{"total":41,"rows":[{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2505.14590","title":"MCIP: Protecting MCP Safety via Model Contextual Integrity Protocol","created":"2025-05-20","cited_by_count":34,"area":null},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2603.24414","title":"ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, and Watchers","created":"2026-03-25","cited_by_count":20,"area":null},{"id":"2604.03131","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","created":"2026-04-03","cited_by_count":13,"area":null},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2604.07775","title":"ACIArena: Toward Unified Evaluation for Agent Cascading Injection","created":"2026-04-09","cited_by_count":7,"area":null},{"id":"2605.11003","title":"The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents","created":"2026-05-10","cited_by_count":4,"area":null},{"id":"2605.29253","title":"OpenClawBench: Benchmarking Process-side Anomalies in Real-world Agent Execution Trajectories","created":"2026-05-28","cited_by_count":4,"area":null},{"id":"2608.22808","title":"CatchBench: When Can an Agent Failure Be Caught?","created":"2026-08-24","cited_by_count":3,"area":null},{"id":"2504.14411","title":"Planet as a Brain: Towards Internet of AgentSites based on AIOS Server","created":"2025-04-19","cited_by_count":2,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2605.08310","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","created":"2026-05-08","cited_by_count":2,"area":null},{"id":"2605.12233","title":"No More, No Less: Task Alignment in Terminal Agents","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2606.20510","title":"Efficient and Sound Probabilistic Verification for AI Agents","created":"2026-06-18","cited_by_count":2,"area":null},{"id":"2608.29381","title":"Safe to Resume? Breaking Execution Continuity of Agent Execution via Rollback","created":"2026-08-29","cited_by_count":2,"area":null},{"id":"2609.11030","title":"The Agent Incident Registry: Toward Preventing Repeated AI Agent Failures","created":"2026-09-10","cited_by_count":2,"area":null},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2604.27819","title":"MCPHunt: An Evaluation Framework for Cross-Boundary Data Propagation in Multi-Server MCP Agents","created":"2026-04-30","cited_by_count":1,"area":null},{"id":"2605.13213","title":"Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2602.11651","title":"DMind-3: A Sovereign Edge--Local--Cloud AI System with Controlled Deliberation and Correction-Based Tuning for Safe, Low-Latency Transaction Execution","created":"2026-02-12","cited_by_count":0,"area":null},{"id":"2603.00164","title":"Reverse CAPTCHA: Evaluating LLM Susceptibility to Invisible Unicode Instruction Injection","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2606.12923","title":"Order Is Not Control: Driven-Dissipative Response Laws Across Artificial and Biological Systems","created":"2026-06-11","cited_by_count":0,"area":null},{"id":"2606.24155","title":"MedBench v5: A Dynamic, Process-Oriented, and Hallucination-Aware Benchmark for Clinical Multimodal Models","created":"2026-06-23","cited_by_count":0,"area":null},{"id":"2607.13078","title":"Operational Evidence Gaps for LLMs in Fraud Detection and Trust-and-Safety Workflows","created":"2026-07-12","cited_by_count":0,"area":null},{"id":"2607.16660","title":"From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice","created":"2026-07-18","cited_by_count":0,"area":null},{"id":"2607.17986","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2607.19837","title":"Know Your Agent: Reconnaissance-Driven Pentesting of AI Agents","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2607.23545","title":"Language Shapes Instruction Hierarchy Compliance in Multilingual LLMs","created":"2026-07-26","cited_by_count":0,"area":null},{"id":"2608.12880","title":"Labels Are Not Endpoints: Treatment Leakage and Construct Validity in MCP Agent Security Evaluation","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2609.10724","title":"Finishing the Task Is Not Enough: Evaluating Agent Resilience and Considerate Participation under Accumulating Challenge","created":"2026-09-09","cited_by_count":0,"area":null},{"id":"2609.20095","title":"A Scalable Trust Discovery Architecture for the Internet of Agents","created":"2026-09-17","cited_by_count":0,"area":null},{"id":"2609.23939","title":"XYEval: Agents say yes to bad advice","created":"2026-09-20","cited_by_count":0,"area":null},{"id":"2609.32915","title":"AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2609.33123","title":"Compositional Safety Failures in Harness Evolution: Identification and Runtime Monitoring","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2609.34913","title":"DGF-Bench: A Benchmark for Simulating and Auditing Deception Against Multi-Agent Governance Boards","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.38469","title":"The Backdrop Exposes What the World Around an Agent Costs It","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.13623","title":"APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces","created":"2026-10-09","cited_by_count":0,"area":null},{"id":"2610.14477","title":"What Counts as the Same Task? Executable Contracts for Robustness Evaluation of Tool-Using Agents","created":"2026-10-10","cited_by_count":0,"area":null}],"next_cursor":null}