{"total":59,"rows":[{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2411.02391","title":"Attacking Vision-Language Computer Agents via Pop-ups","created":"2024-11-04","cited_by_count":116,"area":"agents"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2505.11717","title":"WebInject: Prompt Injection Attack to Web Agents","created":"2025-05-16","cited_by_count":51,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2510.04885","title":"RL Is a Hammer and LLMs Are Nails: A Simple Reinforcement Learning Recipe for Strong Prompt Injection","created":"2025-10-06","cited_by_count":36,"area":"agents"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2604.06811","title":"SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems","created":"2026-04-08","cited_by_count":25,"area":"agents"},{"id":"2503.01908","title":"UDora: A Unified Red Teaming Framework against LLM Agents by Dynamically Hijacking Their Own Reasoning","created":"2025-02-28","cited_by_count":21,"area":"lr"},{"id":"2602.09222","title":"MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks","created":"2026-02-09","cited_by_count":21,"area":"agents"},{"id":"2601.05755","title":"VIGIL: Defending LLM Agents Against Tool Stream Injection via Verify-Before-Commit","created":"2026-01-09","cited_by_count":17,"area":"agents"},{"id":"2601.04566","title":"BackdoorAgent: A Unified Framework for Backdoor Attacks on LLM-based Agents","created":"2026-01-08","cited_by_count":16,"area":"agents"},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2510.20333","title":"GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?","created":"2025-10-23","cited_by_count":12,"area":"agents"},{"id":"2503.09241","title":"In-Context Defense in Computer Agents: An Empirical Study","created":"2025-03-12","cited_by_count":10,"area":"mllm"},{"id":"2505.12981","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","created":"2025-05-19","cited_by_count":10,"area":"agents"},{"id":"2601.04795","title":"Defense Against Indirect Prompt Injection via Tool Result Parsing","created":"2026-01-08","cited_by_count":9,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2509.11250","title":"Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments","created":"2025-09-14","cited_by_count":6,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2510.06607","title":"Your Harness is Not Secure: Benchmarking Real-world Threat of Command Line Interface Agent","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2510.18314","title":"Genesis: Evolving Attack Strategies for LLM Web Agent Red-Teaming","created":"2025-10-21","cited_by_count":5,"area":"agents"},{"id":"2510.26037","title":"SIRAJ: Diverse and Efficient Red-Teaming for LLM Agents via Distilled Structured Reasoning","created":"2025-10-30","cited_by_count":5,"area":"lr"},{"id":"2512.02321","title":"LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems","created":"2025-12-02","cited_by_count":5,"area":"agents"},{"id":"2606.15057","title":"AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents","created":"2026-06-13","cited_by_count":5,"area":"agents"},{"id":"2510.04257","title":"AgentTypo: Adaptive Typographic Prompt Injection Attacks against Black-box Multimodal Agents","created":"2025-10-05","cited_by_count":4,"area":"mllm"},{"id":"2605.05704","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","created":"2026-05-07","cited_by_count":4,"area":"agents"},{"id":"2505.17861","title":"Superplatforms Have to Attack AI Agents","created":"2025-05-23","cited_by_count":3,"area":"agents"},{"id":"2603.18762","title":"ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation","created":"2026-03-19","cited_by_count":3,"area":"agents"},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3,"area":"agents"},{"id":"2604.09574","title":"Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization","created":"2026-02-24","cited_by_count":3,"area":"agents"},{"id":"2607.05277","title":"Untrusted Content Masking for Web Agents with Security Guarantees","created":"2026-07-06","cited_by_count":3,"area":"agents"},{"id":"2510.23675","title":"QueryIPI: Query-agnostic Indirect Prompt Injection on Coding Agents","created":"2025-10-27","cited_by_count":2,"area":"agents"},{"id":"2601.08406","title":"WebTrap Park: An Automated Platform for Systematic Security Evaluation of Web Agents","created":"2026-01-13","cited_by_count":2,"area":"agents"},{"id":"2603.04364","title":"Dual-Modality Multi-Stage Adversarial Safety Training: Robustifying Multimodal Web Agents Against Cross-Modal Attacks","created":"2026-03-04","cited_by_count":2,"area":"agents"},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2605.11047","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","created":"2026-05-11","cited_by_count":2,"area":"agents"},{"id":"2606.02449","title":"HLL: Can Agents Cross Humanity's Last Line of Verification?","created":"2026-06-01","cited_by_count":1,"area":null},{"id":"2606.05233","title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","created":"2026-06-03","cited_by_count":1,"area":"agents"},{"id":"2607.08147","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","created":"2026-07-09","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2608.09278","title":"Software Engineering for and with GUI Agent","created":"2026-08-10","cited_by_count":1,"area":"agents"},{"id":"2609.13889","title":"When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents","created":"2026-09-12","cited_by_count":1,"area":"agents"},{"id":"2511.18114","title":"ASTRA: Agentic Steerability and Risk Assessment Framework","created":"2025-11-22","cited_by_count":0,"area":"agents"},{"id":"2606.20717","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","created":"2026-06-16","cited_by_count":0,"area":"agents"},{"id":"2607.24893","title":"Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study","created":"2026-07-27","cited_by_count":0,"area":"agents"},{"id":"2608.00677","title":"OpenART: Scaling Agent Red Teaming via Open-Ended Environment Evolution","created":"2026-08-01","cited_by_count":0,"area":"safety"},{"id":"2608.04018","title":"Governing Execution Risk in Agentic AI Systems: A Trajectory-Guided Framework for Red Teaming","created":"2026-06-23","cited_by_count":0,"area":"agents"},{"id":"2608.12977","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.30207","title":"SIR: Self-improving Red-teaming for Compute Use Agents","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.15134","title":"HazardAuditor: From Executable Threats to Safer Computer-Use Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.32915","title":"AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2610.17457","title":"BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}