2509.18557","title":"LLMZ+: Contextual Prompt Whitelist Principles for Agentic LLMs","created":"2025-09-23","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2607.13718","title":"How Agents Ask for Permission: User Permissions for AI Agents, from Interfaces to Enforcement","created":"2026-07-15","cited_by_count":4,"area":"agents"},{"id":"2512.03097","title":"Many-to-One Adversarial Consensus: Exposing Multi-Agent Collusion Risks in AI-Based Healthcare","created":"2025-12-01","cited_by_count":3,"area":"agents"},{"id":"2601.22569","title":"Whispers of Wealth: Red-Teaming Google's Agent Payments Protocol via Prompt Injection","created":"2026-01-30","cited_by_count":3,"area":"agents"},{"id":"2602.01942","title":"Human Society-Inspired Approaches to Agentic AI Security: The 4C Framework","created":"2026-02-02","cited_by_count":2,"area":"agents"},{"id":"2605.08460","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2603.06394","title":"Talk Freely, Execute Strictly: Schema-Gated Agentic AI for Flexible and Reproducible Scientific Workflows","created":"2026-03-06","cited_by_count":1,"area":"agents"},{"id":"2603.17902","title":"Differential Privacy in Generative AI Agents: Analysis and Optimal Tradeoffs","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2602.00979","title":"GradingAttack: Exposing Security Vulnerabilities in LLM Based Educational Grading Agents","created":"2026-02-01","cited_by_count":0,"area":"agents"},{"id":"2604.01647","title":"Exploring Robust Multi-Agent Workflows for Environmental Data Management","created":"2026-04-02","cited_by_count":0,"area":"agents"},{"id":"2605.03213","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2608.10281","title":"From Prompt Injection to Web Exploitation: Revisiting Classic Vulnerabilities in LLM-Integrated Applications","created":"2026-08-10","cited_by_count":0,"area":"agents"},{"id":"2609.16098","title":"Universal Defenses for Tool-Integrated LLM Agents Against Adversarial Attacks","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.36879","title":"SKILLLITE: Evidence-Guided Malicious Skill Auditing with Compact LLMs","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.17418","title":"Why Agentic Workflows Fail: A Taxonomy Derived from Literature and Empirical Data","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}