{"total":86,"rows":[{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2507.21504","title":"Evaluation and Benchmarking of LLM Agents: A Survey","created":"2025-07-29","cited_by_count":152,"area":"agents"},{"id":"2504.11703","title":"Progent: Securing AI Agents with Privilege Control","created":"2025-04-16","cited_by_count":141,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2412.13501","title":"GUI Agents: A Survey","created":"2024-12-18","cited_by_count":103,"area":"agents"},{"id":"2502.13172","title":"Unveiling Privacy Risks in LLM Agent Memory","created":"2025-02-17","cited_by_count":101,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2503.11733","title":"LLM Agents for Education: Advances and Applications","created":"2025-03-14","cited_by_count":59,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2502.08586","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","created":"2025-02-12","cited_by_count":49,"area":"agents"},{"id":"2512.04123","title":"Measuring Agents in Production","created":"2025-12-02","cited_by_count":37,"area":"agents"},{"id":"2504.19956","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","created":"2025-04-28","cited_by_count":32,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2502.12575","title":"DemonAgent: Dynamically Encrypted Multi-Backdoor Implantation Attack on LLM-based Agent","created":"2025-02-18","cited_by_count":23,"area":"agents"},{"id":"2503.08669","title":"SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints","created":"2025-03-11","cited_by_count":23,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2506.18019","title":"Graphs Meet AI Agents: Taxonomy, Progress, and Future Opportunities","created":"2025-06-22","cited_by_count":23,"area":"agents"},{"id":"2504.03111","title":"Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents","created":"2025-04-04","cited_by_count":22,"area":"agents"},{"id":"2505.16120","title":"LLM-Powered AI Agent Systems and Their Applications in Industry","created":"2025-05-22","cited_by_count":22,"area":"agents"},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2502.14529","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","created":"2025-02-20","cited_by_count":20,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2508.01186","title":"A Survey on Agent Workflow -- Status and Future","created":"2025-08-02","cited_by_count":14,"area":"agents"},{"id":"2603.22862","title":"The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration","created":"2026-03-24","cited_by_count":14,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2512.23343","title":"AI Meets Brain: Memory Systems from Cognitive Neuroscience to Autonomous Agents","created":"2025-12-29","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2509.16330","title":"Generalizability of Large Language Model-Based Agents: A Comprehensive Survey","created":"2025-09-19","cited_by_count":10,"area":"agents"},{"id":"2510.07176","title":"Exposing LLM User Privacy via Traffic Fingerprint Analysis: A Study of Privacy Risks in LLM Agent Interactions","created":"2025-10-08","cited_by_count":10,"area":"agents"},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2505.21550","title":"Position: Collaborative Agentic AI Needs Interoperability Across Ecosystems","created":"2025-05-25","cited_by_count":8,"area":"agents"},{"id":"2604.01487","title":"AgentSocialBench: Evaluating Privacy Risks in Human-Centered Agentic Social Networks","created":"2026-04-01","cited_by_count":7,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2410.22339","title":"DAWN: Designing Distributed Agents in a Worldwide Network","created":"2024-10-11","cited_by_count":6,"area":"agents"},{"id":"2503.21080","title":"EmoDebt: Bayesian-Optimized Emotional Intelligence for Strategic Agent-to-Agent Debt Recovery","created":"2025-03-27","cited_by_count":6,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2605.06812","title":"Towards Security-Auditable LLM Agents: A Unified Graph Representation","created":"2026-05-07","cited_by_count":6,"area":"agents"},{"id":"2505.19260","title":"ALRPHFS: Adversarially Learned Risk Patterns with Hierarchical Fast \\& Slow Reasoning for Robust Agent Defense","created":"2025-05-25","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2604.07003","title":"EmoMAS: Emotion-Aware Multi-Agent System for High-Stakes Edge-Deployable Negotiation with Bayesian Orchestration","created":"2026-04-08","cited_by_count":5,"area":"agents"},{"id":"2607.13987","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","created":"2026-07-15","cited_by_count":5,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2603.22751","title":"Observable Channels, Not Just Storage: Evaluating Privacy Leakage in LLM Agent Pipelines","created":"2026-03-24","cited_by_count":4,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2511.21758","title":"A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2604.20994","title":"Breaking MCP with Function Hijacking Attacks: Novel Threats for Function Calling and Agentic Models","created":"2026-04-22","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2511.07441","title":"AudAgent: Automated Auditing of Privacy Policy Compliance in AI Agents","created":"2025-11-03","cited_by_count":1,"area":"agents"},{"id":"2603.17902","title":"Differential Privacy in Generative AI Agents: Analysis and Optimal Tradeoffs","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2605.07135","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.17548","title":"Rethinking Code Review in the Age of AI: A Vision for Agentic Code Review","created":"2026-05-17","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.12797","title":"The Containment Gap: How Deployed Agentic AI Frameworks Fail Public-Facing Safety Requirements","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2607.04718","title":"FORGE: Research-Trajectory Hijacking Attacks on Deep Research Agents","created":"2026-07-06","cited_by_count":1,"area":"agents"},{"id":"2607.19356","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.00718","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.24957","title":"ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposure","created":"2026-08-25","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2609.13889","title":"When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents","created":"2026-09-12","cited_by_count":1,"area":"agents"},{"id":"2604.01235","title":"Runtime Burden Allocation for Structured LLM Routing in Agentic Expert Systems: A Full-Factorial Cross-Backend Methodology","created":"2026-03-26","cited_by_count":0,"area":"agents"},{"id":"2604.09056","title":"Conversations Risk Detection LLMs in Financial Agents via Multi-Stage Generative Rollout","created":"2026-04-10","cited_by_count":0,"area":"agents"},{"id":"2604.14956","title":"FedGUI: Benchmarking Federated GUI Agents across Heterogeneous Platforms, Devices, and Operating Systems","created":"2026-04-16","cited_by_count":0,"area":"agents"},{"id":"2605.03213","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2605.30604","title":"An Organization-Scoped LLM Agent Runtime Architecture for Regulated Cybersecurity Operations","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2606.25705","title":"GUI agent: Guided Exploration of User-Sensitive Screens","created":"2026-06-24","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2607.09756","title":"LLM-Centric Agentic AI for UAV Swarms: Architecture, Enabling Technologies, and Open Problems","created":"2026-07-05","cited_by_count":0,"area":"agents"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.24069","title":"Poisoning Agentic Alpha: Adversarial Vulnerabilities Across Roles and Architectures in Multi-Agent Trading Systems","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2608.27886","title":"Resource Constraints and Performance in Agentic AI Systems","created":"2026-08-28","cited_by_count":0,"area":"agents"},{"id":"2609.21686","title":"CIPL: A Channel-Aware Framework for Recoverable Privacy Leakage in LLM Agents","created":"2026-09-18","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.31318","title":"AgentXploit: Autonomous Repository-to-Runtime Red-Teaming for AI Agents","created":"2026-09-25","cited_by_count":0,"area":"agents"},{"id":"2609.32643","title":"Business Compromise Detection with Agentic AI and LLM-driven Knowledge Discovery","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"},{"id":"2610.14071","title":"Loose Lips: Understanding Privacy Leakage in Agentic Dialogue","created":"2026-10-07","cited_by_count":0,"area":"agents"}],"next_cursor":null}