{"total":53,"rows":[{"id":"2507.13334","title":"A Survey of Context Engineering for Large Language Models","created":"2025-07-17","cited_by_count":126,"area":null},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2504.21034","title":"SAGA: A Security Architecture for Governing AI Agentic Systems","created":"2025-04-27","cited_by_count":45,"area":"agents"},{"id":"2505.19443","title":"Vibe Coding vs. Agentic Coding: Fundamentals and Practical Implications of Agentic AI","created":"2025-05-26","cited_by_count":42,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2508.11126","title":"AI Agentic Programming: A Survey of Techniques, Challenges, and Opportunities","created":"2025-08-15","cited_by_count":28,"area":"agents"},{"id":"2505.24201","title":"SentinelAgent: Graph-based Anomaly Detection in Multi-Agent Systems","created":"2025-05-30","cited_by_count":22,"area":"agents"},{"id":"2603.21019","title":"SkillProbe: Security Auditing for Emerging Agent Skill Marketplaces via Multi-Agent Collaboration","created":"2026-03-22","cited_by_count":21,"area":"agents"},{"id":"2504.19951","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","created":"2025-04-28","cited_by_count":18,"area":null},{"id":"2601.07072","title":"Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems","created":"2026-01-11","cited_by_count":16,"area":"safety"},{"id":"2508.01332","title":"BlockA2A: Towards Secure and Verifiable Agent-to-Agent Interoperability","created":"2025-08-02","cited_by_count":15,"area":"agents"},{"id":"2603.04474","title":"From Spark to Fire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent Collaboration","created":"2026-03-04","cited_by_count":14,"area":"agents"},{"id":"2605.03378","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","created":"2026-05-05","cited_by_count":14,"area":"agents"},{"id":"2510.17276","title":"Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems","created":"2025-10-20","cited_by_count":12,"area":"agents"},{"id":"2512.04668","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","created":"2025-12-04","cited_by_count":11,"area":"agents"},{"id":"2510.14312","title":"Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies","created":"2025-10-16","cited_by_count":10,"area":"agents"},{"id":"2602.13477","title":"OMNI-LEAK: Orchestrator Multi-Agent Network Induced Data Leakage","created":"2026-02-13","cited_by_count":9,"area":"agents"},{"id":"2509.25624","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","created":"2025-09-30","cited_by_count":8,"area":"agents"},{"id":"2510.16219","title":"SentinelNet: Safeguarding Multi-Agent Collaboration Through Credit-Based Dynamic Threat Detection","created":"2025-10-17","cited_by_count":8,"area":"agents"},{"id":"2601.03294","title":"AgentMark: Utility-Preserving Behavioral Watermarking for Agents","created":"2026-01-05","cited_by_count":8,"area":"agents"},{"id":"2602.05446","title":"DiLLS: Interactive Diagnosis of LLM-based Multi-agent Systems via Layered Summary of Agent Behaviors","created":"2026-02-05","cited_by_count":7,"area":"agents"},{"id":"2605.11514","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2603.28807","title":"SafeClaw-R: Towards Safe and Secure Multi-Agent Personal Assistants","created":"2026-03-28","cited_by_count":6,"area":"agents"},{"id":"2604.08608","title":"Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines","created":"2026-04-08","cited_by_count":5,"area":"agents"},{"id":"2605.11036","title":"Sequential Behavioral Watermarking for LLM Agents","created":"2026-05-11","cited_by_count":5,"area":"agents"},{"id":"2508.03864","title":"Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety","created":"2025-08-05","cited_by_count":4,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2607.07097","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","created":"2026-07-08","cited_by_count":3,"area":"agents"},{"id":"2512.21818","title":"Analyzing Code Injection Attacks on LLM-based Multi-Agent Systems in Software Development","created":"2025-12-26","cited_by_count":2,"area":"agents"},{"id":"2602.04431","title":"MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systems","created":"2026-02-04","cited_by_count":2,"area":"agents"},{"id":"2603.09134","title":"AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations","created":"2026-03-10","cited_by_count":2,"area":"agents"},{"id":"2604.16543","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","created":"2026-04-17","cited_by_count":2,"area":"agents"},{"id":"2605.08460","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2605.19149","title":"Agent Meltdowns: The Road to Hell Is Paved with Helpful Agents","created":"2026-05-18","cited_by_count":2,"area":null},{"id":"2606.00497","title":"\"I Strongly Suspect This Website Is a Scam\": Benchmarking PII Leakage and Detection without Defense in Autonomous Web Agents","created":"2026-05-30","cited_by_count":2,"area":"agents"},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2604.14317","title":"Challenges and Future Directions in Agentic Reverse Engineering Systems","created":"2026-04-15","cited_by_count":1,"area":"agents"},{"id":"2606.12797","title":"The Containment Gap: How Deployed Agentic AI Frameworks Fail Public-Facing Safety Requirements","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2608.00747","title":"When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.14668","title":"BRA-Audit: Budgeted Runtime Auditing for LLM Multi-Agent Systems via Cumulative-Exposure Audit-Point Placement","created":"2026-08-02","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2508.16071","title":"From Benchmark Data To Applicable Program Repair: An Experience Report","created":"2025-08-22","cited_by_count":0,"area":null},{"id":"2606.30602","title":"MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.18826","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","created":"2026-07-21","cited_by_count":0,"area":"agents"},{"id":"2607.26120","title":"Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systems","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2608.00202","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.03272","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2609.17817","title":"Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.30383","title":"Stealth Apart, Harm Together: Skill Cascading Attacks on Skill-Based Agent Systems","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.32635","title":"Trust the Brand, Lose Control: How Identity Hijacks LLM Agent Orchestration","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2610.15529","title":"Agent-Canary-Mas: End-to-End Evaluation of Protocol Risk in Long-Horizon Multi-Agent Systems","created":"2026-10-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}