{"total":23,"rows":[{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2506.02456","title":"VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents","created":"2025-06-03","cited_by_count":45,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2505.24201","title":"SentinelAgent: Graph-based Anomaly Detection in Multi-Agent Systems","created":"2025-05-30","cited_by_count":22,"area":"agents"},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2506.17318","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2510.01670","title":"Just Do It!? Computer-Use Agents Exhibit Blind Goal-Directedness","created":"2025-10-02","cited_by_count":9,"area":"agents"},{"id":"2508.20282","title":"Network-Level Prompt and Trait Leakage in Local Research Agents","created":"2025-08-27","cited_by_count":5,"area":"agents"},{"id":"2510.06607","title":"Your Harness is Not Secure: Benchmarking Real-world Threat of Command Line Interface Agent","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2605.16746","title":"State Contamination in Memory-Augmented LLM Agents","created":"2026-05-16","cited_by_count":5,"area":"agents"},{"id":"2506.02859","title":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs","created":"2025-06-03","cited_by_count":4,"area":"agents"},{"id":"2601.21961","title":"How do Visual Attributes Influence Web Agents? A Comprehensive Evaluation of User Interface Design Factors","created":"2026-01-29","cited_by_count":4,"area":"agents"},{"id":"2604.03870","title":"Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs","created":"2026-04-04","cited_by_count":4,"area":"agents"},{"id":"2506.23978","title":"LLM Agents Are the Antidote to Walled Gardens","created":"2025-06-30","cited_by_count":3,"area":"agents"},{"id":"2605.05509","title":"WAAA! Web Adversaries Against Agentic Browsers","created":"2026-05-06","cited_by_count":3,"area":"agents"},{"id":"2606.13686","title":"Benchmarking Web Agent Safety under E-commerce Deceptive Interfaces","created":"2026-04-26","cited_by_count":3,"area":"agents"},{"id":"2512.07665","title":"Reliable agent engineering should integrate machine-compatible organizational principles","created":"2025-12-08","cited_by_count":2,"area":"agents"},{"id":"2606.18142","title":"Your AI Travel Agent Would Book You a Bullfight: An Agentic Benchmark for Implicit Animal Welfare in Frontier AI Models","created":"2026-06-16","cited_by_count":2,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2605.29224","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2608.00202","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"}],"next_cursor":null}