{"total":99,"rows":[{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2502.11133","title":"MasRouter: Learning to Route LLMs for Multi-Agent Systems","created":"2025-02-16","cited_by_count":88,"area":"agents"},{"id":"2505.02077","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","created":"2025-05-04","cited_by_count":71,"area":"safety"},{"id":"2503.12188","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","created":"2025-03-15","cited_by_count":53,"area":"agents"},{"id":"2505.19234","title":"GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling","created":"2025-05-25","cited_by_count":36,"area":"agents"},{"id":"2508.17281","title":"From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users","created":"2025-08-24","cited_by_count":32,"area":"agents"},{"id":"2509.23055","title":"Peacemaker or Troublemaker: How Sycophancy Shapes Multi-Agent Debate","created":"2025-09-27","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2507.03041","title":"Optimas: Optimizing Compound AI Systems with Globally Aligned Local Rewards","created":"2025-07-03","cited_by_count":24,"area":null},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2509.14295","title":"Aegis: Automated Error Generation and Attribution for Multi-Agent Systems","created":"2025-09-17","cited_by_count":22,"area":"agents"},{"id":"2602.06176","title":"Large Language Model Reasoning Failures","created":"2026-02-05","cited_by_count":21,"area":"lr"},{"id":"2607.09996","title":"Who&When Pro: Can LLMs Really Attribute Failures in AI Agents?","created":"2026-07-10","cited_by_count":18,"area":"agents"},{"id":"2508.03125","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","created":"2025-08-05","cited_by_count":17,"area":"agents"},{"id":"2602.19843","title":"MAS-FIRE: Fault Injection and Reliability Evaluation for LLM-Based Multi-Agent Systems","created":"2026-02-23","cited_by_count":16,"area":"agents"},{"id":"2511.01008","title":"MARS-SQL: A multi-agent reinforcement learning framework for Text-to-SQL","created":"2025-11-02","cited_by_count":15,"area":"agents"},{"id":"2509.18052","title":"The PIMMUR Principles: Ensuring Validity in Collective Behavior of LLM Societies","created":"2025-09-22","cited_by_count":14,"area":null},{"id":"2511.17826","title":"Deterministic Inference across Tensor Parallel Sizes That Eliminates Training-Inference Mismatch","created":"2025-11-21","cited_by_count":14,"area":null},{"id":"2511.02303","title":"Unlocking the Power of Multi-Agent LLM for Reasoning: From Lazy Agents to Deliberation","created":"2025-11-04","cited_by_count":11,"area":"lr"},{"id":"2512.04668","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","created":"2025-12-04","cited_by_count":11,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2605.23311","title":"DART: Semantic Recoverability for Structured Tool Agents","created":"2026-05-22","cited_by_count":10,"area":"agents"},{"id":"2511.18467","title":"Shadows in the Code: Exploring the Risks and Defenses of LLM-based Multi-Agent Software Development Systems","created":"2025-11-23","cited_by_count":9,"area":"agents"},{"id":"2603.00131","title":"Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systems","created":"2026-02-23","cited_by_count":9,"area":"lr"},{"id":"2605.28655","title":"AutoScientists: Self-Organizing Agent Teams for Long-Running Scientific Experimentation","created":"2026-05-27","cited_by_count":9,"area":null},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2510.16219","title":"SentinelNet: Safeguarding Multi-Agent Collaboration Through Credit-Based Dynamic Threat Detection","created":"2025-10-17","cited_by_count":8,"area":"agents"},{"id":"2511.06448","title":"When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms","created":"2025-11-09","cited_by_count":8,"area":"agents"},{"id":"2602.07186","title":"The Value of Variance: Mitigating Debate Collapse in Multi-Agent Systems via Uncertainty-Driven Policy Optimization","created":"2026-02-06","cited_by_count":8,"area":"lr"},{"id":"2604.24698","title":"The Chameleon's Limit: Investigating Persona Collapse and Homogenization in Large Language Models","created":"2026-04-27","cited_by_count":8,"area":null},{"id":"2603.29848","title":"AgentFixer: From Failure Detection to Fix Recommendations in LLM Agentic Systems","created":"2026-02-18","cited_by_count":7,"area":"agents"},{"id":"2604.07775","title":"ACIArena: Toward Unified Evaluation for Agent Cascading Injection","created":"2026-04-09","cited_by_count":7,"area":null},{"id":"2510.07709","title":"Multimodal Safety Evaluation in Generative Agent Social Simulations","created":"2025-10-09","cited_by_count":6,"area":"agents"},{"id":"2601.14667","title":"INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems","created":"2026-01-21","cited_by_count":6,"area":"agents"},{"id":"2510.01586","title":"AdvEvo-MARL: Shaping Internalized Safety through Adversarial Co-Evolution in Multi-Agent Reinforcement Learning","created":"2025-10-02","cited_by_count":5,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2601.04694","title":"ResMAS: Resilience Optimization in LLM-based Multi-agent Systems","created":"2026-01-08","cited_by_count":5,"area":"agents"},{"id":"2603.27771","title":"Emergent Risks in Generative Multi-Agent Systems","created":"2026-03-29","cited_by_count":5,"area":null},{"id":"2608.06790","title":"AgentChaos: Chaos Engineering for Agent Systems via Programmatic Fault Injection","created":"2026-08-07","cited_by_count":5,"area":"agents"},{"id":"2508.03864","title":"Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety","created":"2025-08-05","cited_by_count":4,"area":"agents"},{"id":"2510.19420","title":"Securing Multi-Agent Systems Against Corruptions via Node Contribution Backpropagation","created":"2025-10-22","cited_by_count":4,"area":"agents"},{"id":"2512.22211","title":"With Great Capabilities Come Great Responsibilities: Introducing the Agentic Risk & Capability Framework for Governing Agentic AI Systems","created":"2025-12-22","cited_by_count":4,"area":"agents"},{"id":"2507.22758","title":"MASCA: LLM based-Multi Agents System for Credit Assessment","created":"2025-07-30","cited_by_count":3,"area":"agents"},{"id":"2511.22924","title":"MAS-Shield: A Defense Framework for Secure and Efficient LLM MAS","created":"2025-11-28","cited_by_count":3,"area":null},{"id":"2602.08306","title":"TextResNet: Decoupling and Routing Optimization Signals in Compound AI Systems via Deep Residual Tuning","created":"2026-02-09","cited_by_count":3,"area":null},{"id":"2603.02960","title":"Architecting Trust in Artificial Epistemic Agents","created":"2026-03-03","cited_by_count":3,"area":"agents"},{"id":"2604.12461","title":"CIA: Inferring the Communication Topology from LLM-based Multi-Agent Systems","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2605.16346","title":"PropGuard: Safeguarding LLM-MAS via Propagation-Aware Exploration and Remediation","created":"2026-05-08","cited_by_count":3,"area":"agents"},{"id":"2606.03467","title":"StepFinder: A Temporal Semantic Framework for Failure Attribution in Multi-Agent Systems","created":"2026-06-02","cited_by_count":3,"area":"agents"},{"id":"2512.21818","title":"Analyzing Code Injection Attacks on LLM-based Multi-Agent Systems in Software Development","created":"2025-12-26","cited_by_count":2,"area":"agents"},{"id":"2602.00428","title":"When Agents \"Misremember\" Collectively: Exploring the Mandela Effect in LLM-based Multi-Agent Systems","created":"2026-01-31","cited_by_count":2,"area":"agents"},{"id":"2602.04431","title":"MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systems","created":"2026-02-04","cited_by_count":2,"area":"agents"},{"id":"2602.23093","title":"Three AI-agents walk into a bar . . . . `Lord of the Flies' tribalism emerges among smart AI-Agents","created":"2026-02-26","cited_by_count":2,"area":"agents"},{"id":"2603.12129","title":"Increasing intelligence in AI agents can worsen collective outcomes","created":"2026-03-12","cited_by_count":2,"area":"agents"},{"id":"2604.06091","title":"Social Dynamics as Critical Vulnerabilities that Undermine Objective Decision-Making in LLM Collectives","created":"2026-04-07","cited_by_count":2,"area":null},{"id":"2605.06320","title":"Improving the Efficiency of Language Agent Teams with Adaptive Task Graphs","created":"2026-05-07","cited_by_count":2,"area":"agents"},{"id":"2605.12364","title":"Attacks and Mitigations for Distributed Governance of Agentic AI under Byzantine Adversaries","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2605.28104","title":"Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification","created":"2026-05-27","cited_by_count":2,"area":"agents"},{"id":"2606.12709","title":"Smarter Saboteurs, Better Fixers: Scaling & Security in Linear Multi-Agent Workflows","created":"2026-06-10","cited_by_count":2,"area":"agents"},{"id":"2606.21666","title":"Hallucination as Context Drift: Synchronization Protocols for Multi-Agent LLM Systems","created":"2026-06-19","cited_by_count":2,"area":"agents"},{"id":"2512.23717","title":"HarmTransform: Transforming Explicit Harmful Queries into Stealthy via Multi-Agent Debate","created":"2025-12-09","cited_by_count":1,"area":"agents"},{"id":"2603.03233","title":"AI-for-Science Low-code Platform with Bayesian Adversarial Multi-Agent Framework","created":"2026-03-03","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2605.09027","title":"GAMBIT: A Three-Mode Benchmark for Adversarial Robustness in Multi-Agent LLM Collectives","created":"2026-05-09","cited_by_count":1,"area":"agents"},{"id":"2605.13213","title":"Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2609.10548","title":"When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systems","created":"2026-06-25","cited_by_count":1,"area":"agents"},{"id":"2511.10687","title":"Who Gets the Reward & Who Gets the Blame? Evaluation-Aligned Training Signals for Multi-LLM Agents","created":"2025-11-11","cited_by_count":0,"area":"agents"},{"id":"2602.04291","title":"Disentangling Intrinsic Importance from Emergent Structure in Multi-Expert Orchestration","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2604.19278","title":"Explicit Trait Inference for Multi-Agent Coordination","created":"2026-04-21","cited_by_count":0,"area":"agents"},{"id":"2604.22820","title":"Complete Cyclic Subtask Graphs for Tool-Using LLM Agents: Flexibility, Cost, and Bottlenecks in Long-Horizon Workflows","created":"2026-04-17","cited_by_count":0,"area":"agents"},{"id":"2605.12856","title":"Moltbook Moderation: Uncovering Hidden Intent Through Multi-Turn Dialogue","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.27586","title":"You Only Align Once: Propagating Cooperative Behaviors in Multi-Agent Systems through Seed Agents","created":"2026-05-26","cited_by_count":0,"area":null},{"id":"2606.12918","title":"MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems","created":"2026-06-11","cited_by_count":0,"area":"safety"},{"id":"2607.18243","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","created":"2026-04-28","cited_by_count":0,"area":"agents"},{"id":"2607.19351","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","created":"2026-05-13","cited_by_count":0,"area":"agents"},{"id":"2608.00426","title":"MAPLE-Guard: Memory-Aware Link Enforcement Against Memory-Link Poisoning in Multi-Agent Systems","created":"2026-08-01","cited_by_count":0,"area":"agents"},{"id":"2608.07457","title":"Interaction Creates Dynamical AI Behavior Absent in Isolation","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.21544","title":"Forgotten in Weights, Recovered by Tools: Agentic Tool Unlearning for LLM Agents","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2609.03192","title":"Where Reliability Lives: Experimental Localisation of Behavioural Properties in an Agent System","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.17464","title":"Decomposition Buys Integrity, Not Yield","created":"2026-09-15","cited_by_count":0,"area":null},{"id":"2609.18460","title":"Collective Loss of Control in LLM Agent Systems: An Epidemic Account of Mutation, Contagion, and Recovery","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.29015","title":"MeshHeal: Two-Timescale Self-Healing for Gray Failures in Decentralized LLM Agent Networks","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.30028","title":"How does Adversarial Influence Scale in Multi-Agent Systems?","created":"2026-09-24","cited_by_count":0,"area":null},{"id":"2609.32802","title":"Re-derivability Decides What a Staged Agent Pipeline Recovers After an Upstream Fault","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.32825","title":"The Decomposition Tax: LLM Pipelines Lose Up to 40 Accuracy Points at Their Own Interfaces","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2609.34701","title":"ResonAct: Streaming Metrics for Runtime Diagnosis and Self-Healing in Multi-Agent Systems","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.38482","title":"PANDA: A Decentralized Architecture with Flexible Orchestration for Scalable, Fault-Tolerant Multi-Agent Systems","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39146","title":"MADBench: Benchmarking the Security of Multi-Agent Debate","created":"2026-09-30","cited_by_count":0,"area":"lr"},{"id":"2610.04836","title":"RSure-Agent: Reliable Use of Tool Observations for Remote Sensing Agents","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.06192","title":"Copies or Sources? Measuring How LLM Aggregators Count Restated Evidence in Multi-Agent Systems","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.12822","title":"Reward Hacking as a Transmissible Strategy in Multi-Agent Coding Systems","created":"2026-10-09","cited_by_count":0,"area":"alignment"},{"id":"2610.16117","title":"Beyond Perfect Teammates: Multi-Agent Collaboration with Unreliable Colleagues","created":"2026-10-12","cited_by_count":0,"area":"agents"},{"id":"2610.20518","title":"The Wealth of Agents: Scaling Agentic AI Across Developers","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}