{"total":95,"rows":[{"id":"2503.16416","title":"Survey on Evaluation of LLM-based Agents","created":"2025-03-20","cited_by_count":204,"area":"agents"},{"id":"2507.21046","title":"A Survey of Self-Evolving Agents: What, When, How, and Where to Evolve on the Path to Artificial Super Intelligence","created":"2025-07-28","cited_by_count":170,"area":"agents"},{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2412.05467","title":"The BrowserGym Ecosystem for Web Agent Research","created":"2024-12-06","cited_by_count":161,"area":"agents"},{"id":"2412.13501","title":"GUI Agents: A Survey","created":"2024-12-18","cited_by_count":103,"area":"agents"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2503.23350","title":"A Survey of WebAgents: Towards Next-Generation AI Agents for Web Automation with Large Foundation Models","created":"2025-03-30","cited_by_count":87,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2504.11543","title":"REAL: Benchmarking Autonomous Agents on Deterministic Simulations of Real Websites","created":"2025-04-15","cited_by_count":45,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2606.29537","title":"OSWorld 2.0: Benchmarking Computer Use Agents on Long-Horizon Real-World Tasks","created":"2026-06-28","cited_by_count":40,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2503.23434","title":"Towards Trustworthy GUI Agents: A Survey","created":"2025-03-30","cited_by_count":34,"area":"agents"},{"id":"2512.23738","title":"Enforcing Temporal Constraints for LLM Agents","created":"2025-12-25","cited_by_count":34,"area":"agents"},{"id":"2604.05172","title":"ClawsBench: Evaluating Capability and Safety of LLM Productivity Agents in Simulated Workspaces","created":"2026-04-06","cited_by_count":33,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2503.07919","title":"BEARCUBS: A benchmark for computer-using web agents","created":"2025-03-10","cited_by_count":31,"area":"agents"},{"id":"2505.00753","title":"LLM-Based Human-Agent Collaboration and Interaction Systems: A Survey","created":"2025-05-01","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2502.07942","title":"Symbiotic Cooperation for Web Agents: Harnessing Complementary Strengths of Large and Small LLMs","created":"2025-02-11","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2602.05073","title":"Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunities","created":"2026-02-04","cited_by_count":20,"area":"agents"},{"id":"2603.03116","title":"Beyond Task Completion: Revealing Corrupt Success in LLM Agents through Procedure-Aware Evaluation","created":"2026-03-03","cited_by_count":20,"area":"agents"},{"id":"2510.10073","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","created":"2025-10-11","cited_by_count":19,"area":"agents"},{"id":"2510.24411","title":"OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows","created":"2025-10-28","cited_by_count":19,"area":"agents"},{"id":"2506.10953","title":"Build the web for agents, not agents for the web","created":"2025-06-12","cited_by_count":18,"area":"agents"},{"id":"2507.16459","title":"Towards Enforcing Company Policy Adherence in Agentic Workflows","created":"2025-07-22","cited_by_count":18,"area":"agents"},{"id":"2601.05755","title":"VIGIL: Defending LLM Agents Against Tool Stream Injection via Verify-Before-Commit","created":"2026-01-09","cited_by_count":17,"area":"agents"},{"id":"2607.10059","title":"AgentAbstain: Do LLM Agents Know When Not to Act?","created":"2026-07-11","cited_by_count":17,"area":"agents"},{"id":"2510.03285","title":"WAREX: Web Agent Reliability Evaluation on Existing Benchmarks","created":"2025-09-28","cited_by_count":15,"area":"agents"},{"id":"2603.22862","title":"The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration","created":"2026-03-24","cited_by_count":14,"area":"agents"},{"id":"2506.11102","title":"Evolutionary Perspectives on the Evaluation of LLM-Based AI Agents: A Comprehensive Survey","created":"2025-06-06","cited_by_count":13,"area":"agents"},{"id":"2604.28139","title":"Claw-Eval-Live: A Live Agent Benchmark for Evolving Real-World Workflows","created":"2026-04-30","cited_by_count":13,"area":"agents"},{"id":"2510.20333","title":"GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?","created":"2025-10-23","cited_by_count":12,"area":"agents"},{"id":"2605.14271","title":"Auditing Agent Harness Safety","created":"2026-05-14","cited_by_count":11,"area":"agents"},{"id":"2506.09600","title":"Effective Red-Teaming of Policy-Adherent Agents","created":"2025-06-11","cited_by_count":10,"area":"agents"},{"id":"2508.04010","title":"HarmonyGuard: Toward Safety and Utility in Web Agents via Adaptive Policy Enhancement and Dual-Objective Optimization","created":"2025-08-06","cited_by_count":10,"area":"agents"},{"id":"2510.07307","title":"MLE-Smith: Scaling MLE Tasks with Automated Multi-Agent Pipeline","created":"2025-10-08","cited_by_count":9,"area":"agents"},{"id":"2510.19205","title":"WebGraphEval: Multi-Turn Trajectory Evaluation for Web Agents using Graph Representation","created":"2025-10-22","cited_by_count":7,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2506.19998","title":"Doc2Agent: Scalable Generation of Tool-Using Agents from API Documentation","created":"2025-06-24","cited_by_count":5,"area":"agents"},{"id":"2508.09241","title":"FineState-Bench: A Comprehensive Benchmark for Fine-Grained State Control in GUI Agents","created":"2025-08-12","cited_by_count":5,"area":"agents"},{"id":"2510.06607","title":"Your Harness is Not Secure: Benchmarking Real-world Threat of Command Line Interface Agent","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2601.21961","title":"How do Visual Attributes Influence Web Agents? A Comprehensive Evaluation of User Interface Design Factors","created":"2026-01-29","cited_by_count":4,"area":"agents"},{"id":"2603.25747","title":"BeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional Environments","created":"2026-01-30","cited_by_count":4,"area":"agents"},{"id":"2604.10938","title":"AgentWebBench: Benchmarking Multi-Agent Coordination in Agentic Web","created":"2026-04-13","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2605.25707","title":"AgentHijack: Benchmarking Computer Use Agent Robustness to Common Environment Corruptions","created":"2026-05-25","cited_by_count":4,"area":"agents"},{"id":"2507.12844","title":"Machine-Readable Ads: Accessibility and Trust Patterns for AI Web Agents interacting with Online Advertisements","created":"2025-07-17","cited_by_count":3,"area":"agents"},{"id":"2604.15505","title":"PolicyBank: Evolving Policy Understanding for LLM Agents","created":"2026-04-16","cited_by_count":3,"area":"agents"},{"id":"2606.13686","title":"Benchmarking Web Agent Safety under E-commerce Deceptive Interfaces","created":"2026-04-26","cited_by_count":3,"area":"agents"},{"id":"2606.23189","title":"Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2608.02670","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","created":"2026-08-02","cited_by_count":3,"area":"agents"},{"id":"2510.03485","title":"Learning Efficient Guardrails for Compliance","created":"2025-10-03","cited_by_count":2,"area":"agents"},{"id":"2606.04051","title":"RUBAS: Rubric-Based Reinforcement Learning for Agent Safety","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2606.13385","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.20636","title":"SkillHarness: Harnessing Safe Skills for Computer-Use Agents","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2607.05790","title":"Controlling Tool Use with Heading-Specific Activation Steering","created":"2026-07-07","cited_by_count":2,"area":"agents"},{"id":"2607.09016","title":"SLBench: Evaluating How LLM Agents Follow Logical Relations in Skills","created":"2026-07-10","cited_by_count":2,"area":"agents"},{"id":"2607.25398","title":"HANDBOOK.md: A Benchmark for Long-Context Agentic Instruction Following","created":"2026-07-28","cited_by_count":2,"area":"agents"},{"id":"2507.00938","title":"WebArxiv: A Reproducible Benchmark for Evaluating Multimodal Web Agents on arXiv Tasks","created":"2025-07-01","cited_by_count":1,"area":"agents"},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2605.20874","title":"Governance by Construction for Generalist Agents","created":"2026-05-20","cited_by_count":1,"area":"agents"},{"id":"2606.31174","title":"ClawArena-Team: Benchmarking Subagent Orchestration and Dynamic Workflows in Language-Model Agents","created":"2026-06-30","cited_by_count":1,"area":"agents"},{"id":"2607.06118","title":"WebRetriever: A Large-Scale Comprehensive Benchmark for Efficient Web Agent Evaluation","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2607.12056","title":"Designing Agent-Ready Websites for AI Web Agents: A Framework for Machine Readability, Actionability, and Decision Reliability","created":"2026-07-13","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2607.21635","title":"Toward User-Conditioned Evaluation of Personal LLM Agents under Temporal Interventions","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2607.26819","title":"A First Look at Coding Agents' Compliance with AI Contribution Rules in Open-Source Communities","created":"2026-07-29","cited_by_count":1,"area":"agents"},{"id":"2608.07775","title":"AndroidReality: How Far Are Mobile Agents from the Real World?","created":"2026-08-07","cited_by_count":1,"area":"agents"},{"id":"2608.09278","title":"Software Engineering for and with GUI Agent","created":"2026-08-10","cited_by_count":1,"area":"agents"},{"id":"2605.07110","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2605.29224","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2606.06708","title":"Signal-Driven Observation for Long-Horizon Web Agents","created":"2026-06-04","cited_by_count":0,"area":"agents"},{"id":"2606.23927","title":"RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems","created":"2026-06-22","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2607.18548","title":"Engineering Trustworthy Agentic AI for Critical Systems","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2608.00202","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.16349","title":"AeroCopilotBench: A Two-Tier Benchmark for Evaluating LLM Agents as Aviation Copilots in an Interactive Virtual Cockpit Environment","created":"2026-08-17","cited_by_count":0,"area":"agents"},{"id":"2608.17659","title":"MobileWorldSafety: Benchmarking GUI Agent Safety Against Environmental Injection Attacks in Android Apps","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2608.26204","title":"ADeptS-Bench: Measuring the Trustworthiness of Computer Use Agents Across Devices","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2609.00524","title":"Are We There Yet? Assessing Computer-Use Agents for Blind Users' Accessible Interaction with Desktop Applications","created":"2026-09-01","cited_by_count":0,"area":"agents"},{"id":"2609.22724","title":"MATE: Policy-Aware Security Auditing for Mobile Agents via Synthesis-Driven Trajectory Learning","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.26900","title":"Ajar: Measuring Open Privilege in Agent Defenses","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.33017","title":"Trust and Task Completion in the World of Consumer AI Agents","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.36630","title":"Distilling Agentic Systems: A Roadmap across Models, Artifacts, and Harnesses","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.04575","title":"From Probe Scores to Alarm Policies: Operational Validity of Activation Monitors for Language-Model Agents","created":"2026-10-03","cited_by_count":0,"area":"agents"},{"id":"2610.12823","title":"When Charts Deceive Web Agents: A Paired Benchmark for Misleading Visualization-Grounded Tasks","created":"2026-10-09","cited_by_count":0,"area":"agents"},{"id":"2610.13703","title":"A Baseline Assessment for the Agentic Web Technology Stack","created":"2026-10-09","cited_by_count":0,"area":"agents"},{"id":"2610.15150","title":"Harmony Harness: Multi-Objective Self-Evolution of Agent Harnesses","created":"2026-10-10","cited_by_count":0,"area":"agents"},{"id":"2610.16838","title":"Same Operation, Different Permission: Evaluating Whether Guardrails Honor Authorization","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}