{"total":69,"rows":[{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2502.11133","title":"MasRouter: Learning to Route LLMs for Multi-Agent Systems","created":"2025-02-16","cited_by_count":88,"area":"agents"},{"id":"2503.12188","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","created":"2025-03-15","cited_by_count":53,"area":"agents"},{"id":"2505.19234","title":"GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling","created":"2025-05-25","cited_by_count":36,"area":"agents"},{"id":"2508.17281","title":"From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users","created":"2025-08-24","cited_by_count":32,"area":"agents"},{"id":"2509.23055","title":"Peacemaker or Troublemaker: How Sycophancy Shapes Multi-Agent Debate","created":"2025-09-27","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2509.14295","title":"Aegis: Automated Error Generation and Attribution for Multi-Agent Systems","created":"2025-09-17","cited_by_count":22,"area":"agents"},{"id":"2607.09996","title":"Who&When Pro: Can LLMs Really Attribute Failures in AI Agents?","created":"2026-07-10","cited_by_count":18,"area":"agents"},{"id":"2508.03125","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","created":"2025-08-05","cited_by_count":17,"area":"agents"},{"id":"2602.19843","title":"MAS-FIRE: Fault Injection and Reliability Evaluation for LLM-Based Multi-Agent Systems","created":"2026-02-23","cited_by_count":16,"area":"agents"},{"id":"2511.01008","title":"MARS-SQL: A multi-agent reinforcement learning framework for Text-to-SQL","created":"2025-11-02","cited_by_count":15,"area":"agents"},{"id":"2512.04668","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","created":"2025-12-04","cited_by_count":11,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2605.23311","title":"DART: Semantic Recoverability for Structured Tool Agents","created":"2026-05-22","cited_by_count":10,"area":"agents"},{"id":"2511.18467","title":"Shadows in the Code: Exploring the Risks and Defenses of LLM-based Multi-Agent Software Development Systems","created":"2025-11-23","cited_by_count":9,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2510.16219","title":"SentinelNet: Safeguarding Multi-Agent Collaboration Through Credit-Based Dynamic Threat Detection","created":"2025-10-17","cited_by_count":8,"area":"agents"},{"id":"2511.06448","title":"When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms","created":"2025-11-09","cited_by_count":8,"area":"agents"},{"id":"2603.29848","title":"AgentFixer: From Failure Detection to Fix Recommendations in LLM Agentic Systems","created":"2026-02-18","cited_by_count":7,"area":"agents"},{"id":"2510.07709","title":"Multimodal Safety Evaluation in Generative Agent Social Simulations","created":"2025-10-09","cited_by_count":6,"area":"agents"},{"id":"2601.14667","title":"INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems","created":"2026-01-21","cited_by_count":6,"area":"agents"},{"id":"2510.01586","title":"AdvEvo-MARL: Shaping Internalized Safety through Adversarial Co-Evolution in Multi-Agent Reinforcement Learning","created":"2025-10-02","cited_by_count":5,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2601.04694","title":"ResMAS: Resilience Optimization in LLM-based Multi-agent Systems","created":"2026-01-08","cited_by_count":5,"area":"agents"},{"id":"2608.06790","title":"AgentChaos: Chaos Engineering for Agent Systems via Programmatic Fault Injection","created":"2026-08-07","cited_by_count":5,"area":"agents"},{"id":"2508.03864","title":"Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety","created":"2025-08-05","cited_by_count":4,"area":"agents"},{"id":"2510.19420","title":"Securing Multi-Agent Systems Against Corruptions via Node Contribution Backpropagation","created":"2025-10-22","cited_by_count":4,"area":"agents"},{"id":"2512.22211","title":"With Great Capabilities Come Great Responsibilities: Introducing the Agentic Risk & Capability Framework for Governing Agentic AI Systems","created":"2025-12-22","cited_by_count":4,"area":"agents"},{"id":"2507.22758","title":"MASCA: LLM based-Multi Agents System for Credit Assessment","created":"2025-07-30","cited_by_count":3,"area":"agents"},{"id":"2603.02960","title":"Architecting Trust in Artificial Epistemic Agents","created":"2026-03-03","cited_by_count":3,"area":"agents"},{"id":"2604.12461","title":"CIA: Inferring the Communication Topology from LLM-based Multi-Agent Systems","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2605.16346","title":"PropGuard: Safeguarding LLM-MAS via Propagation-Aware Exploration and Remediation","created":"2026-05-08","cited_by_count":3,"area":"agents"},{"id":"2606.03467","title":"StepFinder: A Temporal Semantic Framework for Failure Attribution in Multi-Agent Systems","created":"2026-06-02","cited_by_count":3,"area":"agents"},{"id":"2512.21818","title":"Analyzing Code Injection Attacks on LLM-based Multi-Agent Systems in Software Development","created":"2025-12-26","cited_by_count":2,"area":"agents"},{"id":"2602.00428","title":"When Agents \"Misremember\" Collectively: Exploring the Mandela Effect in LLM-based Multi-Agent Systems","created":"2026-01-31","cited_by_count":2,"area":"agents"},{"id":"2602.04431","title":"MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systems","created":"2026-02-04","cited_by_count":2,"area":"agents"},{"id":"2602.23093","title":"Three AI-agents walk into a bar . . . . `Lord of the Flies' tribalism emerges among smart AI-Agents","created":"2026-02-26","cited_by_count":2,"area":"agents"},{"id":"2603.12129","title":"Increasing intelligence in AI agents can worsen collective outcomes","created":"2026-03-12","cited_by_count":2,"area":"agents"},{"id":"2605.06320","title":"Improving the Efficiency of Language Agent Teams with Adaptive Task Graphs","created":"2026-05-07","cited_by_count":2,"area":"agents"},{"id":"2605.28104","title":"Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification","created":"2026-05-27","cited_by_count":2,"area":"agents"},{"id":"2606.12709","title":"Smarter Saboteurs, Better Fixers: Scaling & Security in Linear Multi-Agent Workflows","created":"2026-06-10","cited_by_count":2,"area":"agents"},{"id":"2606.21666","title":"Hallucination as Context Drift: Synchronization Protocols for Multi-Agent LLM Systems","created":"2026-06-19","cited_by_count":2,"area":"agents"},{"id":"2512.23717","title":"HarmTransform: Transforming Explicit Harmful Queries into Stealthy via Multi-Agent Debate","created":"2025-12-09","cited_by_count":1,"area":"agents"},{"id":"2603.03233","title":"AI-for-Science Low-code Platform with Bayesian Adversarial Multi-Agent Framework","created":"2026-03-03","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2605.09027","title":"GAMBIT: A Three-Mode Benchmark for Adversarial Robustness in Multi-Agent LLM Collectives","created":"2026-05-09","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2609.10548","title":"When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systems","created":"2026-06-25","cited_by_count":1,"area":"agents"},{"id":"2511.10687","title":"Who Gets the Reward & Who Gets the Blame? Evaluation-Aligned Training Signals for Multi-LLM Agents","created":"2025-11-11","cited_by_count":0,"area":"agents"},{"id":"2604.19278","title":"Explicit Trait Inference for Multi-Agent Coordination","created":"2026-04-21","cited_by_count":0,"area":"agents"},{"id":"2604.22820","title":"Complete Cyclic Subtask Graphs for Tool-Using LLM Agents: Flexibility, Cost, and Bottlenecks in Long-Horizon Workflows","created":"2026-04-17","cited_by_count":0,"area":"agents"},{"id":"2607.18243","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","created":"2026-04-28","cited_by_count":0,"area":"agents"},{"id":"2607.19351","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","created":"2026-05-13","cited_by_count":0,"area":"agents"},{"id":"2608.00426","title":"MAPLE-Guard: Memory-Aware Link Enforcement Against Memory-Link Poisoning in Multi-Agent Systems","created":"2026-08-01","cited_by_count":0,"area":"agents"},{"id":"2608.21544","title":"Forgotten in Weights, Recovered by Tools: Agentic Tool Unlearning for LLM Agents","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2609.03192","title":"Where Reliability Lives: Experimental Localisation of Behavioural Properties in an Agent System","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.18460","title":"Collective Loss of Control in LLM Agent Systems: An Epidemic Account of Mutation, Contagion, and Recovery","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.29015","title":"MeshHeal: Two-Timescale Self-Healing for Gray Failures in Decentralized LLM Agent Networks","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.32802","title":"Re-derivability Decides What a Staged Agent Pipeline Recovers After an Upstream Fault","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.38482","title":"PANDA: A Decentralized Architecture with Flexible Orchestration for Scalable, Fault-Tolerant Multi-Agent Systems","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.06192","title":"Copies or Sources? Measuring How LLM Aggregators Count Restated Evidence in Multi-Agent Systems","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.16117","title":"Beyond Perfect Teammates: Multi-Agent Collaboration with Unreliable Colleagues","created":"2026-10-12","cited_by_count":0,"area":"agents"},{"id":"2610.20518","title":"The Wealth of Agents: Scaling Agentic AI Across Developers","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}