{"total":105,"rows":[{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2602.20156","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","created":"2026-02-23","cited_by_count":90,"area":"agents"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2412.15701","title":"Collaborative Gym: A Framework for Enabling and Evaluating Human-Agent Collaboration","created":"2024-12-20","cited_by_count":65,"area":"agents"},{"id":"2504.11281","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","created":"2025-04-15","cited_by_count":59,"area":"agents"},{"id":"2502.12561","title":"UXAgent: An LLM Agent-Based Usability Testing Framework for Web Design","created":"2025-02-18","cited_by_count":40,"area":"agents"},{"id":"2502.01822","title":"Firewalls to Secure Dynamic LLM Agentic Networks","created":"2025-02-03","cited_by_count":36,"area":"agents"},{"id":"2509.17488","title":"Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agents","created":"2025-09-22","cited_by_count":36,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2602.11510","title":"AgentLeak: A Benchmark for Internal-Channel Privacy Leakage in Multi-Agent LLM Systems","created":"2026-02-12","cited_by_count":25,"area":"agents"},{"id":"2503.08669","title":"SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints","created":"2025-03-11","cited_by_count":23,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2508.10880","title":"Searching for Privacy Risks in LLM Agents via Simulation","created":"2025-08-14","cited_by_count":22,"area":"agents"},{"id":"2509.10723","title":"Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight","created":"2025-09-12","cited_by_count":16,"area":"agents"},{"id":"2511.05359","title":"ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations","created":"2025-11-07","cited_by_count":16,"area":"agents"},{"id":"2411.01344","title":"Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent","created":"2024-11-02","cited_by_count":14,"area":"agents"},{"id":"2604.21308","title":"CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents","created":"2026-04-23","cited_by_count":14,"area":"agents"},{"id":"2504.17934","title":"Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents","created":"2025-04-24","cited_by_count":11,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2605.14271","title":"Auditing Agent Harness Safety","created":"2026-05-14","cited_by_count":11,"area":"agents"},{"id":"2504.09407","title":"UXAgent: A System for Simulating Usability Testing of Web Design with LLM Agents","created":"2025-04-13","cited_by_count":10,"area":"agents"},{"id":"2509.01211","title":"Web Fraud Attacks Against LLM-Driven Multi-Agent Systems","created":"2025-09-01","cited_by_count":10,"area":"agents"},{"id":"2603.04902","title":"AgentSCOPE: Evaluating Contextual Privacy Across Agentic Workflows","created":"2026-03-05","cited_by_count":10,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2510.01670","title":"Just Do It!? Computer-Use Agents Exhibit Blind Goal-Directedness","created":"2025-10-02","cited_by_count":9,"area":"agents"},{"id":"2604.13954","title":"HINTBench: Horizon-agent Intrinsic Non-attack Trajectory Benchmark","created":"2026-04-15","cited_by_count":9,"area":"agents"},{"id":"2509.25624","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","created":"2025-09-30","cited_by_count":8,"area":"agents"},{"id":"2603.05520","title":"Information-Theoretic Privacy Control for Sequential Multi-Agent LLM Systems","created":"2026-02-13","cited_by_count":8,"area":"agents"},{"id":"2601.17887","title":"When Personalization Legitimizes Risks: Uncovering Safety Vulnerabilities in Personalized Dialogue Agents","created":"2026-01-25","cited_by_count":7,"area":"agents"},{"id":"2602.13840","title":"PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training","created":"2026-02-14","cited_by_count":7,"area":"agents"},{"id":"2603.02983","title":"Contextualized Privacy Defense for LLM Agents","created":"2026-03-03","cited_by_count":7,"area":"agents"},{"id":"2604.01487","title":"AgentSocialBench: Evaluating Privacy Risks in Human-Centered Agentic Social Networks","created":"2026-04-01","cited_by_count":7,"area":"agents"},{"id":"2605.09530","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2605.09823","title":"CalBench: Evaluating Coordination-Privacy Trade-offs in Multi-Agent LLMs","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2606.28061","title":"ToolPrivacyBench: Benchmarking Purpose-Bound Privacy in Tool-Using LLM Agents","created":"2026-06-26","cited_by_count":7,"area":"agents"},{"id":"2506.20737","title":"MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation","created":"2025-06-25","cited_by_count":6,"area":"agents"},{"id":"2508.13465","title":"LM Agents May Fail to Act on Their Own Risk Knowledge","created":"2025-08-19","cited_by_count":6,"area":"agents"},{"id":"2605.22786","title":"LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems","created":"2026-05-21","cited_by_count":6,"area":"agents"},{"id":"2606.00152","title":"PrivacyPeek: Auditing What LLM-Based Agents Acquire, Not Just What They Say","created":"2026-05-29","cited_by_count":6,"area":"agents"},{"id":"2606.01317","title":"SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces","created":"2026-05-31","cited_by_count":6,"area":"agents"},{"id":"2607.01236","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","created":"2026-05-01","cited_by_count":6,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2605.23989","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2506.13324","title":"Towards Pervasive Distributed Agentic Generative AI -- A State of The Art","created":"2025-06-16","cited_by_count":4,"area":"agents"},{"id":"2512.05065","title":"Personalizing Agent Privacy Decisions via Logical Entailment","created":"2025-12-04","cited_by_count":4,"area":"agents"},{"id":"2603.10268","title":"SpecOps: A Fully Automated AI Agent Testing Framework in Real-World GUI Environments","created":"2026-03-10","cited_by_count":4,"area":"agents"},{"id":"2603.18382","title":"From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents","created":"2026-03-19","cited_by_count":4,"area":"agents"},{"id":"2605.19127","title":"POLAR-Bench: A Diagnostic Benchmark for Privacy-Utility Trade-offs in LLM Agents","created":"2026-05-18","cited_by_count":4,"area":"agents"},{"id":"2509.10018","title":"GAMA: A General Anonymizing Multi-Agent System for Privacy Preservation Enhanced by Domain Rules and Disproof Mechanism","created":"2025-09-12","cited_by_count":3,"area":"agents"},{"id":"2602.13516","title":"SPILLage: Agentic Oversharing on the Web","created":"2026-02-13","cited_by_count":3,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2605.02307","title":"SOTOPIA-TOM: Evaluating Privacy and Information Management in Multi-Agent Interaction with Theory of Mind","created":"2026-05-04","cited_by_count":3,"area":"agents"},{"id":"2606.23189","title":"Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2606.23217","title":"MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2508.03991","title":"Galaxy: A Cognition-Centered Framework for Proactive, Privacy-Preserving, and Self-Evolving LLM Agents","created":"2025-08-06","cited_by_count":2,"area":"agents"},{"id":"2510.10943","title":"The Social Cost of Intelligence: Emergence, Propagation, and Amplification of Stereotypical Bias in Multi-Agent Systems","created":"2025-10-13","cited_by_count":2,"area":"agents"},{"id":"2512.08104","title":"AgentCrypt: Advancing Privacy and (Secure) Computation in AI Agent Collaboration","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.21710","title":"PrivacyAlign: Contextual Privacy Alignment for LLM Agents","created":"2026-06-19","cited_by_count":2,"area":"agents"},{"id":"2607.05318","title":"PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems","created":"2026-07-06","cited_by_count":2,"area":"agents"},{"id":"2512.19016","title":"DREAM: Dynamic Red-teaming across Environments for AI Models","created":"2025-12-22","cited_by_count":1,"area":"agents"},{"id":"2601.14660","title":"NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents","created":"2026-01-21","cited_by_count":1,"area":"agents"},{"id":"2601.17344","title":"The Shadow Self: Intrinsic Value Misalignment in Large Language Model Agents","created":"2026-01-24","cited_by_count":1,"area":"agents"},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2604.12177","title":"Policy-Invisible Violations in LLM-Based Agents","created":"2026-04-14","cited_by_count":1,"area":"agents"},{"id":"2605.16630","title":"PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems","created":"2026-05-15","cited_by_count":1,"area":"agents"},{"id":"2606.07805","title":"Beyond Goodhart's Law: A Dynamic Benchmark for Evaluating Compliance in Multi-Agent Systems","created":"2026-06-05","cited_by_count":1,"area":"agents"},{"id":"2606.17114","title":"An Evaluation of Data Leakage Risks in Tool-Using LLM Agents in Realistic Scenarios","created":"2026-06-15","cited_by_count":1,"area":"agents"},{"id":"2608.04053","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2608.16551","title":"What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents","created":"2026-08-17","cited_by_count":1,"area":"agents"},{"id":"2608.24957","title":"ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposure","created":"2026-08-25","cited_by_count":1,"area":"agents"},{"id":"2609.22200","title":"PII-TRACE: A Benchmark for Context-Aware PII Detection in Multi-Turn LLM Conversations","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2609.26076","title":"Selection-Invariant Communication Compilers for Privacy-Aware Multi-Agent LLM Workflows","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2609.39050","title":"Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2511.18114","title":"ASTRA: Agentic Steerability and Risk Assessment Framework","created":"2025-11-22","cited_by_count":0,"area":"agents"},{"id":"2604.05793","title":"BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines","created":"2026-04-07","cited_by_count":0,"area":"agents"},{"id":"2605.30727","title":"MosaicLeaks:Privacy Risks in Querying-in-the-Open for Deep Research Agents","created":"2026-05-29","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2607.06608","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2608.02613","title":"MemArena: An Ego-Centric Benchmark for On-Device Agentic Personal Memory Assistants at Scale","created":"2026-05-20","cited_by_count":0,"area":"agents"},{"id":"2608.03130","title":"DP-MemView: A Memory Interface for Attribute-Level Transcript Privacy in Long-Term LLM Agents","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.20658","title":"The Claws in Plain Sight: Unauthorized Context Disclosure through LLM Agent Tool Calls","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.21209","title":"Personalized Privacy Control in LLMs via Attention Head Intervention","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.27348","title":"INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2608.29028","title":"Facts Without Rules: Boundary Metadata Collapse in Multi-Agent LLM Handoffs","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2609.03815","title":"Inferring Hidden User Models from the Behavior of Personalized LLM Agents","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.06783","title":"AURA-Eval: Evaluation Framework for Acting Under Risk Awareness in LLM Agent Trajectories","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.13873","title":"PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.14003","title":"Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.33017","title":"Trust and Task Completion in the World of Consumer AI Agents","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.34790","title":"CoSec: Benchmarking Agent Security in Communities","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.35937","title":"PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.39065","title":"Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"}],"next_cursor":"100"}