{"total":137,"rows":[{"id":"2410.09024","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","created":"2024-10-11","cited_by_count":437,"area":"agents"},{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2406.13352","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","created":"2024-06-19","cited_by_count":145,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2411.07781","title":"RedCode: Risky Code Execution and Generation Benchmark for Code Agents","created":"2024-11-12","cited_by_count":90,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2410.01606","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","created":"2024-10-02","cited_by_count":45,"area":"agents"},{"id":"2503.04392","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","created":"2025-03-06","cited_by_count":38,"area":"agents"},{"id":"2510.04885","title":"RL Is a Hammer and LLMs Are Nails: A Simple Reinforcement Learning Recipe for Strong Prompt Injection","created":"2025-10-06","cited_by_count":36,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2503.08669","title":"SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints","created":"2025-03-11","cited_by_count":23,"area":"agents"},{"id":"2511.20703","title":"PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach","created":"2025-11-24","cited_by_count":22,"area":"agents"},{"id":"2603.15714","title":"How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2510.03204","title":"FocusAgent: Simple Yet Effective Ways of Trimming the Large Context of Web Agents","created":"2025-10-03","cited_by_count":16,"area":"agents"},{"id":"2512.04864","title":"Are Your Agents Upward Deceivers?","created":"2025-12-04","cited_by_count":16,"area":"agents"},{"id":"2604.05485","title":"Auditable Agents","created":"2026-04-07","cited_by_count":15,"area":"agents"},{"id":"2406.11978","title":"Dialogue Action Tokens: Steering Language Models in Goal-Directed Dialogue with a Multi-Turn Planner","created":"2024-06-17","cited_by_count":13,"area":"agents"},{"id":"2506.00781","title":"CoP: Agentic Red-teaming for Large Language Models using Composition of Principles","created":"2025-06-01","cited_by_count":13,"area":"agents"},{"id":"2511.21990","title":"A Safety and Security Framework for Real-World Agentic Systems","created":"2025-11-27","cited_by_count":13,"area":"agents"},{"id":"2605.18583","title":"Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks","created":"2026-05-18","cited_by_count":13,"area":"agents"},{"id":"2606.18829","title":"GateMem: Benchmarking Memory Governance in Multi-Principal Shared-Memory Agents","created":"2026-06-17","cited_by_count":13,"area":"agents"},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2604.15415","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","created":"2026-04-16","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2508.14031","title":"Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigation","created":"2025-08-19","cited_by_count":9,"area":"agents"},{"id":"2504.01278","title":"Strategize Globally, Adapt Locally: A Multi-Turn Red Teaming Agent with Dual-Level Learning","created":"2025-04-02","cited_by_count":8,"area":"agents"},{"id":"2510.22620","title":"Breaking Agent Backbones: Evaluating the Security of Backbone LLMs in AI Agents","created":"2025-10-26","cited_by_count":8,"area":"agents"},{"id":"2603.18096","title":"A Trace-Based Assurance Framework for Agentic AI Orchestration: Contracts, Testing, and Governance","created":"2026-03-18","cited_by_count":8,"area":"agents"},{"id":"2605.11882","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","created":"2026-05-12","cited_by_count":8,"area":"agents"},{"id":"2606.22528","title":"Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2506.11083","title":"RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates","created":"2025-06-04","cited_by_count":7,"area":"agents"},{"id":"2511.16709","title":"AutoBackdoor: Automating Backdoor Attacks via LLM Agents","created":"2025-11-20","cited_by_count":7,"area":"agents"},{"id":"2605.11514","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2410.10871","title":"Applying Refusal-Vector Ablation to Llama 3.1 70B Agents","created":"2024-10-08","cited_by_count":6,"area":"agents"},{"id":"2603.16733","title":"IQuest-Coder-V1 Technical Report","created":"2026-03-17","cited_by_count":6,"area":"agents"},{"id":"2606.01317","title":"SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces","created":"2026-05-31","cited_by_count":6,"area":"agents"},{"id":"2606.05805","title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents","created":"2026-06-04","cited_by_count":6,"area":"agents"},{"id":"2601.13518","title":"AgenticRed: Evolving Agentic Systems for Red-Teaming","created":"2026-01-20","cited_by_count":5,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2604.20911","title":"Omission Constraints Decay While Commission Constraints Persist in Long-Context LLM Agents","created":"2026-04-22","cited_by_count":5,"area":"agents"},{"id":"2605.10779","title":"LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments","created":"2026-05-11","cited_by_count":5,"area":"agents"},{"id":"2605.23989","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2606.14154","title":"SkillMutator: Benchmarking and Defending Language-and-Code Cross-modal Attacks on LLM Agent Skills","created":"2026-06-12","cited_by_count":5,"area":"agents"},{"id":"2410.08776","title":"FATS: A Prompt Injection Attack Utilizing Feign Security Agents with Deceptive Few-shots Learning","created":"2024-10-11","cited_by_count":4,"area":"agents"},{"id":"2506.22557","title":"MetaCipher: A Time-Persistent and Universal Multi-Agent Framework for Cipher-Based Jailbreak Attacks for LLMs","created":"2025-06-27","cited_by_count":4,"area":"agents"},{"id":"2508.03864","title":"Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety","created":"2025-08-05","cited_by_count":4,"area":"agents"},{"id":"2509.23694","title":"SafeSearch: Automated Red-Teaming of LLM-Based Search Agents","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2509.25271","title":"RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2509.26495","title":"OffTopicEval: When Large Language Models Enter the Wrong Chat, Almost Always!","created":"2025-09-30","cited_by_count":4,"area":"agents"},{"id":"2511.07315","title":"JPRO: Automated Multimodal Jailbreaking via Multi-Agent Collaboration Framework","created":"2025-11-10","cited_by_count":4,"area":"agents"},{"id":"2603.20198","title":"Visual Exclusivity Attacks: Automatic Multimodal Red Teaming via Agentic Planning","created":"2026-02-05","cited_by_count":4,"area":"agents"},{"id":"2510.05484","title":"Evaluating LLM Safety Across Child Development Stages: A Simulated Agent Approach","created":"2025-10-07","cited_by_count":3,"area":"agents"},{"id":"2602.07652","title":"Agent-Fence: Mapping Security Vulnerabilities Across Deep Research Agents","created":"2026-02-07","cited_by_count":3,"area":"agents"},{"id":"2602.09947","title":"Trustworthy Agentic AI Requires Deterministic Architectural Boundaries","created":"2026-02-10","cited_by_count":3,"area":"agents"},{"id":"2602.16943","title":"Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents","created":"2026-02-18","cited_by_count":3,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2605.12105","title":"Autonomy and Agency in Agentic AI: Architectural Tactics for Regulated Contexts","created":"2026-05-12","cited_by_count":3,"area":"agents"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2505.15738","title":"Checkpoint-GCG: Auditing and Attacking Fine-Tuning-Based Prompt Injection Defenses","created":"2025-05-21","cited_by_count":2,"area":"agents"},{"id":"2506.04255","title":"HASHIRU: Hierarchical Agent System for Hybrid Intelligent Resource Utilization","created":"2025-06-01","cited_by_count":2,"area":"agents"},{"id":"2507.02986","title":"GAF-Guard: An Agentic Framework for Risk Management and Governance in Large Language Models","created":"2025-07-01","cited_by_count":2,"area":"agents"},{"id":"2507.21146","title":"Towards Unifying Quantitative Security Benchmarking for Multi Agent Systems","created":"2025-07-23","cited_by_count":2,"area":"agents"},{"id":"2511.04707","title":"Jailbreaking in the Haystack","created":"2025-11-05","cited_by_count":2,"area":"agents"},{"id":"2512.20293","title":"AprielGuard","created":"2025-12-23","cited_by_count":2,"area":"agents"},{"id":"2602.16346","title":"Helpful to a Fault: Measuring Illicit Assistance in Multi-Turn, Multilingual LLM Agents","created":"2026-02-18","cited_by_count":2,"area":"agents"},{"id":"2603.25056","title":"The System Prompt Is the Attack Surface: How LLM Agent Configuration Shapes Security and Creates Exploitable Vulnerabilities","created":"2026-03-26","cited_by_count":2,"area":"agents"},{"id":"2604.22871","title":"AutoRISE: Agent-Driven Strategy Evolution for Red-Teaming Large Language Models","created":"2026-04-23","cited_by_count":2,"area":"agents"},{"id":"2605.11047","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","created":"2026-05-11","cited_by_count":2,"area":"agents"},{"id":"2606.18356","title":"SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Using LLM Agents","created":"2026-06-16","cited_by_count":2,"area":"agents"},{"id":"2606.20408","title":"NRT-Bench: Benchmarking Multi-Turn Red-Teaming of LLM Operator Agents in Safety-Critical Control Rooms","created":"2026-06-18","cited_by_count":2,"area":"agents"},{"id":"2606.20470","title":"Analyzing Defensive Misdirection Against Model-Guided Automated Attacks on Agentic AI Systems","created":"2026-06-18","cited_by_count":2,"area":"agents"},{"id":"2607.18063","title":"Adaptive Adversaries: A Multi-Turn, Multi-LLM Benchmark for LLM Agent Security","created":"2026-07-20","cited_by_count":2,"area":"agents"},{"id":"2608.01759","title":"Benign Alone, Harmful Together: Exploiting Experience Composition in Self-Evolving LLM Agents","created":"2026-08-03","cited_by_count":2,"area":"agents"},{"id":"2610.02267","title":"Fast Models, Slow Evidence: A Paired and Self-Audited Evaluation of System-1 Decision Models for LLM Agent Harnesses","created":"2026-10-01","cited_by_count":2,"area":"agents"},{"id":"2506.13774","title":"Personalized Constitutionally-Aligned Agentic Superego: Secure AI Behavior Aligned to Diverse Human Values","created":"2025-06-08","cited_by_count":1,"area":"agents"},{"id":"2510.14207","title":"Echoes of Human Malice in Agents: Benchmarking LLMs for Multi-Turn Online Harassment Attacks","created":"2025-10-16","cited_by_count":1,"area":"agents"},{"id":"2510.17431","title":"Agentic Reinforcement Learning for Search Misaligns Instruction-Tuning","created":"2025-10-20","cited_by_count":1,"area":"agents"},{"id":"2510.18131","title":"BlueCodeAgent: A Blue Teaming Agent Enabled by Automated Red Teaming for CodeGen AI","created":"2025-10-20","cited_by_count":1,"area":"agents"},{"id":"2512.19016","title":"DREAM: Dynamic Red-teaming across Environments for AI Models","created":"2025-12-22","cited_by_count":1,"area":"agents"},{"id":"2601.08196","title":"Evaluating Implicit Regulatory Compliance in LLM Tool Invocation via Logic-Guided Synthesis","created":"2026-01-13","cited_by_count":1,"area":"agents"},{"id":"2602.04197","title":"From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agents","created":"2026-02-04","cited_by_count":1,"area":"agents"},{"id":"2602.07391","title":"NAAMSE: Framework for Evolutionary Security Evaluation of Agents","created":"2026-02-07","cited_by_count":1,"area":"agents"},{"id":"2603.04904","title":"Alignment Backfire: Language-Dependent Reversal of Safety Interventions Across 16 Languages in LLM Multi-Agent Systems","created":"2026-03-05","cited_by_count":1,"area":"agents"},{"id":"2604.00005","title":"How Emotion Shapes the Behavior of LLMs and Agents: A Mechanistic Study","created":"2026-03-09","cited_by_count":1,"area":"agents"},{"id":"2604.16870","title":"Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives","created":"2026-04-18","cited_by_count":1,"area":"agents"},{"id":"2605.04019","title":"Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours","created":"2026-05-05","cited_by_count":1,"area":"agents"},{"id":"2605.09027","title":"GAMBIT: A Three-Mode Benchmark for Adversarial Robustness in Multi-Agent LLM Collectives","created":"2026-05-09","cited_by_count":1,"area":"agents"},{"id":"2605.20351","title":"Refusal Evaluation in Coding LLMs and Code Agents: A Systematic Review of Thirteen Malicious-Code Prompt Corpora (2023-2025)","created":"2026-05-19","cited_by_count":1,"area":"agents"},{"id":"2605.22842","title":"The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems","created":"2026-05-12","cited_by_count":1,"area":"agents"},{"id":"2605.28122","title":"SNARE: Adaptive Scenario Synthesis for Eliciting Overeager Behavior in Coding Agents","created":"2026-05-27","cited_by_count":1,"area":"agents"}],"next_cursor":"100"}