{"total":35,"rows":[{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2512.23738","title":"Enforcing Temporal Constraints for LLM Agents","created":"2025-12-25","cited_by_count":34,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2508.01710","title":"CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications","created":"2025-08-03","cited_by_count":27,"area":"agents"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2602.07918","title":"CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution","created":"2026-02-08","cited_by_count":14,"area":"agents"},{"id":"2504.08848","title":"X-Guard: Multilingual Guard Agent for Content Moderation","created":"2025-04-11","cited_by_count":13,"area":"agents"},{"id":"2504.20965","title":"AegisLLM: Scaling Agentic Systems for Self-Reflective Defense in LLM Security","created":"2025-04-29","cited_by_count":10,"area":"agents"},{"id":"2608.09885","title":"SHE: Trajectory-driven Safety Harness Evolution for LLM Agents","created":"2026-08-10","cited_by_count":6,"area":"agents"},{"id":"2605.08442","title":"Injection-Execution Dissociation: A Mechanistic Evaluation of Persistent Memory Attacks and Defenses in Stateful LLM Agents","created":"2026-05-08","cited_by_count":5,"area":"agents"},{"id":"2605.17467","title":"VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systems","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2509.25271","title":"RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2507.02986","title":"GAF-Guard: An Agentic Framework for Risk Management and Governance in Large Language Models","created":"2025-07-01","cited_by_count":2,"area":"agents"},{"id":"2510.03485","title":"Learning Efficient Guardrails for Compliance","created":"2025-10-03","cited_by_count":2,"area":"agents"},{"id":"2511.06396","title":"Efficient LLM Safety Evaluation through Multi-Agent Debate","created":"2025-11-09","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2604.18658","title":"Owner-Harm: A Missing Threat Model for AI Agent Safety","created":"2026-04-20","cited_by_count":1,"area":"agents"},{"id":"2610.00400","title":"Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2508.06963","title":"MASteer: Multi-Agent Adaptive Steer Strategy for End-to-End LLM Trustworthiness Repair","created":"2025-08-09","cited_by_count":0,"area":"agents"},{"id":"2605.02187","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2605.18918","title":"ESLD (External Surrogate Latent Defense): A Latent-Space Architecture for Faster, Stronger Prompt-Injection Defense","created":"2026-05-18","cited_by_count":0,"area":"agents"},{"id":"2606.21732","title":"Safe to Check, Unsafe to Use: Relinking at the Compression Boundary of LLM Agents","created":"2026-06-19","cited_by_count":0,"area":"agents"},{"id":"2608.02687","title":"PolicyGuard: Prompt-Configurable Semantic DLP for LLM Coding Agents","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.21101","title":"ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.24275","title":"RePolicy: Reinforcement Learning for Safety-Policy Invocation in Agent Safeguards","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2608.25340","title":"HRGuard: Gating Relationship Manipulation in Multi-Turn Agentic AI Conversations","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2608.25711","title":"Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.22724","title":"MATE: Policy-Aware Security Auditing for Mobile Agents via Synthesis-Driven Trajectory Learning","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.27773","title":"Beyond Unsafe Detection: Counterfactually Anchored Evidence Attribution for Multi-Turn LLM Safety Failures","created":"2026-08-17","cited_by_count":0,"area":"agents"},{"id":"2609.34241","title":"AdaGuard: An Adaptive Guard Model with User-defined Policies","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.38291","title":"HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.07089","title":"Towards a Unified Misuse Monitoring Benchmark","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"}],"next_cursor":null}