{"total":23,"rows":[{"id":"2410.09024","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","created":"2024-10-11","cited_by_count":437,"area":"agents"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2506.08837","title":"Design Patterns for Securing LLM Agents against Prompt Injections","created":"2025-06-10","cited_by_count":73,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2505.23559","title":"SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agents","created":"2025-05-29","cited_by_count":16,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2506.00781","title":"CoP: Agentic Red-teaming for Large Language Models using Composition of Principles","created":"2025-06-01","cited_by_count":13,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2602.14161","title":"When Benchmarks Lie: Evaluating Malicious Prompt Classifiers Under True Distribution Shift","created":"2026-02-15","cited_by_count":11,"area":"agents"},{"id":"2412.01547","title":"Improved Large Language Model Jailbreak Detection via Pretrained Embeddings","created":"2024-12-02","cited_by_count":10,"area":"agents"},{"id":"2504.20965","title":"AegisLLM: Scaling Agentic Systems for Self-Reflective Defense in LLM Security","created":"2025-04-29","cited_by_count":10,"area":"agents"},{"id":"2508.00935","title":"Measuring Harmfulness of Computer-Using Agents","created":"2025-07-31","cited_by_count":8,"area":"agents"},{"id":"2505.03096","title":"Assessing and Enhancing the Robustness of LLM-based Multi-Agent Systems Through Chaos Engineering","created":"2025-05-06","cited_by_count":6,"area":"agents"},{"id":"2604.20994","title":"Breaking MCP with Function Hijacking Attacks: Novel Threats for Function Calling and Agentic Models","created":"2026-04-22","cited_by_count":2,"area":"agents"},{"id":"2605.03354","title":"What Happens Inside Agent Memory? Circuit Analysis from Emergence to Diagnosis","created":"2026-05-05","cited_by_count":2,"area":"agents"},{"id":"2602.04197","title":"From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agents","created":"2026-02-04","cited_by_count":1,"area":"agents"},{"id":"2604.19752","title":"Soft-Label Governance for Distributional Safety in Multi-Agent Systems","created":"2026-03-19","cited_by_count":1,"area":"agents"},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2607.18548","title":"Engineering Trustworthy Agentic AI for Critical Systems","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2608.27348","title":"INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2609.19203","title":"Position: It is Time to Virtualize Foundation Models with a Self-evolving Operating System Layer","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.36570","title":"CounterSteer: Suppressing Indirect Prompt Injection with Activation Steering","created":"2026-09-29","cited_by_count":0,"area":"agents"}],"next_cursor":null}