{"total":127,"rows":[{"id":"2503.23278","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","created":"2025-03-30","cited_by_count":265,"area":null},{"id":"2503.18666","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","created":"2025-03-24","cited_by_count":223,"area":"agents"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2505.10468","title":"AI Agents vs. Agentic AI: A Conceptual Taxonomy, Applications and Challenges","created":"2025-05-15","cited_by_count":169,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2411.15287","title":"Sycophancy in Large Language Models: Causes and Mitigations","created":"2024-11-22","cited_by_count":101,"area":null},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2506.04133","title":"TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","created":"2025-06-04","cited_by_count":59,"area":"agents"},{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2505.19234","title":"GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling","created":"2025-05-25","cited_by_count":36,"area":"agents"},{"id":"2601.08012","title":"Towards Verifiably Safe Tool Use for LLM Agents","created":"2026-01-12","cited_by_count":36,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2602.16708","title":"Formal Policy Enforcement for Real-World Agentic Systems","created":"2026-02-18","cited_by_count":33,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2406.08689","title":"Security of AI Agents","created":"2024-06-12","cited_by_count":26,"area":"agents"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2603.24414","title":"ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, and Watchers","created":"2026-03-25","cited_by_count":20,"area":null},{"id":"2506.02040","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","created":"2025-05-31","cited_by_count":19,"area":"agents"},{"id":"2603.02277","title":"Quantifying Frontier LLM Capabilities for Container Sandbox Escape","created":"2026-03-01","cited_by_count":18,"area":null},{"id":"2603.16586","title":"Runtime Governance for AI Agents: Policies on Paths","created":"2026-03-17","cited_by_count":18,"area":"agents"},{"id":"2607.10487","title":"Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents","created":"2026-07-11","cited_by_count":18,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2412.18371","title":"Defining and Detecting the Defects of the Large Language Model-based Autonomous Agents","created":"2024-12-24","cited_by_count":16,"area":"agents"},{"id":"2505.23559","title":"SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agents","created":"2025-05-29","cited_by_count":16,"area":"agents"},{"id":"2603.22928","title":"SoK: The Attack Surface of Agentic AI - Tools and Autonomy","created":"2026-03-24","cited_by_count":16,"area":"rag"},{"id":"2408.03515","title":"A Study on Prompt Injection Attack Against LLM-Integrated Mobile Robotic Systems","created":"2024-08-07","cited_by_count":15,"area":"safety"},{"id":"2505.03864","title":"From Glue-Code to Protocols: A Critical Analysis of A2A and MCP Integration for Scalable Agent Systems","created":"2025-05-06","cited_by_count":14,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2508.01186","title":"A Survey on Agent Workflow -- Status and Future","created":"2025-08-02","cited_by_count":14,"area":"agents"},{"id":"2502.15865","title":"Standard Benchmarks Fail -- Auditing LLM Agents in Finance Must Prioritize Risk","created":"2025-02-21","cited_by_count":13,"area":"agents"},{"id":"2510.18563","title":"The Trust Paradox in LLM-Based Multi-Agent Systems: When Collaboration Becomes a Security Vulnerability","created":"2025-10-21","cited_by_count":12,"area":"agents"},{"id":"2505.13076","title":"The Hidden Dangers of Browsing AI Agents","created":"2025-05-19","cited_by_count":11,"area":"agents"},{"id":"2507.02424","title":"CyberRAG: An Agentic RAG cyber attack classification and reporting tool","created":"2025-07-03","cited_by_count":11,"area":"rag"},{"id":"2507.08270","title":"Agent Safety Alignment via Reinforcement Learning","created":"2025-07-11","cited_by_count":11,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2603.16572","title":"Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem","created":"2026-03-17","cited_by_count":11,"area":null},{"id":"2504.05871","title":"Agent Guide: A Simple Agent Behavioral Watermarking Framework","created":"2025-04-08","cited_by_count":10,"area":"agents"},{"id":"2509.10858","title":"Large Language Models for Security Operations Centers: A Comprehensive Survey","created":"2025-09-13","cited_by_count":9,"area":null},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2505.09875","title":"Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsing","created":"2025-05-15","cited_by_count":7,"area":"agents"},{"id":"2507.06323","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","created":"2025-07-08","cited_by_count":7,"area":"agents"},{"id":"2508.13787","title":"BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Web","created":"2025-08-19","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2607.01236","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","created":"2026-05-01","cited_by_count":6,"area":"agents"},{"id":"2510.16558","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","created":"2025-10-18","cited_by_count":5,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2605.11036","title":"Sequential Behavioral Watermarking for LLM Agents","created":"2026-05-11","cited_by_count":5,"area":"agents"},{"id":"2605.14932","title":"Toward Securing AI Agents Like Operating Systems","created":"2026-05-14","cited_by_count":5,"area":"agents"},{"id":"2605.22446","title":"Pre-VLA: Preemptive Runtime Verification for Reliable Vision-Language-Action and World-Model Rollouts","created":"2026-05-21","cited_by_count":5,"area":"wm"},{"id":"2606.19464","title":"Deontic Policies for Runtime Governance of Agentic AI Systems","created":"2026-06-17","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2507.04067","title":"HAWK: A Hierarchical Workflow Framework for Multi-Agent Collaboration","created":"2025-07-05","cited_by_count":4,"area":"agents"},{"id":"2509.07131","title":"SoK: Security and Privacy of AI Agents for Blockchain","created":"2025-09-08","cited_by_count":4,"area":null},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2602.10465","title":"Authenticated Workflows: A Systems Approach to Protecting Agentic AI","created":"2026-02-11","cited_by_count":4,"area":"agents"},{"id":"2509.09970","title":"Securing LLM-Generated Embedded Firmware through AI Agent-Driven Validation and Patching","created":"2025-09-12","cited_by_count":3,"area":"agents"},{"id":"2602.22450","title":"Silent Egress: When Implicit Prompt Injection Makes LLM Agents Leak Without a Trace","created":"2026-02-25","cited_by_count":3,"area":"agents"},{"id":"2603.11101","title":"Thousand-GPU Large-Scale Training and Optimization Recipe for AI-Native Cloud Embodied Intelligence Infrastructure","created":"2026-03-11","cited_by_count":3,"area":null},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2605.20704","title":"Heartbeat-Bound Hierarchical Credentials: Cryptographic Revocation for AI Agent Swarms","created":"2026-05-20","cited_by_count":3,"area":null},{"id":"2506.05370","title":"Contextual Memory Intelligence -- A Foundational Paradigm for Human-AI Collaboration and Reflective Generative AI Systems","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2510.25423","title":"What Challenges Do Developers Face in AI Agent Systems? An Empirical Study on Stack Overflow & GitHub Issues","created":"2025-10-29","cited_by_count":2,"area":"agents"},{"id":"2601.15153","title":"How to Build AI Agents by Augmenting LLMs with Codified Human Expert Domain Knowledge? A Software Engineering Framework","created":"2026-01-21","cited_by_count":2,"area":"agents"},{"id":"2602.01942","title":"Human Society-Inspired Approaches to Agentic AI Security: The 4C Framework","created":"2026-02-02","cited_by_count":2,"area":"agents"},{"id":"2604.15579","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","created":"2026-04-16","cited_by_count":2,"area":"safety"},{"id":"2605.12364","title":"Attacks and Mitigations for Distributed Governance of Agentic AI under Byzantine Adversaries","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2509.25072","title":"Optimizing Privacy-Preserving Primitives to Support LLM-Scale Applications","created":"2025-09-29","cited_by_count":1,"area":null},{"id":"2510.13857","title":"From Craft to Constitution: A Governance-First Paradigm for Principled Agent Engineering","created":"2025-10-12","cited_by_count":1,"area":"agents"},{"id":"2511.02895","title":"A Criminology of Machines","created":"2025-11-04","cited_by_count":1,"area":null},{"id":"2511.07441","title":"AudAgent: Automated Auditing of Privacy Policy Compliance in AI Agents","created":"2025-11-03","cited_by_count":1,"area":"agents"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2603.18914","title":"Security, privacy, and agentic AI in a regulatory view: From definitions and distinctions to provisions and reflections","created":"2026-03-19","cited_by_count":1,"area":"agents"},{"id":"2605.06393","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.07135","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.12797","title":"The Containment Gap: How Deployed Agentic AI Frameworks Fail Public-Facing Safety Requirements","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2606.21445","title":"AutoRAS: Learning Robust Agentic Systems with Primitive Representations","created":"2026-06-19","cited_by_count":1,"area":"lr"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2607.27081","title":"On-Policy Distillation for LLM Safety: A Routing Approach to Template-Robust Realignment","created":"2026-07-29","cited_by_count":1,"area":"safety"},{"id":"2608.00718","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.14303","title":"Detecting Contaminated Code-Generation Prompt Batches via Influence Functions","created":"2026-08-14","cited_by_count":1,"area":null},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2609.04159","title":"SENTINEL-RL: Offloading Topological Reasoning from LLM Agents in the Security Operations Center","created":"2026-09-03","cited_by_count":1,"area":"lr"},{"id":"2507.21589","title":"Exploring the Link Between Bayesian Inference and Embodied Intelligence: Toward Open Physical-World Embodied AI Systems","created":"2025-07-29","cited_by_count":0,"area":null},{"id":"2509.04802","title":"Mind the Gap: Evaluating Model- and Agentic-Level Vulnerabilities in LLMs with Action Graphs","created":"2025-09-05","cited_by_count":0,"area":"agents"},{"id":"2602.21127","title":"\"Are You Sure?\": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems","created":"2026-02-24","cited_by_count":0,"area":"agents"}],"next_cursor":"100"}