{"total":89,"rows":[{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2510.05156","title":"VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation","created":"2025-10-03","cited_by_count":49,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2508.01249","title":"AgentArmor: Enforcing Program Analysis on Agent Runtime Trace to Defend Against Prompt Injection","created":"2025-08-02","cited_by_count":46,"area":"agents"},{"id":"2602.10453","title":"The Landscape of Prompt Injection Threats in LLM Agents: From Taxonomy to Analysis","created":"2026-02-11","cited_by_count":30,"area":"agents"},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2603.11619","title":"Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats","created":"2026-03-12","cited_by_count":29,"area":"agents"},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2503.01908","title":"UDora: A Unified Red Teaming Framework against LLM Agents by Dynamically Hijacking Their Own Reasoning","created":"2025-02-28","cited_by_count":21,"area":"lr"},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2606.00448","title":"When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems","created":"2026-05-30","cited_by_count":17,"area":"agents"},{"id":"2507.19672","title":"Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges","created":"2025-07-25","cited_by_count":15,"area":"alignment"},{"id":"2604.05485","title":"Auditable Agents","created":"2026-04-07","cited_by_count":15,"area":"agents"},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2603.04474","title":"From Spark to Fire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent Collaboration","created":"2026-03-04","cited_by_count":14,"area":"agents"},{"id":"2509.23614","title":"PSG-Agent: Personality-Aware Safety Guardrail for LLM-based Agents","created":"2025-09-28","cited_by_count":12,"area":"agents"},{"id":"2504.00441","title":"No Free Lunch with Guardrails","created":"2025-04-01","cited_by_count":11,"area":"safety"},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2603.11853","title":"OpenClaw PRISM: A Zero-Fork, Defense-in-Depth Runtime Security Layer for Tool-Augmented LLM Agents","created":"2026-03-12","cited_by_count":11,"area":"agents"},{"id":"2605.24309","title":"Reframing LLM Agent Security as an Agent-Human Interaction Problem","created":"2026-05-23","cited_by_count":9,"area":"agents"},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2605.27690","title":"TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling","created":"2026-05-26","cited_by_count":8,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2510.10994","title":"Deep Research with Open-Domain Evaluation and Multi-Stage Guardrails for Safety","created":"2025-10-13","cited_by_count":7,"area":"safety"},{"id":"2601.07263","title":"When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent","created":"2026-01-12","cited_by_count":7,"area":"agents"},{"id":"2604.07775","title":"ACIArena: Toward Unified Evaluation for Agent Cascading Injection","created":"2026-04-09","cited_by_count":7,"area":null},{"id":"2606.05805","title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents","created":"2026-06-04","cited_by_count":6,"area":"agents"},{"id":"2607.01236","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","created":"2026-05-01","cited_by_count":6,"area":"agents"},{"id":"2608.24777","title":"StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing","created":"2026-08-25","cited_by_count":6,"area":"agents"},{"id":"2505.19260","title":"ALRPHFS: Adversarially Learned Risk Patterns with Hierarchical Fast \\& Slow Reasoning for Robust Agent Defense","created":"2025-05-25","cited_by_count":5,"area":"agents"},{"id":"2510.06607","title":"Your Harness is Not Secure: Benchmarking Real-world Threat of Command Line Interface Agent","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2603.10268","title":"SpecOps: A Fully Automated AI Agent Testing Framework in Real-World GUI Environments","created":"2026-03-10","cited_by_count":4,"area":"agents"},{"id":"2605.05704","title":"SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety","created":"2026-05-07","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2607.20982","title":"GuardianAgentBench: Where Agents Fail and How to Guard Them","created":"2026-07-23","cited_by_count":4,"area":"agents"},{"id":"2607.22868","title":"What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents","created":"2026-07-24","cited_by_count":4,"area":"safety"},{"id":"2601.22569","title":"Whispers of Wealth: Red-Teaming Google's Agent Payments Protocol via Prompt Injection","created":"2026-01-30","cited_by_count":3,"area":"agents"},{"id":"2604.15505","title":"PolicyBank: Evolving Policy Understanding for LLM Agents","created":"2026-04-16","cited_by_count":3,"area":"agents"},{"id":"2605.14454","title":"LiSA: Lifelong Safety Adaptation via Conservative Policy Induction","created":"2026-05-14","cited_by_count":3,"area":"safety"},{"id":"2605.30924","title":"EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents","created":"2026-05-29","cited_by_count":3,"area":"agents"},{"id":"2606.01991","title":"SafeMCP: Proactive Power Regulation for LLM Agent Defense via Environment-Grounded Look-Ahead Reasoning","created":"2026-06-01","cited_by_count":3,"area":"lr"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2606.07054","title":"TRACE: Trajectory Reasoning through Adaptive Cross-Step Evidence Aggregation for LLM Agents","created":"2026-06-05","cited_by_count":3,"area":"lr"},{"id":"2606.12329","title":"PROJECTMEM: A Local-First, Event-Sourced Memory and Judgment Layer for AI Coding Agents","created":"2026-06-10","cited_by_count":3,"area":"agents"},{"id":"2606.22673","title":"AgentLens: Interpretable Safety Steering via Mechanistic Subspaces for Multi-Turn Coding Agent","created":"2026-06-21","cited_by_count":3,"area":"agents"},{"id":"2607.28815","title":"Preventing Premature Commitment in Coding Agents with an Evidence-Conditioned Execution Layer","created":"2026-07-30","cited_by_count":3,"area":"agents"},{"id":"2608.05695","title":"DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model","created":"2026-08-06","cited_by_count":3,"area":"wm"},{"id":"2608.19861","title":"PolicyGuide: From Guarding One Action to Guiding the Whole Workflow for Policy-Compliant LLM Agents","created":"2026-08-20","cited_by_count":3,"area":null},{"id":"2510.03485","title":"Learning Efficient Guardrails for Compliance","created":"2025-10-03","cited_by_count":2,"area":"agents"},{"id":"2602.23258","title":"MASRubric: Auditing Information Flow in Multi-Agent Systems with Failure-Distilled Pitfall Rubrics","created":"2026-02-26","cited_by_count":2,"area":null},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2604.15579","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","created":"2026-04-16","cited_by_count":2,"area":"safety"},{"id":"2605.17380","title":"ADR: An Agentic Detection System for Enterprise Agentic AI Security","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2512.03356","title":"From static to adaptive: immune memory-based jailbreak detection for large language models","created":"2025-12-03","cited_by_count":1,"area":"safety"},{"id":"2512.19016","title":"DREAM: Dynamic Red-teaming across Environments for AI Models","created":"2025-12-22","cited_by_count":1,"area":"agents"},{"id":"2602.05386","title":"Spider-Sense: Intrinsic Risk Sensing for Efficient Agent Defense with Hierarchical Adaptive Screening","created":"2026-02-05","cited_by_count":1,"area":"agents"},{"id":"2604.18658","title":"Owner-Harm: A Missing Threat Model for AI Agent Safety","created":"2026-04-20","cited_by_count":1,"area":"agents"},{"id":"2605.27117","title":"Position: AI Safety Requires Effective Controllability","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2606.08234","title":"SciTrace: Trajectory-Aware Safety Reasoning for Scientific Discovery Agents","created":"2026-06-06","cited_by_count":1,"area":"lr"},{"id":"2606.09890","title":"PreAct-Bench: Benchmarking Predictive Monitoring in LLMs","created":"2026-06-03","cited_by_count":1,"area":"safety"},{"id":"2607.13594","title":"SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing","created":"2026-07-15","cited_by_count":1,"area":"agents"},{"id":"2607.19913","title":"JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety","created":"2026-07-22","cited_by_count":1,"area":null},{"id":"2608.30478","title":"Agents in the Large: Perception-Centered Architecture for Persistent Agents","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2609.36580","title":"SafeCoEvo: Co-Evolving Safety Harnesses and Guards for LLM Agents at Test-Time","created":"2026-09-29","cited_by_count":1,"area":"agents"},{"id":"2508.17155","title":"Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents","created":"2025-08-23","cited_by_count":0,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2605.27375","title":"LCO: LLM-based Constraint Optimization for Safer Agentic LLMs in Real-world Tasks","created":"2026-04-08","cited_by_count":0,"area":"agents"},{"id":"2607.17149","title":"A Diagnostic Framework for AI Agent Behavior","created":"2026-07-19","cited_by_count":0,"area":null},{"id":"2607.18847","title":"Data Leakage Prevention in Agentic Applications via Preemptive Hardening","created":"2026-07-21","cited_by_count":0,"area":"agents"},{"id":"2608.05790","title":"ChainClaw: A Layered Agent Framework for Reliable On-Chain Execution","created":"2026-08-06","cited_by_count":0,"area":"agents"},{"id":"2608.24275","title":"RePolicy: Reinforcement Learning for Safety-Policy Invocation in Agent Safeguards","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2608.25711","title":"Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2608.25817","title":"SkillShield: Prompt-Space Security Skills for LLM Coding Agents","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.16098","title":"Universal Defenses for Tool-Integrated LLM Agents Against Adversarial Attacks","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.16287","title":"AgentGuard: Learning Execution Guardrails from Anomalous Coding-Agent Trajectories","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.26682","title":"From Alignment to Access Control: A Framework for GenAI Policy Enforcement","created":"2026-09-22","cited_by_count":0,"area":null},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.37501","title":"Evaluating Bounded Autonomy in Regulated Agentic AI: A Diagnostic Harness with Constitutional Rewards, Escalation Labels, and Runtime Governance","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.05163","title":"Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.18206","title":"SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}