{"total":29,"rows":[{"id":"2504.19793","title":"Prompt Injection Attack to Tool Selection in LLM Agents","created":"2025-04-28","cited_by_count":158,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2508.02110","title":"Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools","created":"2025-08-04","cited_by_count":24,"area":"agents"},{"id":"2602.11348","title":"AgentNoiseBench: Benchmarking Robustness of Tool-Using LLM Agents Under Noisy Condition","created":"2026-02-11","cited_by_count":23,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2510.11108","title":"A Vision for Access Control in LLM-based Agent Systems","created":"2025-10-13","cited_by_count":14,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2606.20023","title":"When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents","created":"2026-06-18","cited_by_count":13,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2502.11358","title":"Mimicking the Familiar: Dynamic Command Generation for Information Theft Attacks in LLM Tool-Learning System","created":"2025-02-17","cited_by_count":10,"area":"agents"},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2605.26154","title":"MemMorph: Tool Hijacking in LLM Agents via Memory Poisoning","created":"2026-05-24","cited_by_count":9,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2605.27209","title":"Learning to Act under Noise: Enhancing Agent Robustness via Noisy Environments","created":"2026-05-26","cited_by_count":6,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2601.10758","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","created":"2026-01-14","cited_by_count":3,"area":"agents"},{"id":"2603.24203","title":"Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search","created":"2026-03-25","cited_by_count":2,"area":"agents"},{"id":"2604.24477","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2512.00332","title":"Assertion-Conditioned Compliance: A Provenance-Aware Vulnerability in Multi-Turn Tool-Calling Agents","created":"2025-11-29","cited_by_count":1,"area":"agents"},{"id":"2604.04426","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","created":"2026-04-06","cited_by_count":1,"area":"agents"},{"id":"2605.09822","title":"Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning","created":"2026-05-10","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2601.09292","title":"Blue Teaming Function-Calling Agents","created":"2026-01-14","cited_by_count":0,"area":"agents"},{"id":"2605.00741","title":"Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems","created":"2026-05-01","cited_by_count":0,"area":"agents"},{"id":"2605.23916","title":"Agent-Facing Information Design in LLM Tool Registries","created":"2026-04-12","cited_by_count":0,"area":"agents"},{"id":"2605.29224","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2605.30454","title":"The Surface You Test Is Not the Surface That Breaks","created":"2026-05-28","cited_by_count":0,"area":"agents"}],"next_cursor":null}