{"total":82,"rows":[{"id":"2410.09024","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","created":"2024-10-11","cited_by_count":437,"area":"agents"},{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2410.06703","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2505.16067","title":"How Memory Management Impacts LLM Agents: An Empirical Study of Experience-Following Behavior","created":"2025-05-21","cited_by_count":101,"area":"agents"},{"id":"2412.16682","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","created":"2024-12-21","cited_by_count":99,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2502.11448","title":"AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection","created":"2025-02-17","cited_by_count":89,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2510.05156","title":"VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation","created":"2025-10-03","cited_by_count":49,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2601.08012","title":"Towards Verifiably Safe Tool Use for LLM Agents","created":"2026-01-12","cited_by_count":36,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2508.17281","title":"From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users","created":"2025-08-24","cited_by_count":32,"area":"agents"},{"id":"2508.19461","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","created":"2025-08-26","cited_by_count":31,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2508.00500","title":"ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Prediction","created":"2025-08-01","cited_by_count":28,"area":"agents"},{"id":"2509.07764","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","created":"2025-09-09","cited_by_count":27,"area":"agents"},{"id":"2410.14569","title":"When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs","created":"2024-10-18","cited_by_count":24,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2408.02205","title":"Swiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi-Layered Guardrails of Foundation Model Based Agents","created":"2024-08-05","cited_by_count":14,"area":"agents"},{"id":"2504.03255","title":"Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective","created":"2025-04-04","cited_by_count":13,"area":"agents"},{"id":"2507.04724","title":"Who's the Mole? Modeling and Detecting Intention-Hiding Malicious Agents in LLM-Based Multi-Agent Systems","created":"2025-07-07","cited_by_count":13,"area":"agents"},{"id":"2604.10577","title":"The Blind Spot of Agent Safety: How Benign User Instructions Expose Critical Vulnerabilities in Computer-Use Agents","created":"2026-04-12","cited_by_count":12,"area":"agents"},{"id":"2508.04010","title":"HarmonyGuard: Toward Safety and Utility in Web Agents via Adaptive Policy Enhancement and Dual-Objective Optimization","created":"2025-08-06","cited_by_count":10,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2602.11749","title":"AIR: Improving Agent Safety through Incident Response","created":"2026-02-12","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2608.02657","title":"Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States","created":"2026-08-01","cited_by_count":7,"area":"agents"},{"id":"2504.07461","title":"Achilles Heel of Distributed Multi-Agent Systems","created":"2025-04-10","cited_by_count":6,"area":"agents"},{"id":"2505.17735","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","created":"2025-05-23","cited_by_count":6,"area":"agents"},{"id":"2512.05951","title":"Trusted AI Agents in the Cloud","created":"2025-12-05","cited_by_count":6,"area":"agents"},{"id":"2603.28807","title":"SafeClaw-R: Towards Safe and Secure Multi-Agent Personal Assistants","created":"2026-03-28","cited_by_count":6,"area":"agents"},{"id":"2606.05805","title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents","created":"2026-06-04","cited_by_count":6,"area":"agents"},{"id":"2507.00979","title":"Enhancing LLM Agent Safety via Causal Influence Prompting","created":"2025-07-01","cited_by_count":5,"area":"agents"},{"id":"2510.01586","title":"AdvEvo-MARL: Shaping Internalized Safety through Adversarial Co-Evolution in Multi-Agent Reinforcement Learning","created":"2025-10-02","cited_by_count":5,"area":"agents"},{"id":"2603.02798","title":"Guideline-Grounded Evidence Accumulation for High-Stakes Agent Verification","created":"2026-03-03","cited_by_count":5,"area":"agents"},{"id":"2605.17467","title":"VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systems","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2509.18661","title":"Agentic AutoSurvey: Let LLMs Survey LLMs","created":"2025-09-23","cited_by_count":4,"area":"agents"},{"id":"2510.15739","title":"AURA: An Agent Autonomy Risk Assessment Framework","created":"2025-10-17","cited_by_count":4,"area":"agents"},{"id":"2604.03870","title":"Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs","created":"2026-04-04","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2606.22673","title":"AgentLens: Interpretable Safety Steering via Mechanistic Subspaces for Multi-Turn Coding Agent","created":"2026-06-21","cited_by_count":3,"area":"agents"},{"id":"2607.28815","title":"Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layer","created":"2026-07-30","cited_by_count":3,"area":"agents"},{"id":"2512.07665","title":"Reliable agent engineering should integrate machine-compatible organizational principles","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2604.24477","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2607.13081","title":"SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification","created":"2026-07-13","cited_by_count":2,"area":"agents"},{"id":"2608.17597","title":"HarnessRisk: A Lifecycle-Oriented Benchmark for Agent Harness Safety","created":"2026-08-18","cited_by_count":2,"area":"agents"},{"id":"2608.21027","title":"Don't Solve, Just Compare: Tiny Advisors for Runtime Intervention in LLM Agents","created":"2026-08-21","cited_by_count":2,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2609.04629","title":"SiLR: Structure-Preserving Admission and Process Reward for LLM Tool Agents","created":"2026-09-04","cited_by_count":1,"area":"agents"},{"id":"2610.00400","title":"Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2608.00426","title":"MAPLE-Guard: Memory-Aware Link Enforcement Against Memory-Link Poisoning in Multi-Agent Systems","created":"2026-08-01","cited_by_count":0,"area":"agents"},{"id":"2608.06862","title":"SynChain: Inducing Computer-Use Agent Systems to Construct Their Own Attack Chains","created":"2026-08-07","cited_by_count":0,"area":"agents"},{"id":"2608.12977","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.25711","title":"Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.02967","title":"Privacy-Preserving Topology-Guided Safety for LLM-Based Multi-Agent Systems via Federated Graph Learning","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.03192","title":"Where Reliability Lives: Experimental Localisation of Behavioural Properties in an Agent System","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.06835","title":"Skynet: Workflow-Level Anomaly Detection for Agentic AI via Semantic and Structural Modeling","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.10892","title":"DriftNet: A Dual-Head Trajectory Transformer for Detecting and Localizing Prompt Injection in LLM Agents","created":"2026-09-09","cited_by_count":0,"area":"agents"},{"id":"2609.15134","title":"HazardAuditor: From Executable Threats to Safer Computer-Use Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.16287","title":"AgentGuard: Learning Execution Guardrails from Anomalous Coding-Agent Trajectories","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.26048","title":"FIRE: Failure-Informed Runtime Engineering for Reliable Language-Model Agents","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34518","title":"SEAD: A State-Based Perspective on Attack and Defense in Tool-Using Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34974","title":"Before Acting, Change the State: Prospective State Intervention for Web Agents under Deceptive Interfaces","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.38458","title":"PrivMeSA: Privacy-Aware Self-Evolving Multi-Agent System for Medicine via Local-Remote LLM Collaboration","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39450","title":"ActionGuard: Tool Call Authorization under Poisoned Skills","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.02664","title":"A GHOST in Long-Horizon Agents: Governance Hazard from Overlooked Safety Constraints across Turns","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.02925","title":"Positive-Unlabeled Learning for Agent Safety False Alarm Auditing","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.08928","title":"Multi-Aspect Runtime Verification for Simulation-Based V&V of LLM-Enabled Autonomous Agents","created":"2026-10-06","cited_by_count":0,"area":"agents"},{"id":"2610.11030","title":"NOMOS: Compiling Written Policies into Statically Verified Tool-Call Gates for LLM Agents","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.16838","title":"Same Operation, Different Permission: Evaluating Whether Guardrails Honor Authorization","created":"2026-10-12","cited_by_count":0,"area":"agents"},{"id":"2610.18206","title":"SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}