{"total":133,"rows":[{"id":"2503.16416","title":"Survey on Evaluation of LLM-based Agents","created":"2025-03-20","cited_by_count":204,"area":"agents"},{"id":"2507.21046","title":"A Survey of Self-Evolving Agents: What, When, How, and Where to Evolve on the Path to Artificial Super Intelligence","created":"2025-07-28","cited_by_count":170,"area":"agents"},{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2412.05467","title":"The BrowserGym Ecosystem for Web Agent Research","created":"2024-12-06","cited_by_count":161,"area":"agents"},{"id":"2503.22738","title":"ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning","created":"2025-03-26","cited_by_count":151,"area":"lr"},{"id":"2412.13501","title":"GUI Agents: A Survey","created":"2024-12-18","cited_by_count":103,"area":"agents"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2503.23350","title":"A Survey of WebAgents: Towards Next-Generation AI Agents for Web Automation with Large Foundation Models","created":"2025-03-30","cited_by_count":87,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2504.11543","title":"REAL: Benchmarking Autonomous Agents on Deterministic Simulations of Real Websites","created":"2025-04-15","cited_by_count":45,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2504.14603","title":"UFO2: The Desktop AgentOS","created":"2025-04-20","cited_by_count":41,"area":null},{"id":"2606.29537","title":"OSWorld 2.0: Benchmarking Computer Use Agents on Long-Horizon Real-World Tasks","created":"2026-06-28","cited_by_count":40,"area":"agents"},{"id":"2506.00618","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","created":"2025-05-31","cited_by_count":35,"area":"mllm"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2503.23434","title":"Towards Trustworthy GUI Agents: A Survey","created":"2025-03-30","cited_by_count":34,"area":"agents"},{"id":"2512.23738","title":"Enforcing Temporal Constraints for LLM Agents","created":"2025-12-25","cited_by_count":34,"area":"agents"},{"id":"2604.05172","title":"ClawsBench: Evaluating Capability and Safety of LLM Productivity Agents in Simulated Workspaces","created":"2026-04-06","cited_by_count":33,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2503.01861","title":"Towards Enterprise-Ready Computer Using Generalist Agent","created":"2025-02-24","cited_by_count":31,"area":null},{"id":"2503.07919","title":"BEARCUBS: A benchmark for computer-using web agents","created":"2025-03-10","cited_by_count":31,"area":"agents"},{"id":"2505.00753","title":"LLM-Based Human-Agent Collaboration and Interaction Systems: A Survey","created":"2025-05-01","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2502.07942","title":"Symbiotic Cooperation for Web Agents: Harnessing Complementary Strengths of Large and Small LLMs","created":"2025-02-11","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2602.05073","title":"Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunities","created":"2026-02-04","cited_by_count":20,"area":"agents"},{"id":"2603.03116","title":"Beyond Task Completion: Revealing Corrupt Success in LLM Agents through Procedure-Aware Evaluation","created":"2026-03-03","cited_by_count":20,"area":"agents"},{"id":"2510.10073","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","created":"2025-10-11","cited_by_count":19,"area":"agents"},{"id":"2510.24411","title":"OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows","created":"2025-10-28","cited_by_count":19,"area":"agents"},{"id":"2506.10953","title":"Build the web for agents, not agents for the web","created":"2025-06-12","cited_by_count":18,"area":"agents"},{"id":"2507.16459","title":"Towards Enforcing Company Policy Adherence in Agentic Workflows","created":"2025-07-22","cited_by_count":18,"area":"agents"},{"id":"2601.05755","title":"VIGIL: Defending LLM Agents Against Tool Stream Injection via Verify-Before-Commit","created":"2026-01-09","cited_by_count":17,"area":"agents"},{"id":"2607.10059","title":"AgentAbstain: Do LLM Agents Know When Not to Act?","created":"2026-07-11","cited_by_count":17,"area":"agents"},{"id":"2507.19672","title":"Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges","created":"2025-07-25","cited_by_count":15,"area":"alignment"},{"id":"2510.03285","title":"WAREX: Web Agent Reliability Evaluation on Existing Benchmarks","created":"2025-09-28","cited_by_count":15,"area":"agents"},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2603.22862","title":"The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration","created":"2026-03-24","cited_by_count":14,"area":"agents"},{"id":"2506.11102","title":"Evolutionary Perspectives on the Evaluation of LLM-Based AI Agents: A Comprehensive Survey","created":"2025-06-06","cited_by_count":13,"area":"agents"},{"id":"2604.28139","title":"Claw-Eval-Live: A Live Agent Benchmark for Evolving Real-World Workflows","created":"2026-04-30","cited_by_count":13,"area":"agents"},{"id":"2510.20333","title":"GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?","created":"2025-10-23","cited_by_count":12,"area":"agents"},{"id":"2601.22130","title":"World of Workflows: A Benchmark for Bringing World Models to Enterprise Systems","created":"2026-01-29","cited_by_count":11,"area":"wm"},{"id":"2605.14271","title":"Auditing Agent Harness Safety","created":"2026-05-14","cited_by_count":11,"area":"agents"},{"id":"2506.09600","title":"Effective Red-Teaming of Policy-Adherent Agents","created":"2025-06-11","cited_by_count":10,"area":"agents"},{"id":"2508.04010","title":"HarmonyGuard: Toward Safety and Utility in Web Agents via Adaptive Policy Enhancement and Dual-Objective Optimization","created":"2025-08-06","cited_by_count":10,"area":"agents"},{"id":"2605.08545","title":"Log analysis is necessary for credible evaluation of AI agents","created":"2026-05-08","cited_by_count":10,"area":null},{"id":"2510.07307","title":"MLE-Smith: Scaling MLE Tasks with Automated Multi-Agent Pipeline","created":"2025-10-08","cited_by_count":9,"area":"agents"},{"id":"2505.22942","title":"WorkForceAgent-R1: Incentivizing Reasoning Capability in LLM-based Web Agents via Reinforcement Learning","created":"2025-05-28","cited_by_count":8,"area":"lr"},{"id":"2601.09172","title":"BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearning","created":"2026-01-14","cited_by_count":8,"area":"safety"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2510.00507","title":"Graph2Eval: Automatic Multimodal Task Generation for Agents via Knowledge Graphs","created":"2025-10-01","cited_by_count":7,"area":"mllm"},{"id":"2510.19205","title":"WebGraphEval: Multi-Turn Trajectory Evaluation for Web Agents using Graph Representation","created":"2025-10-22","cited_by_count":7,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2506.19998","title":"Doc2Agent: Scalable Generation of Tool-Using Agents from API Documentation","created":"2025-06-24","cited_by_count":5,"area":"agents"},{"id":"2508.09241","title":"FineState-Bench: A Comprehensive Benchmark for Fine-Grained State Control in GUI Agents","created":"2025-08-12","cited_by_count":5,"area":"agents"},{"id":"2510.06607","title":"Your Harness is Not Secure: Benchmarking Real-world Threat of Command Line Interface Agent","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2510.23856","title":"From Benchmarks to Business Impact: Deploying IBM Generalist Agent in Enterprise Production","created":"2025-10-27","cited_by_count":5,"area":null},{"id":"2603.29020","title":"Emergence WebVoyager: Toward Consistent and Transparent Evaluation of (Web) Agents in The Wild","created":"2026-03-30","cited_by_count":5,"area":null},{"id":"2604.10988","title":"WebForge: Breaking the Realism-Reproducibility-Scalability Trilemma in Browser Agent Benchmark","created":"2026-04-13","cited_by_count":5,"area":null},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2601.21961","title":"How do Visual Attributes Influence Web Agents? A Comprehensive Evaluation of User Interface Design Factors","created":"2026-01-29","cited_by_count":4,"area":"agents"},{"id":"2603.25747","title":"BeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional Environments","created":"2026-01-30","cited_by_count":4,"area":"agents"},{"id":"2604.10938","title":"AgentWebBench: Benchmarking Multi-Agent Coordination in Agentic Web","created":"2026-04-13","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2605.25707","title":"AgentHijack: Benchmarking Computer Use Agent Robustness to Common Environment Corruptions","created":"2026-05-25","cited_by_count":4,"area":"agents"},{"id":"2507.12844","title":"Machine-Readable Ads: Accessibility and Trust Patterns for AI Web Agents interacting with Online Advertisements","created":"2025-07-17","cited_by_count":3,"area":"agents"},{"id":"2512.23328","title":"CubeBench: Diagnosing Interactive, Long-Horizon Spatial Reasoning Under Partial Observations","created":"2025-12-29","cited_by_count":3,"area":"lr"},{"id":"2604.15505","title":"PolicyBank: Evolving Policy Understanding for LLM Agents","created":"2026-04-16","cited_by_count":3,"area":"agents"},{"id":"2606.00341","title":"ROGUE: Evaluating Corrigibility Failures in Frontier Computer-Use Agents","created":"2026-05-29","cited_by_count":3,"area":null},{"id":"2606.05342","title":"SentinelBench: A Benchmark for Long-Running Monitoring Agents","created":"2026-06-03","cited_by_count":3,"area":null},{"id":"2606.08049","title":"SKILL.nb: Selective Formalization and Gated Execution for Durable Agent Workflows","created":"2026-06-06","cited_by_count":3,"area":null},{"id":"2606.13686","title":"Benchmarking Web Agent Safety under E-commerce Deceptive Interfaces","created":"2026-04-26","cited_by_count":3,"area":"agents"},{"id":"2606.23189","title":"Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2608.02670","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","created":"2026-08-02","cited_by_count":3,"area":"agents"},{"id":"2510.03485","title":"Learning Efficient Guardrails for Compliance","created":"2025-10-03","cited_by_count":2,"area":"agents"},{"id":"2510.17491","title":"Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agents","created":"2025-10-20","cited_by_count":2,"area":"lr"},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2604.15579","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","created":"2026-04-16","cited_by_count":2,"area":"safety"},{"id":"2605.12233","title":"No More, No Less: Task Alignment in Terminal Agents","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2606.04051","title":"RUBAS: Rubric-Based Reinforcement Learning for Agent Safety","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2606.13385","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.20636","title":"SkillHarness: Harnessing Safe Skills for Computer-Use Agents","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2607.05790","title":"Controlling Tool Use with Heading-Specific Activation Steering","created":"2026-07-07","cited_by_count":2,"area":"agents"},{"id":"2607.09016","title":"SLBench: Evaluating How LLM Agents Follow Logical Relations in Skills","created":"2026-07-10","cited_by_count":2,"area":"agents"},{"id":"2607.25398","title":"HANDBOOK.md: A Benchmark for Long-Context Agentic Instruction Following","created":"2026-07-28","cited_by_count":2,"area":"agents"},{"id":"2507.00938","title":"WebArxiv: A Reproducible Benchmark for Evaluating Multimodal Web Agents on arXiv Tasks","created":"2025-07-01","cited_by_count":1,"area":"agents"},{"id":"2602.00851","title":"Persuasion Propagation: Does Persuasion Change AI Agent Behavior?","created":"2026-01-31","cited_by_count":1,"area":null},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2605.20874","title":"Governance by Construction for Generalist Agents","created":"2026-05-20","cited_by_count":1,"area":"agents"},{"id":"2605.30693","title":"Triaging Threats to Specialized Guardrails","created":"2026-05-29","cited_by_count":1,"area":"safety"},{"id":"2606.31174","title":"ClawArena-Team: Benchmarking Subagent Orchestration and Dynamic Workflows in Language-Model Agents","created":"2026-06-30","cited_by_count":1,"area":"agents"},{"id":"2607.06118","title":"WebRetriever: A Large-Scale Comprehensive Benchmark for Efficient Web Agent Evaluation","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2607.12056","title":"Designing Agent-Ready Websites for AI Web Agents: A Framework for Machine Readability, Actionability, and Decision Reliability","created":"2026-07-13","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2607.21635","title":"Toward User-Conditioned Evaluation of Personal LLM Agents under Temporal Interventions","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2607.26819","title":"A First Look at Coding Agents' Compliance with AI Contribution Rules in Open-Source Communities","created":"2026-07-29","cited_by_count":1,"area":"agents"},{"id":"2608.07775","title":"AndroidReality: How Far Are Mobile Agents from the Real World?","created":"2026-08-07","cited_by_count":1,"area":"agents"}],"next_cursor":"100"}