{"total":64,"rows":[{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2502.11448","title":"AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection","created":"2025-02-17","cited_by_count":89,"area":"agents"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2502.11127","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","created":"2025-02-16","cited_by_count":59,"area":"agents"},{"id":"2408.02544","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","created":"2024-08-05","cited_by_count":56,"area":"mllm"},{"id":"2406.04428","title":"MoralBench: Moral Evaluation of LLMs","created":"2024-06-06","cited_by_count":50,"area":null},{"id":"2410.23252","title":"Evaluating Cultural and Social Awareness of LLM Web Agents","created":"2024-10-30","cited_by_count":45,"area":"agents"},{"id":"2505.24119","title":"The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It","created":"2025-05-30","cited_by_count":45,"area":"safety"},{"id":"2601.08012","title":"Towards Verifiably Safe Tool Use for LLM Agents","created":"2026-01-12","cited_by_count":36,"area":"agents"},{"id":"2502.20576","title":"OmniRouter: Budget and Performance Controllable Multi-LLM Routing","created":"2025-02-27","cited_by_count":35,"area":null},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2503.23434","title":"Towards Trustworthy GUI Agents: A Survey","created":"2025-03-30","cited_by_count":34,"area":"agents"},{"id":"2505.14590","title":"MCIP: Protecting MCP Safety via Model Contextual Integrity Protocol","created":"2025-05-20","cited_by_count":34,"area":null},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2508.11126","title":"AI Agentic Programming: A Survey of Techniques, Challenges, and Opportunities","created":"2025-08-15","cited_by_count":28,"area":"agents"},{"id":"2502.19145","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","created":"2025-02-26","cited_by_count":27,"area":null},{"id":"2410.22932","title":"Multi-Agent Large Language Models for Conversational Task-Solving","created":"2024-10-30","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2601.11369","title":"Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs","created":"2026-01-16","cited_by_count":20,"area":"agents"},{"id":"2507.16459","title":"Towards Enforcing Company Policy Adherence in Agentic Workflows","created":"2025-07-22","cited_by_count":18,"area":"agents"},{"id":"2601.07264","title":"The Confidence Dichotomy: Analyzing and Mitigating Miscalibration in Tool-Use Agents","created":"2026-01-12","cited_by_count":16,"area":"agents"},{"id":"2509.23994","title":"Policy-as-Prompt: Turning AI Governance Rules into Guardrails for AI Agents","created":"2025-09-28","cited_by_count":14,"area":"safety"},{"id":"2504.03255","title":"Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective","created":"2025-04-04","cited_by_count":13,"area":"agents"},{"id":"2509.01211","title":"Web Fraud Attacks Against LLM-Driven Multi-Agent Systems","created":"2025-09-01","cited_by_count":10,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2601.04795","title":"Defense Against Indirect Prompt Injection via Tool Result Parsing","created":"2026-01-08","cited_by_count":9,"area":"agents"},{"id":"2412.11656","title":"Private Yet Social: How LLM Chatbots Support and Challenge Eating Disorder Recovery","created":"2024-12-16","cited_by_count":8,"area":null},{"id":"2510.16219","title":"SentinelNet: Safeguarding Multi-Agent Collaboration Through Credit-Based Dynamic Threat Detection","created":"2025-10-17","cited_by_count":8,"area":"agents"},{"id":"2602.11749","title":"AIR: Improving Agent Safety through Incident Response","created":"2026-02-12","cited_by_count":8,"area":"agents"},{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2504.07461","title":"Achilles Heel of Distributed Multi-Agent Systems","created":"2025-04-10","cited_by_count":6,"area":"agents"},{"id":"2505.17735","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","created":"2025-05-23","cited_by_count":6,"area":"agents"},{"id":"2505.19260","title":"ALRPHFS: Adversarially Learned Risk Patterns with Hierarchical Fast \\& Slow Reasoning for Robust Agent Defense","created":"2025-05-25","cited_by_count":5,"area":"agents"},{"id":"2509.23871","title":"Taught Well Learned Ill: Towards Distillation-conditional Backdoor Attack","created":"2025-09-28","cited_by_count":5,"area":"distill"},{"id":"2501.02486","title":"LLMPC: Large Language Model Predictive Control","created":"2025-01-05","cited_by_count":4,"area":"lr"},{"id":"2505.23006","title":"A Practical Approach for Building Production-Grade Conversational Agents with Workflow Graphs","created":"2025-05-29","cited_by_count":4,"area":"agents"},{"id":"2508.12412","title":"LumiMAS: A Comprehensive Framework for Real-Time Monitoring and Enhanced Observability in Multi-Agent Systems","created":"2025-08-17","cited_by_count":4,"area":"agents"},{"id":"2603.10268","title":"SpecOps: A Fully Automated AI Agent Testing Framework in Real-World GUI Environments","created":"2026-03-10","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2608.14588","title":"The Hallucination Snowball: Modeling Error Propagation as State Transitions in Multi-Agent LLM Pipelines","created":"2026-06-22","cited_by_count":4,"area":"agents"},{"id":"2508.09815","title":"Extending the OWASP Multi-Agentic System Threat Modeling Guide: Insights from Multi-Agent Security Research","created":"2025-08-13","cited_by_count":3,"area":"agents"},{"id":"2512.16167","title":"Ev-Trust: An Evolutionarily Stable Trust Mechanism for Decentralized LLM-Based Multi-Agent Service Economies","created":"2025-12-18","cited_by_count":3,"area":"agents"},{"id":"2601.18827","title":"Automated structural testing of LLM-based agents: methods, framework, and case studies","created":"2026-01-25","cited_by_count":3,"area":"agents"},{"id":"2603.25063","title":"TopoPilot: Reliable Conversational Workflow Automation for Topological Data Analysis and Visualization","created":"2026-03-26","cited_by_count":3,"area":"agents"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2505.14226","title":"Phonetic Perturbations Reveal Tokenizer-Rooted Safety Gaps in LLMs","created":"2025-05-20","cited_by_count":2,"area":null},{"id":"2602.21447","title":"Adversarial Intent is a Latent Variable: Stateful Trust Inference for Securing Multimodal Agentic RAG","created":"2026-02-24","cited_by_count":2,"area":"agents"},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2601.12138","title":"DriveSafe: A Hierarchical Risk Taxonomy for Safety-Critical LLM-Based Driving Assistants","created":"2026-01-17","cited_by_count":1,"area":"driving"},{"id":"2603.01289","title":"Individual Turing Test: A Case Study of LLM-based Simulation Using Longitudinal Personal Data","created":"2026-03-01","cited_by_count":1,"area":"rag"},{"id":"2604.08059","title":"Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with a Proof-of-Concept Evaluation on Embodied Agents","created":"2026-04-09","cited_by_count":1,"area":null},{"id":"2606.18259","title":"Caring Without Feeling: Affective Dynamics as the Control Layer of Human-AI Agent Collaboration","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2412.11787","title":"A Method for Detecting Legal Article Competition for Korean Criminal Law Using a Case-augmented Mention Graph","created":"2024-12-16","cited_by_count":0,"area":null},{"id":"2604.20166","title":"Trust Stack for Mental Health AI: A Survey of Calibration across Human, Interaction, and AI Layers","created":"2026-04-22","cited_by_count":0,"area":null},{"id":"2606.16603","title":"VeriGraph: Towards Verifiable Data-Analytic Agents","created":"2026-06-15","cited_by_count":0,"area":"agents"},{"id":"2607.16199","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2608.21341","title":"Natural-Language Workflows Are Not Software Yet: Artifact-Driven Compilation for Reliable Agent Execution","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2609.03192","title":"Where Reliability Lives: Experimental Localisation of Behavioural Properties in an Agent System","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2610.02664","title":"A GHOST in Long-Horizon Agents: Governance Hazard from Overlooked Safety Constraints across Turns","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.14701","title":"Towards Merging-conditional Backdoor Unalignment against Large Language Models","created":"2026-10-10","cited_by_count":0,"area":"safety"}],"next_cursor":null}