{"total":41,"rows":[{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2504.00906","title":"Agent S2: A Compositional Generalist-Specialist Framework for Computer Use Agents","created":"2025-04-01","cited_by_count":159,"area":"agents"},{"id":"2504.18575","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","created":"2025-04-22","cited_by_count":157,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2411.02391","title":"Attacking Vision-Language Computer Agents via Pop-ups","created":"2024-11-04","cited_by_count":116,"area":"agents"},{"id":"2412.13501","title":"GUI Agents: A Survey","created":"2024-12-18","cited_by_count":103,"area":"agents"},{"id":"2506.02456","title":"VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents","created":"2025-06-03","cited_by_count":45,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2412.18116","title":"AutoDroid-V2: Boosting SLM-based GUI Agents via Code Generation","created":"2024-12-24","cited_by_count":34,"area":"agents"},{"id":"2503.23434","title":"Towards Trustworthy GUI Agents: A Survey","created":"2025-03-30","cited_by_count":34,"area":"agents"},{"id":"2506.04135","title":"macOSWorld: A Multilingual Interactive Benchmark for GUI Agents","created":"2025-06-04","cited_by_count":32,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2503.16465","title":"OS-Kairos: Adaptive Interaction for MLLM-Powered GUI Agents","created":"2025-02-26","cited_by_count":25,"area":"agents"},{"id":"2604.02623","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","created":"2026-04-03","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2502.13053","title":"Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks","created":"2025-02-18","cited_by_count":22,"area":"agents"},{"id":"2502.15760","title":"Digi-Q: Learning Q-Value Functions for Training Device-Control Agents","created":"2025-02-13","cited_by_count":20,"area":"agents"},{"id":"2507.21017","title":"MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them","created":"2025-07-28","cited_by_count":16,"area":"agents"},{"id":"2505.14418","title":"Hidden Ghost Hand: Unveiling Backdoor Vulnerabilities in MLLM-Powered Mobile GUI Agents","created":"2025-05-20","cited_by_count":13,"area":"agents"},{"id":"2506.08972","title":"Atomic-to-Compositional Generalization for Mobile Agents with A New Benchmark and Scheduling System","created":"2025-06-10","cited_by_count":12,"area":"agents"},{"id":"2510.20333","title":"GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?","created":"2025-10-23","cited_by_count":12,"area":"agents"},{"id":"2505.21499","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","created":"2025-05-27","cited_by_count":10,"area":"agents"},{"id":"2509.16330","title":"Generalizability of Large Language Model-Based Agents: A Comprehensive Survey","created":"2025-09-19","cited_by_count":10,"area":"agents"},{"id":"2510.14621","title":"ColorBench: Benchmarking Mobile Agents with Graph-Structured Framework for Complex Long-Horizon Tasks","created":"2025-10-16","cited_by_count":10,"area":"agents"},{"id":"2510.11035","title":"SusBench: An Online Benchmark for Evaluating Dark Pattern Susceptibility of Computer-Use Agents","created":"2025-10-13","cited_by_count":8,"area":"agents"},{"id":"2509.11250","title":"Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments","created":"2025-09-14","cited_by_count":6,"area":"agents"},{"id":"2507.04227","title":"Mobile GUI Agents under Real-world Threats: Are We There Yet?","created":"2025-07-06","cited_by_count":5,"area":"agents"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2605.25707","title":"AgentHijack: Benchmarking Computer Use Agent Robustness to Common Environment Corruptions","created":"2026-05-25","cited_by_count":4,"area":"agents"},{"id":"2505.17861","title":"Superplatforms Have to Attack AI Agents","created":"2025-05-23","cited_by_count":3,"area":"agents"},{"id":"2604.09574","title":"Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization","created":"2026-02-24","cited_by_count":3,"area":"agents"},{"id":"2605.05509","title":"WAAA! Web Adversaries Against Agentic Browsers","created":"2026-05-06","cited_by_count":3,"area":"agents"},{"id":"2603.23007","title":"AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents","created":"2026-03-24","cited_by_count":2,"area":"agents"},{"id":"2605.01208","title":"Faithful Mobile GUI Agents with Guided Advantage Estimator","created":"2026-05-02","cited_by_count":1,"area":"agents"},{"id":"2605.06731","title":"When Routine Chats Turn Toxic: Unintended Long-Term State Poisoning in Personalized Agents","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2607.08147","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","created":"2026-07-09","cited_by_count":1,"area":"agents"},{"id":"2608.20379","title":"A Survey on Foundations and Frontiers of Multimodal Agentic Frameworks: Techniques and Applications","created":"2026-06-28","cited_by_count":1,"area":"agents"},{"id":"2609.09212","title":"AgentHijack: Visual Patch Attacks on Multimodal Computer-Use Agents","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2610.19910","title":"When Non-Adversarial Noise Hurts Learning: Benchmarking Skill Self-Evolution in Agents","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}