{"total":54,"rows":[{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223,"area":"agents"},{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2403.03031","title":"Learning to Use Tools via Cooperative and Interactive Agents","created":"2024-03-05","cited_by_count":54,"area":"agents"},{"id":"2501.02506","title":"ToolHop: A Query-Driven Benchmark for Evaluating Large Language Models in Multi-Hop Tool Use","created":"2025-01-05","cited_by_count":50,"area":"agents"},{"id":"2412.10198","title":"From Allies to Adversaries: Manipulating LLM Tool-Calling through Adversarial Injection","created":"2024-12-13","cited_by_count":38,"area":"agents"},{"id":"2503.08669","title":"SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints","created":"2025-03-11","cited_by_count":23,"area":"agents"},{"id":"2505.23020","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","created":"2025-05-29","cited_by_count":21,"area":"agents"},{"id":"2508.08791","title":"Feedback-Driven Tool-Use Improvements in Large Language Models via Automated Build Environments","created":"2025-08-12","cited_by_count":19,"area":"agents"},{"id":"2507.15296","title":"Butterfly Effects in Toolchains: A Comprehensive Analysis of Failed Parameter Filling in LLM Tool-Agent Systems","created":"2025-07-21","cited_by_count":18,"area":"agents"},{"id":"2511.05359","title":"ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations","created":"2025-11-07","cited_by_count":16,"area":"agents"},{"id":"2603.22862","title":"The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration","created":"2026-03-24","cited_by_count":14,"area":"agents"},{"id":"2412.15495","title":"TL-Training: A Task-Feature-Based Framework for Training Large Language Models in Tool Use","created":"2024-12-20","cited_by_count":11,"area":"agents"},{"id":"2604.05432","title":"Your LLM Agent Can Leak Your Data: Data Exfiltration via Backdoored Tool Use","created":"2026-04-07","cited_by_count":10,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2406.12307","title":"Can Tool-augmented Large Language Models be Aware of Incomplete Conditions?","created":"2024-06-18","cited_by_count":8,"area":"agents"},{"id":"2602.19555","title":"SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime","created":"2026-02-23","cited_by_count":8,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2605.00314","title":"Semia: Auditing Agent Skills via Constraint-Guided Representation Synthesis","created":"2026-05-01","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2609.00006","title":"Harness Engineering: Anatomy, Architecture, and Evolution of Coding Agents -- A Source-Code Study of Eleven Systems","created":"2026-07-15","cited_by_count":6,"area":"agents"},{"id":"2504.06766","title":"FamilyTool: A Multi-hop Personalized Tool Use Benchmark","created":"2025-04-09","cited_by_count":5,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2407.03007","title":"What Affects the Stability of Tool Learning? An Empirical Study on the Robustness of Tool Learning Frameworks","created":"2024-07-03","cited_by_count":4,"area":"agents"},{"id":"2512.22211","title":"With Great Capabilities Come Great Responsibilities: Introducing the Agentic Risk & Capability Framework for Governing Agentic AI Systems","created":"2025-12-22","cited_by_count":4,"area":"agents"},{"id":"2604.00835","title":"Agentic Tool Use in Large Language Models","created":"2026-04-01","cited_by_count":4,"area":"agents"},{"id":"2512.07665","title":"Reliable agent engineering should integrate machine-compatible organizational principles","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2606.02240","title":"AgentRedBench: Dynamic Redteaming and Integration-Aware Defense for LLM Agents over SaaS Integrations","created":"2026-06-01","cited_by_count":2,"area":"agents"},{"id":"2608.12273","title":"Convergent Detour Hijacking: Task-Preserving Resource Amplification in Skill-Based LLM Agents","created":"2026-08-12","cited_by_count":2,"area":"agents"},{"id":"2608.22868","title":"AgentFlow: A Flow-Centric Policy Language and Framework for Securing LLM Agent Systems","created":"2026-08-24","cited_by_count":2,"area":"agents"},{"id":"2503.04188","title":"Measuring temporal effects of agent knowledge by date-controlled tool use","created":"2025-03-06","cited_by_count":1,"area":"agents"},{"id":"2512.00332","title":"Assertion-Conditioned Compliance: A Provenance-Aware Vulnerability in Multi-Turn Tool-Calling Agents","created":"2025-11-29","cited_by_count":1,"area":"agents"},{"id":"2601.08196","title":"Evaluating Implicit Regulatory Compliance in LLM Tool Invocation via Logic-Guided Synthesis","created":"2026-01-13","cited_by_count":1,"area":"agents"},{"id":"2603.05515","title":"Enhancing Tool Calling in LLMs with the International Tool Calling Dataset","created":"2026-01-21","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2606.00611","title":"TRACE: Trajectory Risk-Aware Compression for Long-Horizon Agent Safety","created":"2026-05-30","cited_by_count":1,"area":"agents"},{"id":"2606.09692","title":"Observability for Delegated Execution in Agentic AI Systems","created":"2026-06-08","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2608.27990","title":"CAITLYN: Can LLM Agents Autonomously Synthesize Defenses against Emerging Injection Attacks?","created":"2026-08-28","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2605.01644","title":"Toward a Principled Framework for Agent Safety Measurement","created":"2026-05-02","cited_by_count":0,"area":"agents"},{"id":"2608.10281","title":"From Prompt Injection to Web Exploitation: Revisiting Classic Vulnerabilities in LLM-Integrated Applications","created":"2026-08-10","cited_by_count":0,"area":"agents"},{"id":"2608.27146","title":"When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2609.02035","title":"Implicit Manipulation for Skill Selection in LLM Agents with Semantic Matching","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.28197","title":"PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.01508","title":"OverAct: Measuring and Mitigating Proactive Over-Authorization in LLM Tool-Calling Agents","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.15390","title":"From Acoustic Sensing to Physical Actions: A Comprehensive Survey of Security Risks in Edge-Deployed Audio LLM-Based Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"},{"id":"2610.16426","title":"AuthGateBench: Benchmarking LLMs as Authorization Gate","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}