{"total":19,"rows":[{"id":"2502.13172","title":"Unveiling Privacy Risks in LLM Agent Memory","created":"2025-02-17","cited_by_count":101,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2508.14111","title":"From AI for Science to Agentic Science: A Survey on Autonomous Scientific Discovery","created":"2025-08-18","cited_by_count":77,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2502.08586","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","created":"2025-02-12","cited_by_count":49,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2606.20023","title":"When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents","created":"2026-06-18","cited_by_count":13,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2604.09747","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","created":"2026-04-10","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2603.18382","title":"From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents","created":"2026-03-19","cited_by_count":4,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2607.23444","title":"Isolated but Exposed: Persistence-Based Memory Extraction Attack on LLM Agents","created":"2026-07-26","cited_by_count":2,"area":"agents"},{"id":"2604.26197","title":"Hierarchical Long-Term Semantic Memory for LinkedIn's Hiring Agent","created":"2026-04-29","cited_by_count":1,"area":"agents"},{"id":"2608.16551","title":"What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents","created":"2026-08-17","cited_by_count":1,"area":"agents"},{"id":"2606.02483","title":"Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools","created":"2026-06-01","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2610.01195","title":"Federated Agent Optimization","created":"2026-10-01","cited_by_count":0,"area":"agents"}],"next_cursor":null}