{"total":116,"rows":[{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2504.18575","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","created":"2025-04-22","cited_by_count":157,"area":"agents"},{"id":"2503.22738","title":"ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning","created":"2025-03-26","cited_by_count":151,"area":"lr"},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2502.05174","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","created":"2025-02-07","cited_by_count":77,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2506.12104","title":"DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents","created":"2025-06-13","cited_by_count":66,"area":"agents"},{"id":"2504.11281","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","created":"2025-04-15","cited_by_count":59,"area":"agents"},{"id":"2505.11717","title":"WebInject: Prompt Injection Attack to Web Agents","created":"2025-05-16","cited_by_count":51,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2506.02456","title":"VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents","created":"2025-06-03","cited_by_count":45,"area":"agents"},{"id":"2505.10831","title":"Creating General User Models from Computer Use","created":"2025-05-16","cited_by_count":44,"area":null},{"id":"2505.05849","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","created":"2025-05-09","cited_by_count":42,"area":"lr"},{"id":"2506.00618","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","created":"2025-05-31","cited_by_count":35,"area":"mllm"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2412.18116","title":"AutoDroid-V2: Boosting SLM-based GUI Agents via Code Generation","created":"2024-12-24","cited_by_count":34,"area":"agents"},{"id":"2503.23434","title":"Towards Trustworthy GUI Agents: A Survey","created":"2025-03-30","cited_by_count":34,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2506.04135","title":"macOSWorld: A Multilingual Interactive Benchmark for GUI Agents","created":"2025-06-04","cited_by_count":32,"area":"agents"},{"id":"2503.11069","title":"API Agents vs. GUI Agents: Divergence and Convergence","created":"2025-03-14","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2502.20383","title":"Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis","created":"2025-02-27","cited_by_count":27,"area":"agents"},{"id":"2509.07764","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","created":"2025-09-09","cited_by_count":27,"area":"agents"},{"id":"2602.10127","title":"\"Humans welcome to observe\": A First Look at the Agent Social Network Moltbook","created":"2026-02-02","cited_by_count":26,"area":"agents"},{"id":"2510.01354","title":"WAInjectBench: Benchmarking Prompt Injection Detections for Web Agents","created":"2025-10-01","cited_by_count":24,"area":"agents"},{"id":"2511.20597","title":"BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents","created":"2025-11-25","cited_by_count":24,"area":"safety"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2502.13053","title":"Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks","created":"2025-02-18","cited_by_count":22,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2511.04847","title":"Test-Time Adaptation for LLM Agents via Environment Interaction","created":"2025-11-06","cited_by_count":20,"area":"agents"},{"id":"2506.10387","title":"Mirage-1: Augmenting and Updating GUI Agent with Hierarchical Multimodal Skills","created":"2025-06-12","cited_by_count":19,"area":"mllm"},{"id":"2510.10073","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","created":"2025-10-11","cited_by_count":19,"area":"agents"},{"id":"2510.18113","title":"Investigating the Impact of Dark Patterns on LLM-Based Web Agents","created":"2025-10-20","cited_by_count":17,"area":"agents"},{"id":"2601.09923","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","created":"2026-01-14","cited_by_count":17,"area":"agents"},{"id":"2507.21017","title":"MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them","created":"2025-07-28","cited_by_count":16,"area":"agents"},{"id":"2509.10723","title":"Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight","created":"2025-09-12","cited_by_count":16,"area":"agents"},{"id":"2510.03204","title":"FocusAgent: Simple Yet Effective Ways of Trimming the Large Context of Web Agents","created":"2025-10-03","cited_by_count":16,"area":"agents"},{"id":"2512.22894","title":"DECEPTICON: How Dark Patterns Manipulate Web Agents","created":"2025-12-28","cited_by_count":15,"area":"agents"},{"id":"2503.11519","title":"Exploring Typographic Visual Prompts Injection Threats in Cross-Modality Generation Models","created":"2025-03-14","cited_by_count":14,"area":null},{"id":"2504.04716","title":"On the Robustness of GUI Grounding Models Against Image Attacks","created":"2025-04-07","cited_by_count":14,"area":null},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2509.25609","title":"A Framework for Studying AI Agent Behavior: Evidence from Consumer Choice Experiments","created":"2025-09-30","cited_by_count":12,"area":"agents"},{"id":"2510.20333","title":"GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?","created":"2025-10-23","cited_by_count":12,"area":"agents"},{"id":"2511.20766","title":"OpenApps: Simulating Environment Variations to Measure UI-Agent Reliability","created":"2025-11-25","cited_by_count":12,"area":null},{"id":"2504.17934","title":"Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents","created":"2025-04-24","cited_by_count":11,"area":"agents"},{"id":"2602.03792","title":"WebSentinel: Detecting and Localizing Prompt Injection Attacks for Web Agents","created":"2026-02-03","cited_by_count":11,"area":"agents"},{"id":"2503.09241","title":"In-Context Defense in Computer Agents: An Empirical Study","created":"2025-03-12","cited_by_count":10,"area":"mllm"},{"id":"2505.21499","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","created":"2025-05-27","cited_by_count":10,"area":"agents"},{"id":"2508.04010","title":"HarmonyGuard: Toward Safety and Utility in Web Agents via Adaptive Policy Enhancement and Dual-Objective Optimization","created":"2025-08-06","cited_by_count":10,"area":"agents"},{"id":"2510.19687","title":"Are Large Language Models Sensitive to the Motives Behind Communication?","created":"2025-10-22","cited_by_count":8,"area":null},{"id":"2505.17735","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","created":"2025-05-23","cited_by_count":6,"area":"agents"},{"id":"2507.06899","title":"VisualTrap: A Stealthy Backdoor Attack on GUI Agents via Visual Grounding Manipulation","created":"2025-07-09","cited_by_count":6,"area":"agents"},{"id":"2507.10610","title":"LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents","created":"2025-07-13","cited_by_count":6,"area":"mllm"},{"id":"2509.11250","title":"Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments","created":"2025-09-14","cited_by_count":6,"area":"agents"},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2510.05159","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","created":"2025-10-03","cited_by_count":6,"area":"agents"},{"id":"2601.12349","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","created":"2026-01-18","cited_by_count":6,"area":"agents"},{"id":"2603.00476","title":"Atomicity for Agents: Exposing, Exploiting, and Mitigating TOCTOU Vulnerabilities in Browser-Use Agents","created":"2026-02-28","cited_by_count":6,"area":"agents"},{"id":"2505.11584","title":"LLM Agents Are Hypersensitive to Nudges","created":"2025-05-16","cited_by_count":5,"area":"agents"},{"id":"2505.23518","title":"TRAP: Targeted Redirecting of Agentic Preferences","created":"2025-05-29","cited_by_count":5,"area":"lr"},{"id":"2507.04227","title":"Mobile GUI Agents under Real-world Threats: Are We There Yet?","created":"2025-07-06","cited_by_count":5,"area":"agents"},{"id":"2510.26037","title":"SIRAJ: Diverse and Efficient Red-Teaming for LLM Agents via Distilled Structured Reasoning","created":"2025-10-30","cited_by_count":5,"area":"lr"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2504.07112","title":"Are AI Agents interacting with Online Ads?","created":"2025-03-20","cited_by_count":4,"area":"agents"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2604.25562","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","created":"2026-04-28","cited_by_count":4,"area":"agents"},{"id":"2605.15030","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","created":"2026-05-14","cited_by_count":4,"area":"agents"},{"id":"2605.25707","title":"AgentHijack: Benchmarking Computer Use Agent Robustness to Common Environment Corruptions","created":"2026-05-25","cited_by_count":4,"area":"agents"},{"id":"2505.17861","title":"Superplatforms Have to Attack AI Agents","created":"2025-05-23","cited_by_count":3,"area":"agents"},{"id":"2506.23978","title":"LLM Agents Are the Antidote to Walled Gardens","created":"2025-06-30","cited_by_count":3,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2603.18762","title":"ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation","created":"2026-03-19","cited_by_count":3,"area":"agents"},{"id":"2604.00986","title":"Do Phone-Use Agents Respect Your Privacy?","created":"2026-04-01","cited_by_count":3,"area":null},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3,"area":"agents"},{"id":"2604.09574","title":"Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization","created":"2026-02-24","cited_by_count":3,"area":"agents"},{"id":"2604.12284","title":"WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2604.27955","title":"GUI Agents with Reinforcement Learning: Toward Digital Inhabitants","created":"2026-04-30","cited_by_count":3,"area":"agents"},{"id":"2607.05277","title":"Untrusted Content Masking for Web Agents with Security Guarantees","created":"2026-07-06","cited_by_count":3,"area":"agents"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2601.08406","title":"WebTrap Park: An Automated Platform for Systematic Security Evaluation of Web Agents","created":"2026-01-13","cited_by_count":2,"area":"agents"},{"id":"2602.21262","title":"Under the Influence: Quantifying Persuasion and Vigilance in Large Language Models","created":"2026-02-24","cited_by_count":2,"area":null},{"id":"2603.23007","title":"AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents","created":"2026-03-24","cited_by_count":2,"area":"agents"},{"id":"2605.08310","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","created":"2026-05-08","cited_by_count":2,"area":null},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2602.07104","title":"Extended to Reality: Prompt Injection in 3D Environments","created":"2026-02-06","cited_by_count":1,"area":"mllm"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2604.07831","title":"Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection","created":"2026-04-09","cited_by_count":1,"area":"agents"},{"id":"2605.01208","title":"Faithful Mobile GUI Agents with Guided Advantage Estimator","created":"2026-05-02","cited_by_count":1,"area":"agents"},{"id":"2606.02449","title":"HLL: Can Agents Cross Humanity's Last Line of Verification?","created":"2026-06-01","cited_by_count":1,"area":null},{"id":"2606.05233","title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","created":"2026-06-03","cited_by_count":1,"area":"agents"},{"id":"2606.10423","title":"WebChallenger: A Reliable and Efficient Generalist Web Agent","created":"2026-06-09","cited_by_count":1,"area":"lr"},{"id":"2606.14027","title":"Same-Origin Policy for Agentic Browsers","created":"2026-06-12","cited_by_count":1,"area":"agents"},{"id":"2607.08147","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","created":"2026-07-09","cited_by_count":1,"area":"agents"},{"id":"2608.02018","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2608.04741","title":"LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents","created":"2026-08-05","cited_by_count":1,"area":"agents"}],"next_cursor":"100"}