{"total":82,"rows":[{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2503.23278","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","created":"2025-03-30","cited_by_count":265,"area":null},{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223,"area":"agents"},{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2507.13334","title":"A Survey of Context Engineering for Large Language Models","created":"2025-07-17","cited_by_count":126,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2404.07503","title":"Best Practices and Lessons Learned on Synthetic Data","created":"2024-04-11","cited_by_count":106,"area":"synth"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2403.03031","title":"Learning to Use Tools via Cooperative and Interactive Agents","created":"2024-03-05","cited_by_count":54,"area":"agents"},{"id":"2501.02506","title":"ToolHop: A Query-Driven Benchmark for Evaluating Large Language Models in Multi-Hop Tool Use","created":"2025-01-05","cited_by_count":50,"area":"agents"},{"id":"2412.10198","title":"From Allies to Adversaries: Manipulating LLM Tool-Calling through Adversarial Injection","created":"2024-12-13","cited_by_count":38,"area":"agents"},{"id":"2506.00618","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","created":"2025-05-31","cited_by_count":35,"area":"mllm"},{"id":"2502.11355","title":"Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents","created":"2025-02-17","cited_by_count":27,"area":"lr"},{"id":"2604.09378","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","created":"2026-04-10","cited_by_count":27,"area":"safety"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2503.08669","title":"SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints","created":"2025-03-11","cited_by_count":23,"area":"agents"},{"id":"2505.23020","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","created":"2025-05-29","cited_by_count":21,"area":"agents"},{"id":"2508.08791","title":"Feedback-Driven Tool-Use Improvements in Large Language Models via Automated Build Environments","created":"2025-08-12","cited_by_count":19,"area":"agents"},{"id":"2507.15296","title":"Butterfly Effects in Toolchains: A Comprehensive Analysis of Failed Parameter Filling in LLM Tool-Agent Systems","created":"2025-07-21","cited_by_count":18,"area":"agents"},{"id":"2511.05359","title":"ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations","created":"2025-11-07","cited_by_count":16,"area":"agents"},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2603.22862","title":"The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration","created":"2026-03-24","cited_by_count":14,"area":"agents"},{"id":"2412.15495","title":"TL-Training: A Task-Feature-Based Framework for Training Large Language Models in Tool Use","created":"2024-12-20","cited_by_count":11,"area":"agents"},{"id":"2604.05432","title":"Your LLM Agent Can Leak Your Data: Data Exfiltration via Backdoored Tool Use","created":"2026-04-07","cited_by_count":10,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2406.12307","title":"Can Tool-augmented Large Language Models be Aware of Incomplete Conditions?","created":"2024-06-18","cited_by_count":8,"area":"agents"},{"id":"2412.12527","title":"When to Speak, When to Abstain: Contrastive Decoding with Abstention","created":"2024-12-17","cited_by_count":8,"area":null},{"id":"2602.19555","title":"SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime","created":"2026-02-23","cited_by_count":8,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2605.00314","title":"Semia: Auditing Agent Skills via Constraint-Guided Representation Synthesis","created":"2026-05-01","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2505.17455","title":"Towards Evaluating Proactive Risk Awareness of Multimodal Language Models","created":"2025-05-23","cited_by_count":6,"area":"mllm"},{"id":"2506.04836","title":"Oversight Structures for Agentic AI in Public-Sector Organizations","created":"2025-06-05","cited_by_count":6,"area":null},{"id":"2609.00006","title":"Harness Engineering: Anatomy, Architecture, and Evolution of Coding Agents -- A Source-Code Study of Eleven Systems","created":"2026-07-15","cited_by_count":6,"area":"agents"},{"id":"2504.06766","title":"FamilyTool: A Multi-hop Personalized Tool Use Benchmark","created":"2025-04-09","cited_by_count":5,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2407.03007","title":"What Affects the Stability of Tool Learning? An Empirical Study on the Robustness of Tool Learning Frameworks","created":"2024-07-03","cited_by_count":4,"area":"agents"},{"id":"2512.22211","title":"With Great Capabilities Come Great Responsibilities: Introducing the Agentic Risk & Capability Framework for Governing Agentic AI Systems","created":"2025-12-22","cited_by_count":4,"area":"agents"},{"id":"2604.00835","title":"Agentic Tool Use in Large Language Models","created":"2026-04-01","cited_by_count":4,"area":"agents"},{"id":"2409.15825","title":"60 Data Points are Sufficient to Fine-Tune LLMs for Question-Answering","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2508.05452","title":"LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Models","created":"2025-08-07","cited_by_count":2,"area":null},{"id":"2510.17491","title":"Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agents","created":"2025-10-20","cited_by_count":2,"area":"lr"},{"id":"2512.07665","title":"Reliable agent engineering should integrate machine-compatible organizational principles","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2606.02240","title":"AgentRedBench: Dynamic Redteaming and Integration-Aware Defense for LLM Agents over SaaS Integrations","created":"2026-06-01","cited_by_count":2,"area":"agents"},{"id":"2608.12273","title":"Convergent Detour Hijacking: Task-Preserving Resource Amplification in Skill-Based LLM Agents","created":"2026-08-12","cited_by_count":2,"area":"agents"},{"id":"2608.22868","title":"AgentFlow: A Flow-Centric Policy Language and Framework for Securing LLM Agent Systems","created":"2026-08-24","cited_by_count":2,"area":"agents"},{"id":"2503.04188","title":"Measuring temporal effects of agent knowledge by date-controlled tool use","created":"2025-03-06","cited_by_count":1,"area":"agents"},{"id":"2505.17106","title":"RRTL: Red Teaming Reasoning Large Language Models in Tool Learning","created":"2025-05-21","cited_by_count":1,"area":"lr"},{"id":"2511.19171","title":"Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2512.00332","title":"Assertion-Conditioned Compliance: A Provenance-Aware Vulnerability in Multi-Turn Tool-Calling Agents","created":"2025-11-29","cited_by_count":1,"area":"agents"},{"id":"2601.08196","title":"Evaluating Implicit Regulatory Compliance in LLM Tool Invocation via Logic-Guided Synthesis","created":"2026-01-13","cited_by_count":1,"area":"agents"},{"id":"2603.05515","title":"Enhancing Tool Calling in LLMs with the International Tool Calling Dataset","created":"2026-01-21","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2604.03242","title":"DRAFT: Task Decoupled Latent Reasoning for Agent Safety","created":"2026-02-11","cited_by_count":1,"area":"lr"},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2606.00611","title":"TRACE: Trajectory Risk-Aware Compression for Long-Horizon Agent Safety","created":"2026-05-30","cited_by_count":1,"area":"agents"},{"id":"2606.09692","title":"Observability for Delegated Execution in Agentic AI Systems","created":"2026-06-08","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2608.27990","title":"CAITLYN: Can LLM Agents Autonomously Synthesize Defenses against Emerging Injection Attacks?","created":"2026-08-28","cited_by_count":1,"area":"agents"},{"id":"2609.29543","title":"Safe Skill Retirement for Physical Agents","created":"2026-08-25","cited_by_count":1,"area":null},{"id":"2609.35732","title":"Failure-Transparent Agents: Benchmarking Post-Failure Reporting in Tool-Using Language Models","created":"2026-09-28","cited_by_count":1,"area":null},{"id":"2510.01253","title":"OR-Toolformer: Modeling and Solving Operations Research Problems with Tool Augmented Large Language Models","created":"2025-09-24","cited_by_count":0,"area":"lr"},{"id":"2604.09963","title":"Rebooting Microreboot: Architectural Support for Safe, Parallel Recovery in Microservice Systems","created":"2026-04-11","cited_by_count":0,"area":null},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2605.01644","title":"Toward a Principled Framework for Agent Safety Measurement","created":"2026-05-02","cited_by_count":0,"area":"agents"},{"id":"2607.17986","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2608.10281","title":"From Prompt Injection to Web Exploitation: Revisiting Classic Vulnerabilities in LLM-Integrated Applications","created":"2026-08-10","cited_by_count":0,"area":"agents"},{"id":"2608.27146","title":"When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2609.02035","title":"Implicit Manipulation for Skill Selection in LLM Agents with Semantic Matching","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.28197","title":"PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.29007","title":"When Does Action Credit Need Updating?","created":"2026-09-24","cited_by_count":0,"area":null},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.01508","title":"OverAct: Measuring and Mitigating Proactive Over-Authorization in LLM Tool-Calling Agents","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.04836","title":"RSure-Agent: Reliable Use of Tool Observations for Remote Sensing Agents","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.15390","title":"From Acoustic Sensing to Physical Actions: A Comprehensive Survey of Security Risks in Edge-Deployed Audio LLM-Based Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"},{"id":"2610.16426","title":"AuthGateBench: Benchmarking LLMs as Authorization Gate","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}