{"total":96,"rows":[{"id":"2505.10468","title":"AI Agents vs. Agentic AI: A Conceptual Taxonomy, Applications and Challenges","created":"2025-05-15","cited_by_count":169,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2507.13334","title":"A Survey of Context Engineering for Large Language Models","created":"2025-07-17","cited_by_count":126,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2506.04133","title":"TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","created":"2025-06-04","cited_by_count":59,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2508.02110","title":"Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools","created":"2025-08-04","cited_by_count":24,"area":"agents"},{"id":"2607.10487","title":"Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents","created":"2026-07-11","cited_by_count":18,"area":"agents"},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2507.00841","title":"SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents","created":"2025-07-01","cited_by_count":15,"area":"safety"},{"id":"2507.14928","title":"Byzantine-Robust Decentralized Coordination of LLM Agents","created":"2025-07-20","cited_by_count":14,"area":"agents"},{"id":"2510.11108","title":"A Vision for Access Control in LLM-based Agent Systems","created":"2025-10-13","cited_by_count":14,"area":"agents"},{"id":"2605.18930","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","created":"2026-05-18","cited_by_count":14,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2505.18658","title":"Robustness in Large Language Models: A Survey of Mitigation Strategies and Evaluation Metrics","created":"2025-05-24","cited_by_count":12,"area":null},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2510.16492","title":"Check Yourself Before You Wreck Yourself: Selectively Quitting Improves LLM Agent Safety","created":"2025-10-18","cited_by_count":12,"area":"agents"},{"id":"2510.18563","title":"The Trust Paradox in LLM-Based Multi-Agent Systems: When Collaboration Becomes a Security Vulnerability","created":"2025-10-21","cited_by_count":12,"area":"agents"},{"id":"2512.23343","title":"AI Meets Brain: Memory Systems from Cognitive Neuroscience to Autonomous Agents","created":"2025-12-29","cited_by_count":12,"area":"agents"},{"id":"2606.06054","title":"Beyond Similarity: Trustworthy Memory Search for Personal AI Agents","created":"2026-06-04","cited_by_count":12,"area":"agents"},{"id":"2606.20683","title":"From Question Answering to Task Completion: A Survey on Agent System and Harness Design","created":"2026-06-14","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2505.18471","title":"Invisible Tokens, Visible Bills: The Urgent Need to Audit Hidden Operations in Opaque LLM Services","created":"2025-05-24","cited_by_count":10,"area":null},{"id":"2509.05941","title":"Code2MCP: Transforming Code Repositories into MCP Services","created":"2025-09-07","cited_by_count":10,"area":"agents"},{"id":"2509.21761","title":"Backdoor Attribution: Elucidating and Controlling Backdoor in Language Models","created":"2025-09-26","cited_by_count":10,"area":"safety"},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2505.19108","title":"CCHall: A Novel Benchmark for Joint Cross-Lingual and Cross-Modal Hallucinations Detection in Large Language Models","created":"2025-05-25","cited_by_count":7,"area":"lr"},{"id":"2509.24610","title":"OrthAlign: Orthogonal Subspace Decomposition for Non-Interfering Multi-Objective Alignment","created":"2025-09-29","cited_by_count":7,"area":"alignment"},{"id":"2601.17887","title":"When Personalization Legitimizes Risks: Uncovering Safety Vulnerabilities in Personalized Dialogue Agents","created":"2026-01-25","cited_by_count":7,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2606.09071","title":"REFLECT: Intervention-Supported Error Attribution for Silent Failures in LLM Agent Traces","created":"2026-06-08","cited_by_count":7,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2512.05951","title":"Trusted AI Agents in the Cloud","created":"2025-12-05","cited_by_count":6,"area":"agents"},{"id":"2512.02321","title":"LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems","created":"2025-12-02","cited_by_count":5,"area":"agents"},{"id":"2601.13864","title":"HardSecBench: Benchmarking the Security Awareness of LLMs for Hardware Code Generation","created":"2026-01-20","cited_by_count":5,"area":null},{"id":"2605.23989","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2605.19952","title":"Rethinking How to Remember: Beyond Atomic Facts in Lifelong LLM Agent Memory","created":"2026-05-19","cited_by_count":4,"area":"lr"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2605.28201","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2506.01951","title":"Self-ensemble: Mitigating Confidence Mis-calibration for Large Language Models","created":"2025-06-02","cited_by_count":2,"area":null},{"id":"2507.21146","title":"Towards Unifying Quantitative Security Benchmarking for Multi Agent Systems","created":"2025-07-23","cited_by_count":2,"area":"agents"},{"id":"2601.22737","title":"Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Models","created":"2026-01-30","cited_by_count":2,"area":"mllm"},{"id":"2604.24477","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2606.09549","title":"SecureClaw: Clawing Back Control of LLM Agents","created":"2026-06-08","cited_by_count":2,"area":"agents"},{"id":"2606.13385","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2608.22868","title":"AgentFlow: A Flow-Centric Policy Language and Framework for Securing LLM Agent Systems","created":"2026-08-24","cited_by_count":2,"area":"agents"},{"id":"2510.20641","title":"Integrating Machine Learning into Belief-Desire-Intention Agents: Current Advances and Open Challenges","created":"2025-10-23","cited_by_count":1,"area":null},{"id":"2601.06461","title":"VIPER Strike: Defeating Visual Reasoning CAPTCHAs via Structured Vision-Language Inference","created":"2026-01-10","cited_by_count":1,"area":"lr"},{"id":"2601.17344","title":"The Shadow Self: Intrinsic Value Misalignment in Large Language Model Agents","created":"2026-01-24","cited_by_count":1,"area":"agents"},{"id":"2602.04813","title":"Agentic AI in Healthcare & Medicine: A Seven-Dimensional Taxonomy for Empirical Evaluation of LLM-based Agents","created":"2026-02-04","cited_by_count":1,"area":"agents"},{"id":"2602.21267","title":"A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications","created":"2026-02-24","cited_by_count":1,"area":null},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2603.02214","title":"Federated Inference: Toward Privacy-Preserving Collaborative and Incentivized Model Serving","created":"2026-02-09","cited_by_count":1,"area":null},{"id":"2605.11679","title":"Explaining and Breaking the Safety-Helpfulness Ceiling via Preference Dimensional Expansion","created":"2026-05-12","cited_by_count":1,"area":"alignment"},{"id":"2605.13213","title":"Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.02302","title":"SeClaw: Spec-Driven Security Task Synthesis for Evaluating Autonomous Agents","created":"2026-06-01","cited_by_count":1,"area":"agents"},{"id":"2606.03034","title":"Capability Advertisement as a Market for Lemons: A Trust Layer for Heterogeneous Agent Networks","created":"2026-06-02","cited_by_count":1,"area":"agents"},{"id":"2606.21445","title":"AutoRAS: Learning Robust Agentic Systems with Primitive Representations","created":"2026-06-19","cited_by_count":1,"area":"lr"},{"id":"2607.06807","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2607.15079","title":"BrainPilot: Automating Brain Discovery with Agentic Research","created":"2026-07-16","cited_by_count":1,"area":"agents"},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2509.04802","title":"Mind the Gap: Evaluating Model- and Agentic-Level Vulnerabilities in LLMs with Action Graphs","created":"2025-09-05","cited_by_count":0,"area":"agents"},{"id":"2509.17429","title":"Multi-scale Temporal Prediction via Incremental Generation and Multi-agent Collaboration","created":"2025-09-22","cited_by_count":0,"area":"agents"},{"id":"2512.20649","title":"AIAuditTrack: A Framework for AI Security system","created":"2025-12-16","cited_by_count":0,"area":null},{"id":"2602.15034","title":"EduResearchBench: A Hierarchical Atomic Task Decomposition Benchmark for Full-Lifecycle Educational Research","created":"2026-01-22","cited_by_count":0,"area":null},{"id":"2602.21127","title":"\"Are You Sure?\": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems","created":"2026-02-24","cited_by_count":0,"area":"agents"},{"id":"2604.04895","title":"Agentic Federated Learning: The Future of Distributed Training Orchestration","created":"2026-04-06","cited_by_count":0,"area":"agents"},{"id":"2605.03213","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2606.14200","title":"When Should Agent Trust Be Conditional? Characterizing and Attacking Skill-Conditional Reputation in Agent Swarms","created":"2026-06-12","cited_by_count":0,"area":"agents"},{"id":"2606.23927","title":"RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems","created":"2026-06-22","cited_by_count":0,"area":"agents"},{"id":"2606.27382","title":"AI-Model Network: Concept, Current State and Future","created":"2026-05-25","cited_by_count":0,"area":null},{"id":"2606.30246","title":"Clarus: Coordinating Autonomous Research Agents toward Web-Scale Scientific Collaboration","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2606.30263","title":"Defending Against Harmful Supervision Hidden in Benign Samples","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2607.02510","title":"Online Safety Monitoring for LLMs","created":"2026-07-02","cited_by_count":0,"area":null},{"id":"2607.16660","title":"From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice","created":"2026-07-18","cited_by_count":0,"area":null},{"id":"2608.00134","title":"Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.27886","title":"Resource Constraints and Performance in Agentic AI Systems","created":"2026-08-28","cited_by_count":0,"area":"agents"},{"id":"2609.07395","title":"Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study","created":"2026-09-07","cited_by_count":0,"area":"agents"},{"id":"2609.16098","title":"Universal Defenses for Tool-Integrated LLM Agents Against Adversarial Attacks","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.36813","title":"RESCUE: Repairing Language Model Errors to Sparse Circuits via Reinforcement Learning","created":"2026-09-29","cited_by_count":0,"area":"mechinterp"},{"id":"2609.37567","title":"Concealing LLM-Based Multi-Agent Topology via Phantom Structure Injection","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.04836","title":"RSure-Agent: Reliable Use of Tool Observations for Remote Sensing Agents","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"},{"id":"2610.19422","title":"AgentSafeEvo: Adversarial Co-Evolution for LLM Agent Safety","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}