{"total":58,"rows":[{"id":"2507.21046","title":"A Survey of Self-Evolving Agents: What, When, How, and Where to Evolve on the Path to Artificial Super Intelligence","created":"2025-07-28","cited_by_count":170,"area":"agents"},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111,"area":"agents"},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2510.04885","title":"RL Is a Hammer and LLMs Are Nails: A Simple Reinforcement Learning Recipe for Strong Prompt Injection","created":"2025-10-06","cited_by_count":36,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2602.10127","title":"\"Humans welcome to observe\": A First Look at the Agent Social Network Moltbook","created":"2026-02-02","cited_by_count":26,"area":"agents"},{"id":"2602.11510","title":"AgentLeak: A Benchmark for Internal-Channel Privacy Leakage in Multi-Agent LLM Systems","created":"2026-02-12","cited_by_count":25,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2510.03204","title":"FocusAgent: Simple Yet Effective Ways of Trimming the Large Context of Web Agents","created":"2025-10-03","cited_by_count":16,"area":"agents"},{"id":"2602.22680","title":"Toward Personalized LLM-Powered Agents: Foundations, Evaluation, and Future Directions","created":"2026-02-26","cited_by_count":14,"area":"agents"},{"id":"2604.21308","title":"CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents","created":"2026-04-23","cited_by_count":14,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2602.13840","title":"PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training","created":"2026-02-14","cited_by_count":7,"area":"agents"},{"id":"2604.01487","title":"AgentSocialBench: Evaluating Privacy Risks in Human-Centered Agentic Social Networks","created":"2026-04-01","cited_by_count":7,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2606.00152","title":"PrivacyPeek: Auditing What LLM-Based Agents Acquire, Not Just What They Say","created":"2026-05-29","cited_by_count":6,"area":"agents"},{"id":"2603.18382","title":"From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents","created":"2026-03-19","cited_by_count":4,"area":"agents"},{"id":"2605.19127","title":"POLAR-Bench: A Diagnostic Benchmark for Privacy-Utility Trade-offs in LLM Agents","created":"2026-05-18","cited_by_count":4,"area":"agents"},{"id":"2602.13516","title":"SPILLage: Agentic Oversharing on the Web","created":"2026-02-13","cited_by_count":3,"area":"agents"},{"id":"2605.08647","title":"AgentCollabBench: Diagnosing When Good Agents Make Bad Collaborators","created":"2026-05-09","cited_by_count":3,"area":"agents"},{"id":"2606.23189","title":"Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2606.23217","title":"MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations","created":"2026-06-22","cited_by_count":3,"area":"agents"},{"id":"2606.00497","title":"\"I Strongly Suspect This Website Is a Scam\": Benchmarking PII Leakage and Detection without Defense in Autonomous Web Agents","created":"2026-05-30","cited_by_count":2,"area":"agents"},{"id":"2606.13385","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.21710","title":"PrivacyAlign: Contextual Privacy Alignment for LLM Agents","created":"2026-06-19","cited_by_count":2,"area":"agents"},{"id":"2607.05318","title":"PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems","created":"2026-07-06","cited_by_count":2,"area":"agents"},{"id":"2601.18113","title":"MalURLBench: A Benchmark Evaluating Agents' Vulnerabilities When Processing Web URLs","created":"2026-01-26","cited_by_count":1,"area":"agents"},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2604.07831","title":"Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection","created":"2026-04-09","cited_by_count":1,"area":"agents"},{"id":"2604.12177","title":"Policy-Invisible Violations in LLM-Based Agents","created":"2026-04-14","cited_by_count":1,"area":"agents"},{"id":"2605.16630","title":"PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems","created":"2026-05-15","cited_by_count":1,"area":"agents"},{"id":"2605.28775","title":"Learn from Weaknesses: Automated Domain Specialization for Small Computer-Use Agents","created":"2026-05-27","cited_by_count":1,"area":"agents"},{"id":"2606.17114","title":"An Evaluation of Data Leakage Risks in Tool-Using LLM Agents in Realistic Scenarios","created":"2026-06-15","cited_by_count":1,"area":"agents"},{"id":"2606.23277","title":"GIF: Locally Sound Geometric Information Flow Control for LLMs","created":"2026-06-22","cited_by_count":1,"area":"agents"},{"id":"2608.09278","title":"Software Engineering for and with GUI Agent","created":"2026-08-10","cited_by_count":1,"area":"agents"},{"id":"2510.03495","title":"AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents","created":"2025-10-03","cited_by_count":0,"area":"agents"},{"id":"2605.07110","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2605.30727","title":"MosaicLeaks:Privacy Risks in Querying-in-the-Open for Deep Research Agents","created":"2026-05-29","cited_by_count":0,"area":"agents"},{"id":"2606.12341","title":"OCELOT: Inference-Leakage Budgets for Privacy-Preserving LLM Agents","created":"2026-06-10","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2608.00202","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.01719","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.02613","title":"MemArena: An Ego-Centric Benchmark for On-Device Agentic Personal Memory Assistants at Scale","created":"2026-05-20","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.29028","title":"Facts Without Rules: Boundary Metadata Collapse in Multi-Agent LLM Handoffs","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2609.03815","title":"Inferring Hidden User Models from the Behavior of Personalized LLM Agents","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.13873","title":"PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.14003","title":"Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.18864","title":"ASLEval: Measuring Privacy Exposure Displacement in LLM Agent Sessions","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.19226","title":"PAPC: Platform Mediation for Privacy-Propagation Externalities in AI-Mediated Workflows","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.35937","title":"PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.17816","title":"Empowering Edge Agents: A Systematic Analysis of Edge-Cloud Collaboration in LLM Agent Execution","created":"2026-10-13","cited_by_count":0,"area":"agents"},{"id":"2610.18007","title":"Cost-Efficient Privacy Enforcement for Email-Generating LLM Agents under Strategic Information Requests","created":"2026-10-13","cited_by_count":0,"area":"agents"},{"id":"2610.19158","title":"AgentCIScope: Grounded Contextual Integrity Evaluation for LLM Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}