{"total":124,"rows":[{"id":"2410.09024","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","created":"2024-10-11","cited_by_count":437,"area":"agents"},{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2503.22738","title":"ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning","created":"2025-03-26","cited_by_count":151,"area":"lr"},{"id":"2410.06703","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2505.16067","title":"How Memory Management Impacts LLM Agents: An Empirical Study of Experience-Following Behavior","created":"2025-05-21","cited_by_count":101,"area":"agents"},{"id":"2501.18492","title":"GuardReasoner: Towards Reasoning-based LLM Safeguards","created":"2025-01-30","cited_by_count":100,"area":"lr"},{"id":"2412.16682","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","created":"2024-12-21","cited_by_count":99,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2502.11448","title":"AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection","created":"2025-02-17","cited_by_count":89,"area":"agents"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2601.12538","title":"A Survey of Agentic Reasoning for Large Language Models: Towards Recursively Self-Improving and Collective Agents","created":"2026-01-18","cited_by_count":50,"area":"lr"},{"id":"2510.05156","title":"VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation","created":"2025-10-03","cited_by_count":49,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2601.08012","title":"Towards Verifiably Safe Tool Use for LLM Agents","created":"2026-01-12","cited_by_count":36,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2508.17281","title":"From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users","created":"2025-08-24","cited_by_count":32,"area":"agents"},{"id":"2508.19461","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","created":"2025-08-26","cited_by_count":31,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2508.00500","title":"ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Prediction","created":"2025-08-01","cited_by_count":28,"area":"agents"},{"id":"2509.07764","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","created":"2025-09-09","cited_by_count":27,"area":"agents"},{"id":"2509.03871","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","created":"2025-09-04","cited_by_count":25,"area":"lr"},{"id":"2410.14569","title":"When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs","created":"2024-10-18","cited_by_count":24,"area":"agents"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2601.22311","title":"Why Reasoning Fails to Plan: A Planning-Centric Analysis of Long-Horizon Decision Making in LLM Agents","created":"2026-01-29","cited_by_count":23,"area":"lr"},{"id":"2503.01908","title":"UDora: A Unified Red Teaming Framework against LLM Agents by Dynamically Hijacking Their Own Reasoning","created":"2025-02-28","cited_by_count":21,"area":"lr"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2606.05806","title":"When Tools Fail: Benchmarking Dynamic Replanning and Anomaly Recovery in LLM Agents","created":"2026-06-04","cited_by_count":17,"area":"lr"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2408.02205","title":"Swiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi-Layered Guardrails of Foundation Model Based Agents","created":"2024-08-05","cited_by_count":14,"area":"agents"},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2504.03255","title":"Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective","created":"2025-04-04","cited_by_count":13,"area":"agents"},{"id":"2507.04724","title":"Who's the Mole? Modeling and Detecting Intention-Hiding Malicious Agents in LLM-Based Multi-Agent Systems","created":"2025-07-07","cited_by_count":13,"area":"agents"},{"id":"2604.10577","title":"The Blind Spot of Agent Safety: How Benign User Instructions Expose Critical Vulnerabilities in Computer-Use Agents","created":"2026-04-12","cited_by_count":12,"area":"agents"},{"id":"2605.11039","title":"The Granularity Mismatch in Agent Security: Argument-Level Provenance Solves Enforcement and Isolates the LLM Reasoning Bottleneck","created":"2026-05-11","cited_by_count":11,"area":"lr"},{"id":"2508.04010","title":"HarmonyGuard: Toward Safety and Utility in Web Agents via Adaptive Policy Enhancement and Dual-Objective Optimization","created":"2025-08-06","cited_by_count":10,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2602.11749","title":"AIR: Improving Agent Safety through Incident Response","created":"2026-02-12","cited_by_count":8,"area":"agents"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2608.02657","title":"Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States","created":"2026-08-01","cited_by_count":7,"area":"agents"},{"id":"2504.07461","title":"Achilles Heel of Distributed Multi-Agent Systems","created":"2025-04-10","cited_by_count":6,"area":"agents"},{"id":"2505.17735","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","created":"2025-05-23","cited_by_count":6,"area":"agents"},{"id":"2512.05951","title":"Trusted AI Agents in the Cloud","created":"2025-12-05","cited_by_count":6,"area":"agents"},{"id":"2603.28807","title":"SafeClaw-R: Towards Safe and Secure Multi-Agent Personal Assistants","created":"2026-03-28","cited_by_count":6,"area":"agents"},{"id":"2606.05805","title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents","created":"2026-06-04","cited_by_count":6,"area":"agents"},{"id":"2507.00979","title":"Enhancing LLM Agent Safety via Causal Influence Prompting","created":"2025-07-01","cited_by_count":5,"area":"agents"},{"id":"2510.01586","title":"AdvEvo-MARL: Shaping Internalized Safety through Adversarial Co-Evolution in Multi-Agent Reinforcement Learning","created":"2025-10-02","cited_by_count":5,"area":"agents"},{"id":"2603.02798","title":"Guideline-Grounded Evidence Accumulation for High-Stakes Agent Verification","created":"2026-03-03","cited_by_count":5,"area":"agents"},{"id":"2603.14367","title":"HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task","created":"2026-03-15","cited_by_count":5,"area":"mllm"},{"id":"2605.17467","title":"VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systems","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2509.18661","title":"Agentic AutoSurvey: Let LLMs Survey LLMs","created":"2025-09-23","cited_by_count":4,"area":"agents"},{"id":"2510.15739","title":"AURA: An Agent Autonomy Risk Assessment Framework","created":"2025-10-17","cited_by_count":4,"area":"agents"},{"id":"2603.00991","title":"Tracking Capabilities for Safer Agents","created":"2026-03-01","cited_by_count":4,"area":"safety"},{"id":"2604.03870","title":"Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs","created":"2026-04-04","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2602.18193","title":"BLM-Guard: Explainable Multimodal Ad Moderation with Chain-of-Thought and Policy-Aligned Rewards","created":"2026-02-20","cited_by_count":3,"area":"lr"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2605.14454","title":"LiSA: Lifelong Safety Adaptation via Conservative Policy Induction","created":"2026-05-14","cited_by_count":3,"area":"safety"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2606.22673","title":"AgentLens: Interpretable Safety Steering via Mechanistic Subspaces for Multi-Turn Coding Agent","created":"2026-06-21","cited_by_count":3,"area":"agents"},{"id":"2607.27267","title":"FAVA: Formal Authorization for Verified Agents with Evidence-Backed Permission Graphs","created":"2026-07-29","cited_by_count":3,"area":"lr"},{"id":"2607.28815","title":"Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layer","created":"2026-07-30","cited_by_count":3,"area":"agents"},{"id":"2608.05695","title":"DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model","created":"2026-08-06","cited_by_count":3,"area":"wm"},{"id":"2504.03699","title":"Enhancing Clinical Decision-Making: Integrating Multi-Agent Systems with Ethical AI Governance","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2512.07665","title":"Reliable agent engineering should integrate machine-compatible organizational principles","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2602.23258","title":"MASRubric: Auditing Information Flow in Multi-Agent Systems with Failure-Distilled Pitfall Rubrics","created":"2026-02-26","cited_by_count":2,"area":null},{"id":"2604.24477","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2607.13081","title":"SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification","created":"2026-07-13","cited_by_count":2,"area":"agents"},{"id":"2608.17597","title":"HarnessRisk: A Lifecycle-Oriented Benchmark for Agent Harness Safety","created":"2026-08-18","cited_by_count":2,"area":"agents"},{"id":"2608.21027","title":"Don't Solve, Just Compare: Tiny Advisors for Runtime Intervention in LLM Agents","created":"2026-08-21","cited_by_count":2,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2604.05119","title":"Governance-Aware Agent Telemetry for Closed-Loop Enforcement in Multi-Agent AI Systems","created":"2026-04-06","cited_by_count":1,"area":null},{"id":"2605.27117","title":"Position: AI Safety Requires Effective Controllability","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2606.21445","title":"AutoRAS: Learning Robust Agentic Systems with Primitive Representations","created":"2026-06-19","cited_by_count":1,"area":"lr"},{"id":"2607.01277","title":"Cognitive Firewall: A Proactive, Zero-Trust, Multi-Gate Framework for LLM Safety","created":"2026-07-01","cited_by_count":1,"area":"safety"},{"id":"2609.04629","title":"SiLR: Structure-Preserving Admission and Process Reward for LLM Tool Agents","created":"2026-09-04","cited_by_count":1,"area":"agents"},{"id":"2610.00400","title":"Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2508.01198","title":"Adaptive Content Restriction for Large Language Models via Suffix Optimization","created":"2025-08-02","cited_by_count":0,"area":null},{"id":"2508.18384","title":"Backprompting: Leveraging Synthetic Production Data for Health Advice Guardrails","created":"2025-08-25","cited_by_count":0,"area":"safety"},{"id":"2509.14622","title":"Adversarial Distilled Retrieval-Augmented Guarding Model for Online Malicious Intent Detection","created":"2025-09-18","cited_by_count":0,"area":"rag"},{"id":"2602.08062","title":"Efficient and Adaptable Detection of Malicious LLM Prompts via Bootstrap Aggregation","created":"2026-02-08","cited_by_count":0,"area":"synth"},{"id":"2605.02346","title":"APIOT: Autonomous Vulnerability Management Across Bare-Metal Industrial OT Networks","created":"2026-05-04","cited_by_count":0,"area":null},{"id":"2605.10386","title":"GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic","created":"2026-05-11","cited_by_count":0,"area":"driving"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2607.17149","title":"A Diagnostic Framework for AI Agent Behavior","created":"2026-07-19","cited_by_count":0,"area":null},{"id":"2608.00426","title":"MAPLE-Guard: Memory-Aware Link Enforcement Against Memory-Link Poisoning in Multi-Agent Systems","created":"2026-08-01","cited_by_count":0,"area":"agents"},{"id":"2608.03866","title":"ADMITBench: A Safety-Governed Reference Framework for Evaluating the Admissibility of Industrial LLM Advisories","created":"2026-08-04","cited_by_count":0,"area":null},{"id":"2608.06862","title":"SynChain: Inducing Computer-Use Agent Systems to Construct Their Own Attack Chains","created":"2026-08-07","cited_by_count":0,"area":"agents"},{"id":"2608.12977","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"}],"next_cursor":"100"}