{"total":21,"rows":[{"id":"2506.08837","title":"Design Patterns for Securing LLM Agents against Prompt Injections","created":"2025-06-10","cited_by_count":73,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2509.07764","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","created":"2025-09-09","cited_by_count":27,"area":"agents"},{"id":"2604.06550","title":"SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills","created":"2026-04-08","cited_by_count":20,"area":"agents"},{"id":"2602.19555","title":"SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime","created":"2026-02-23","cited_by_count":8,"area":"agents"},{"id":"2606.05391","title":"Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents","created":"2026-06-03","cited_by_count":6,"area":"agents"},{"id":"2605.09594","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","created":"2026-05-10","cited_by_count":5,"area":"agents"},{"id":"2605.30777","title":"What Breaks When LLMs Code? Characterizing Operational Safety Failures of Agentic Code Assistants","created":"2026-05-29","cited_by_count":4,"area":"agents"},{"id":"2512.21250","title":"CoTDeceptor:Adversarial Code Obfuscation Against CoT-Enhanced LLM Code Agents","created":"2025-12-24","cited_by_count":3,"area":"agents"},{"id":"2603.15351","title":"PMAx: An Agentic Framework for AI-Driven Process Mining","created":"2026-03-16","cited_by_count":1,"area":"agents"},{"id":"2605.29354","title":"Harmless Yet Harmful: Neutral Prompting Attacks for Stealthy Hallucination Steering in Agent Skills","created":"2026-05-28","cited_by_count":1,"area":"agents"},{"id":"2607.25076","title":"Towards an Agent Operating System - Lessons from Classical and Cloud OS","created":"2026-07-27","cited_by_count":1,"area":"agents"},{"id":"2508.20119","title":"LLM Agents for Generating Microservice-based Applications: how complex is your specification?","created":"2025-08-22","cited_by_count":0,"area":"agents"},{"id":"2606.15283","title":"AI-driven Software Development: A Pragmatic Path to Agentic Development Processes","created":"2026-06-13","cited_by_count":0,"area":"agents"},{"id":"2607.07433","title":"Beware of Agentic Botnets: Scalable Untargeted Promptware Attacks via Universal and Transferable Adversarial HalluSquatting","created":"2026-07-08","cited_by_count":0,"area":"agents"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2609.12039","title":"Reality Is the Final Verifier: On Two Key Gaps in Agentic Software Engineering","created":"2026-09-10","cited_by_count":0,"area":"agents"},{"id":"2609.35889","title":"SINGED: Correct Outputs Do Not Certify Safe Execution in LLM Agents","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.02456","title":"SideKernel: A Usable microVM Sandbox for AI Coding Agents on macOS","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.14968","title":"SEEK: Agentic Knowledge Graph Retrieval for Secure Code Generation","created":"2026-10-10","cited_by_count":0,"area":"agents"}],"next_cursor":null}