{"total":56,"rows":[{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2502.11127","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","created":"2025-02-16","cited_by_count":59,"area":"agents"},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2511.19663","title":"Fara-7B: An Efficient Agentic Model for Computer Use","created":"2025-11-24","cited_by_count":35,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2508.01710","title":"CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications","created":"2025-08-03","cited_by_count":27,"area":"agents"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2606.28733","title":"Agentic Abstention: Do Agents Know When to Stop Instead of Act?","created":"2026-06-27","cited_by_count":15,"area":"agents"},{"id":"2504.08848","title":"X-Guard: Multilingual Guard Agent for Content Moderation","created":"2025-04-11","cited_by_count":13,"area":"agents"},{"id":"2509.23614","title":"PSG-Agent: Personality-Aware Safety Guardrail for LLM-based Agents","created":"2025-09-28","cited_by_count":12,"area":"agents"},{"id":"2510.08240","title":"The Alignment Waltz: Jointly Training Agents to Collaborate for Safety","created":"2025-10-09","cited_by_count":10,"area":"agents"},{"id":"2603.19423","title":"The Autonomy Tax: Defense Training Breaks LLM Agents","created":"2026-03-19","cited_by_count":9,"area":"agents"},{"id":"2511.10949","title":"Exposing Weak Links in Multi-Agent Systems under Adversarial Prompting","created":"2025-11-14","cited_by_count":8,"area":"agents"},{"id":"2605.11882","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","created":"2026-05-12","cited_by_count":8,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2603.16733","title":"IQuest-Coder-V1 Technical Report","created":"2026-03-17","cited_by_count":6,"area":"agents"},{"id":"2604.08608","title":"Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines","created":"2026-04-08","cited_by_count":5,"area":"agents"},{"id":"2605.17467","title":"VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systems","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2411.04496","title":"Thanos: Enhancing Conversational Agents with Skill-of-Mind-Infused Large Language Model","created":"2024-11-07","cited_by_count":3,"area":"agents"},{"id":"2605.30924","title":"EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents","created":"2026-05-29","cited_by_count":3,"area":"agents"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2510.09474","title":"Multimodal Policy Internalization for Conversational Agents","created":"2025-10-10","cited_by_count":2,"area":"agents"},{"id":"2512.02530","title":"Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaboration","created":"2025-12-02","cited_by_count":2,"area":"agents"},{"id":"2512.20293","title":"AprielGuard","created":"2025-12-23","cited_by_count":2,"area":"agents"},{"id":"2604.22871","title":"AutoRISE: Agent-Driven Strategy Evolution for Red-Teaming Large Language Models","created":"2026-04-23","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2606.02240","title":"AgentRedBench: Dynamic Redteaming and Integration-Aware Defense for LLM Agents over SaaS Integrations","created":"2026-06-01","cited_by_count":2,"area":"agents"},{"id":"2607.13081","title":"SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification","created":"2026-07-13","cited_by_count":2,"area":"agents"},{"id":"2508.17057","title":"GRAID: Synthetic Data Generation with Geometric Constraints and Multi-Agentic Reflection for Harmful Content Detection","created":"2025-08-23","cited_by_count":1,"area":"agents"},{"id":"2602.07391","title":"NAAMSE: Framework for Evolutionary Security Evaluation of Agents","created":"2026-02-07","cited_by_count":1,"area":"agents"},{"id":"2604.16870","title":"Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives","created":"2026-04-18","cited_by_count":1,"area":"agents"},{"id":"2605.20351","title":"Refusal Evaluation in Coding LLMs and Code Agents: A Systematic Review of Thirteen Malicious-Code Prompt Corpora (2023-2025)","created":"2026-05-19","cited_by_count":1,"area":"agents"},{"id":"2605.22842","title":"The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems","created":"2026-05-12","cited_by_count":1,"area":"agents"},{"id":"2606.00611","title":"TRACE: Trajectory Risk-Aware Compression for Long-Horizon Agent Safety","created":"2026-05-30","cited_by_count":1,"area":"agents"},{"id":"2607.29254","title":"Tool Specifications Matter: Uncovering and Mitigating Safety Risks in AI Agents","created":"2026-07-31","cited_by_count":1,"area":"agents"},{"id":"2609.33658","title":"AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents","created":"2026-09-27","cited_by_count":1,"area":"agents"},{"id":"2605.02187","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2605.02914","title":"When Safety Geometry Collapses: Fine-Tuning Vulnerabilities in Agentic Guard Models","created":"2026-04-08","cited_by_count":0,"area":"agents"},{"id":"2605.18918","title":"ESLD (External Surrogate Latent Defense): A Latent-Space Architecture for Faster, Stronger Prompt-Injection Defense","created":"2026-05-18","cited_by_count":0,"area":"agents"},{"id":"2607.22545","title":"Semalith v1.4: A Calibrated 184M Safety Classifier Achieving State-of-the-Art Prompt-Injection Detection at 44x Fewer Parameters than Llama-Guard-3-8B","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2608.02687","title":"PolicyGuard: Prompt-Configurable Semantic DLP for LLM Coding Agents","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.24275","title":"RePolicy: Reinforcement Learning for Safety-Policy Invocation in Agent Safeguards","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2608.27009","title":"The Guard That Cried Wolf: How Scary Words Make Agent Guardrails Refuse Legitimate Actions","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2608.29206","title":"Benevolent Bias in Multi-Turn Human-Agent Dialogue","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2609.15134","title":"HazardAuditor: From Executable Threats to Safer Computer-Use Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.27773","title":"Beyond Unsafe Detection: Counterfactually Anchored Evidence Attribution for Multi-Turn LLM Safety Failures","created":"2026-08-17","cited_by_count":0,"area":"agents"},{"id":"2609.33039","title":"Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal States","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.33401","title":"Evaluating System One Models for Agent Security Decisions: Reliability, Calibration, and Selective Automation","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.34241","title":"AdaGuard: An Adaptive Guard Model with User-defined Policies","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34463","title":"CoDeL: Co-Evolutionary Defense against Indirect Prompt Injection in LLM-based Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.38291","title":"HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39107","title":"MASCRDM: Multi-Agent System for Compliance Risk Detection and Mitigation in Training Process of Large Language Models","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.07089","title":"Towards a Unified Misuse Monitoring Benchmark","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"}],"next_cursor":null}