{"total":29,"rows":[{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2602.20156","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","created":"2026-02-23","cited_by_count":90,"area":"agents"},{"id":"2506.08837","title":"Design Patterns for Securing LLM Agents against Prompt Injections","created":"2025-06-10","cited_by_count":73,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2603.10749","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","created":"2026-03-11","cited_by_count":38,"area":"agents"},{"id":"2502.01822","title":"Firewalls to Secure Dynamic LLM Agentic Networks","created":"2025-02-03","cited_by_count":36,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2410.22932","title":"Multi-Agent Large Language Models for Conversational Task-Solving","created":"2024-10-30","cited_by_count":24,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2603.22868","title":"Agent-Sentry: Bounding LLM Agents via Execution Provenance","created":"2026-03-24","cited_by_count":15,"area":"agents"},{"id":"2602.14161","title":"When Benchmarks Lie: Evaluating Malicious Prompt Classifiers Under True Distribution Shift","created":"2026-02-15","cited_by_count":11,"area":"agents"},{"id":"2507.02735","title":"Meta SecAlign: A Secure Foundation LLM Against Prompt Injection Attacks","created":"2025-07-03","cited_by_count":10,"area":"agents"},{"id":"2512.08417","title":"Attention is All You Need to Defend Against Indirect Prompt Injection Attacks in LLMs","created":"2025-12-09","cited_by_count":10,"area":"agents"},{"id":"2512.00966","title":"Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis","created":"2025-11-30","cited_by_count":9,"area":"agents"},{"id":"2606.23416","title":"Detecting Malicious Agent Skills in the Wild using Attention","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2608.02657","title":"Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States","created":"2026-08-01","cited_by_count":7,"area":"agents"},{"id":"2608.27496","title":"ROPE: Routed Origin Policy Enforcement against Indirect Prompt Injection","created":"2026-08-27","cited_by_count":2,"area":"agents"},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2602.04813","title":"Agentic AI in Healthcare & Medicine: A Seven-Dimensional Taxonomy for Empirical Evaluation of LLM-based Agents","created":"2026-02-04","cited_by_count":1,"area":"agents"},{"id":"2607.06807","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2610.05295","title":"Readable Before Actionable: Causal Tracing of Indirect Prompt Injection","created":"2026-10-04","cited_by_count":1,"area":"agents"},{"id":"2605.10763","title":"MATRA: Modeling the Attack Surface of Agentic AI Systems -- OpenClaw Case Study","created":"2026-05-11","cited_by_count":0,"area":"agents"},{"id":"2609.10892","title":"DriftNet: A Dual-Head Trajectory Transformer for Detecting and Localizing Prompt Injection in LLM Agents","created":"2026-09-09","cited_by_count":0,"area":"agents"},{"id":"2609.14003","title":"Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.20080","title":"A Proposal for an Agentic AI Architecture to Support Multi-Domain Decision-Making in the Brazilian Armed Forces","created":"2026-09-17","cited_by_count":0,"area":"agents"},{"id":"2609.36556","title":"MAADBench: The Refreshable Paradigm for Anomaly Detection in Multi-Agent Systems","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.36570","title":"CounterSteer: Suppressing Indirect Prompt Injection with Activation Steering","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.02413","title":"Prompted to Discriminate: Generalizing Malicious-Input Probes in the Wild","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.07089","title":"Towards a Unified Misuse Monitoring Benchmark","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}