{"total":22,"rows":[{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2502.12659","title":"The Hidden Risks of Large Reasoning Models: A Safety Assessment of R1","created":"2025-02-18","cited_by_count":91,"area":"lr"},{"id":"2505.05849","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","created":"2025-05-09","cited_by_count":42,"area":"lr"},{"id":"2502.11355","title":"Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents","created":"2025-02-17","cited_by_count":27,"area":"lr"},{"id":"2507.20526","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","created":"2025-07-28","cited_by_count":24,"area":"lr"},{"id":"2503.01908","title":"UDora: A Unified Red Teaming Framework against LLM Agents by Dynamically Hijacking Their Own Reasoning","created":"2025-02-28","cited_by_count":21,"area":"lr"},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2605.11039","title":"The Granularity Mismatch in Agent Security: Argument-Level Provenance Solves Enforcement and Isolates the LLM Reasoning Bottleneck","created":"2026-05-11","cited_by_count":11,"area":"lr"},{"id":"2609.31142","title":"JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models","created":"2026-09-25","cited_by_count":10,"area":"lr"},{"id":"2601.19202","title":"Do Images Speak Louder than Words? Investigating the Effect of Textual Misinformation in VLMs","created":"2026-01-27","cited_by_count":7,"area":"lr"},{"id":"2510.26037","title":"SIRAJ: Diverse and Efficient Red-Teaming for LLM Agents via Distilled Structured Reasoning","created":"2025-10-30","cited_by_count":5,"area":"lr"},{"id":"2605.08876","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","created":"2026-05-09","cited_by_count":3,"area":"lr"},{"id":"2607.05775","title":"Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents","created":"2026-07-07","cited_by_count":3,"area":"lr"},{"id":"2510.17491","title":"Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agents","created":"2025-10-20","cited_by_count":2,"area":"lr"},{"id":"2602.17022","title":"ReIn: Conversational Error Recovery with Reasoning Inception","created":"2026-02-19","cited_by_count":1,"area":"lr"},{"id":"2605.27932","title":"When Think-with-Image Meets Safety: What Determines Multimodal Jailbreak Robustness?","created":"2026-05-27","cited_by_count":1,"area":"lr"},{"id":"2605.12746","title":"CoT-Guard: Small Models for Strong Monitoring","created":"2026-05-12","cited_by_count":0,"area":"lr"},{"id":"2605.30686","title":"Depth-Dependent Indirect Prompt Injection in Tool-Calling ReAct Agents: Injection Depth, Payload Framing, and Turn-Budget Sensitivity","created":"2026-05-29","cited_by_count":0,"area":"lr"},{"id":"2606.07808","title":"Where Instruction Hierarchy Breaks: Diagnosing and Repairing Failures in Reasoning Language Models","created":"2026-06-05","cited_by_count":0,"area":"lr"},{"id":"2606.19588","title":"Analyzing the Narration Gap in LLM-Solver Loops","created":"2026-06-17","cited_by_count":0,"area":"lr"},{"id":"2609.36820","title":"CorrGRPO: Correlation-Normalized GRPO for Multi-Reward Learning","created":"2026-09-29","cited_by_count":0,"area":"lr"},{"id":"2609.39146","title":"MADBench: Benchmarking the Security of Multi-Agent Debate","created":"2026-09-30","cited_by_count":0,"area":"lr"}],"next_cursor":null}