{"total":186,"rows":[{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2604.18292","title":"Agent-World: Scaling Real-World Environment Synthesis for Evolving General Agent Intelligence","created":"2026-04-20","cited_by_count":54,"area":"agents"},{"id":"2508.01780","title":"LiveMCPBench: Can Agents Navigate an Ocean of MCP Tools?","created":"2025-08-03","cited_by_count":48,"area":"agents"},{"id":"2509.23141","title":"Earth-Agent: Unlocking the Full Landscape of Earth Observation with Agents","created":"2025-09-27","cited_by_count":46,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2603.10749","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","created":"2026-03-11","cited_by_count":38,"area":"agents"},{"id":"2604.14228","title":"Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems","created":"2026-04-14","cited_by_count":38,"area":"agents"},{"id":"2505.06416","title":"ScaleMCP: Dynamic and Auto-Synchronizing Model Context Protocol Tools for LLM Agents","created":"2025-05-09","cited_by_count":36,"area":"agents"},{"id":"2505.11154","title":"MPMA: Preference Manipulation Attack Against Model Context Protocol","created":"2025-05-16","cited_by_count":34,"area":"agents"},{"id":"2512.15163","title":"MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers","created":"2025-12-17","cited_by_count":34,"area":"agents"},{"id":"2508.18669","title":"MUA-RL: Multi-turn User-interacting Agent Reinforcement Learning for agentic tool use","created":"2025-08-26","cited_by_count":32,"area":"agents"},{"id":"2509.09734","title":"MCP-AgentBench: Evaluating Real-World Language Agent Performance with MCP-Mediated Tools","created":"2025-09-10","cited_by_count":32,"area":"agents"},{"id":"2505.07176","title":"Internet of Agents: Fundamentals, Applications, and Challenges","created":"2025-05-12","cited_by_count":31,"area":"agents"},{"id":"2506.03610","title":"Orak: A Foundational Benchmark for Training and Evaluating LLM Agents on Diverse Video Games","created":"2025-06-04","cited_by_count":31,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2506.14728","title":"AgentDistill: Training-Free Agent Distillation with Generalizable MCP Boxes","created":"2025-06-17","cited_by_count":30,"area":"agents"},{"id":"2512.24873","title":"Let It Flow: Agentic Crafting on Rock and Roll, Building the ROME Model within an Open Agentic Learning Ecosystem","created":"2025-12-31","cited_by_count":30,"area":"agents"},{"id":"2504.12757","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","created":"2025-04-17","cited_by_count":28,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2508.02110","title":"Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools","created":"2025-08-04","cited_by_count":24,"area":"agents"},{"id":"2506.18019","title":"Graphs Meet AI Agents: Taxonomy, Progress, and Future Opportunities","created":"2025-06-22","cited_by_count":23,"area":"agents"},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2506.02040","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","created":"2025-05-31","cited_by_count":19,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2508.15760","title":"LiveMCP-101: Stress Testing and Diagnosing MCP-enabled Agents on Challenging Queries","created":"2025-08-21","cited_by_count":17,"area":"agents"},{"id":"2508.16279","title":"AgentScope 1.0: A Developer-Centric Framework for Building Agentic Applications","created":"2025-08-22","cited_by_count":17,"area":"agents"},{"id":"2512.08290","title":"Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystem","created":"2025-12-09","cited_by_count":16,"area":"agents"},{"id":"2511.18538","title":"From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence","created":"2025-11-23","cited_by_count":15,"area":"agents"},{"id":"2512.08769","title":"A Practical Guide for Designing, Developing, and Deploying Production-Grade Agentic AI Workflows","created":"2025-12-09","cited_by_count":15,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2508.01186","title":"A Survey on Agent Workflow -- Status and Future","created":"2025-08-02","cited_by_count":14,"area":"agents"},{"id":"2510.23673","title":"MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers","created":"2025-10-27","cited_by_count":14,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2505.13516","title":"HALO: Hierarchical Autonomous Logic-Oriented Orchestration for Multi-Agent LLM Systems","created":"2025-05-17","cited_by_count":13,"area":"agents"},{"id":"2508.07935","title":"SHIELDA: Structured Handling of Exceptions in LLM-Driven Agentic Workflows","created":"2025-08-11","cited_by_count":13,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2601.04583","title":"Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundaries","created":"2026-01-08","cited_by_count":13,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2507.11277","title":"Taming Uncertainty via Automation: Observing, Analyzing, and Optimizing Agentic AI Systems","created":"2025-07-15","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2606.22388","title":"PlanBench-XL: Evaluating Long-Horizon Planning of LLM Tool-Use Agents in Large-Scale Tool Ecosystems","created":"2026-06-21","cited_by_count":11,"area":"agents"},{"id":"2505.09757","title":"Trustless Autonomy: Understanding Motivations, Benefits, and Governance Dilemmas in Self-Sovereign Decentralized AI Agents","created":"2025-05-14","cited_by_count":10,"area":"agents"},{"id":"2510.14312","title":"Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies","created":"2025-10-16","cited_by_count":10,"area":"agents"},{"id":"2511.04307","title":"GUI-360$^\\circ$: A Comprehensive Dataset and Benchmark for Computer-Using Agents","created":"2025-11-06","cited_by_count":10,"area":"agents"},{"id":"2512.20789","title":"X-GridAgent: An LLM-Powered Agentic AI System for Assisting Power Grid Analysis","created":"2025-12-23","cited_by_count":10,"area":"agents"},{"id":"2601.03281","title":"$\\alpha^3$-Bench: A Unified Benchmark of Safety, Robustness, and Efficiency for LLM-Based UAV Agents over 6G Networks","created":"2026-01-01","cited_by_count":10,"area":"agents"},{"id":"2507.19570","title":"MCP4EDA: LLM-Powered Model Context Protocol RTL-to-GDSII Automation with Backend Aware Synthesis Optimization","created":"2025-07-25","cited_by_count":9,"area":"agents"},{"id":"2511.01527","title":"TPS-Bench: Evaluating AI Agents' Tool Planning \\& Scheduling Abilities in Compounding Tasks","created":"2025-11-03","cited_by_count":9,"area":"agents"},{"id":"2511.15203","title":"Taxonomy, Evaluation and Exploitation of IPI-Centric LLM Agent Defense Frameworks","created":"2025-11-19","cited_by_count":9,"area":"agents"},{"id":"2512.24565","title":"MCPAgentBench: A Real-world Task Benchmark for Evaluating LLM Agent MCP Tool Use","created":"2025-12-31","cited_by_count":9,"area":"agents"},{"id":"2510.26603","title":"Agentic AI Home Energy Management System: A Large Language Model Framework for Residential Load Scheduling","created":"2025-10-30","cited_by_count":8,"area":"agents"},{"id":"2604.07765","title":"RemoteAgent: Bridging Vague Human Intents and Earth Observation with RL-based Agentic MLLMs","created":"2026-04-09","cited_by_count":8,"area":"agents"},{"id":"2606.22504","title":"Lingering Authority: Revocable Resource-and-Effect Capabilities for Coding Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2506.23474","title":"A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis","created":"2025-06-30","cited_by_count":7,"area":"agents"},{"id":"2507.06323","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","created":"2025-07-08","cited_by_count":7,"area":"agents"},{"id":"2507.06520","title":"Gradientsys: A Multi-Agent LLM Scheduler with ReAct Orchestration","created":"2025-07-09","cited_by_count":7,"area":"agents"},{"id":"2508.14123","title":"AI Agents for Photonic Integrated Circuit Design Automation","created":"2025-08-18","cited_by_count":7,"area":"agents"},{"id":"2509.20175","title":"Federation of Agents: A Semantics-Aware Communication Fabric for Large-Scale Agentic AI","created":"2025-09-24","cited_by_count":7,"area":"agents"},{"id":"2603.02240","title":"SuperLocalMemory: Privacy-Preserving Multi-Agent Memory with Bayesian Trust Defense Against Memory Poisoning","created":"2026-02-17","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2508.07468","title":"CP-Agent: Agentic Constraint Programming","created":"2025-08-10","cited_by_count":6,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2509.24380","title":"Agentic Services Computing","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2511.11332","title":"UFO3: Weaving the Digital Agent Galaxy","created":"2025-11-14","cited_by_count":6,"area":"agents"},{"id":"2512.05951","title":"Trusted AI Agents in the Cloud","created":"2025-12-05","cited_by_count":6,"area":"agents"},{"id":"2506.19998","title":"Doc2Agent: Scalable Generation of Tool-Using Agents from API Documentation","created":"2025-06-24","cited_by_count":5,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2509.09321","title":"Towards Adaptive ML Benchmarks: Web-Agent-Driven Construction, Domain Expansion, and Metric Optimization","created":"2025-09-11","cited_by_count":5,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2512.02321","title":"LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems","created":"2025-12-02","cited_by_count":5,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2602.10122","title":"A Practical Guide to Agentic AI Transition in Organizations","created":"2026-01-27","cited_by_count":5,"area":"agents"},{"id":"2605.13044","title":"No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills","created":"2026-05-13","cited_by_count":5,"area":"agents"},{"id":"2605.14932","title":"Toward Securing AI Agents Like Operating Systems","created":"2026-05-14","cited_by_count":5,"area":"agents"},{"id":"2606.14154","title":"SkillMutator: Benchmarking and Defending Language-and-Code Cross-modal Attacks on LLM Agent Skills","created":"2026-06-12","cited_by_count":5,"area":"agents"},{"id":"2606.30755","title":"Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens","created":"2026-06-29","cited_by_count":5,"area":"agents"},{"id":"2506.02048","title":"Improving LLM Agents with Reinforcement Learning on Cryptographic CTF Challenges","created":"2025-06-01","cited_by_count":4,"area":"agents"},{"id":"2506.11019","title":"Mind the Metrics: Patterns for Telemetry-Aware In-IDE AI Application Development using the Model Context Protocol (MCP)","created":"2025-05-14","cited_by_count":4,"area":"agents"},{"id":"2508.10143","title":"MCP-Orchestrated Multi-Agent System for Automated Disinformation Detection","created":"2025-08-13","cited_by_count":4,"area":"agents"},{"id":"2508.10760","title":"FROGENT: An End-to-End Full-process Drug Design Multi-Agent System","created":"2025-08-14","cited_by_count":4,"area":"agents"},{"id":"2509.08380","title":"Co-Investigator AI: The Rise of Agentic AI for Smarter, Trustworthy AML Compliance Narratives","created":"2025-09-10","cited_by_count":4,"area":"agents"},{"id":"2510.02567","title":"Agentic Additive Manufacturing Alloy Evaluation","created":"2025-10-02","cited_by_count":4,"area":"agents"},{"id":"2512.15144","title":"MCPZoo: A Large-Scale Dataset of Runnable Model Context Protocol Servers for AI Agent","created":"2025-12-17","cited_by_count":4,"area":"agents"},{"id":"2604.00835","title":"Agentic Tool Use in Large Language Models","created":"2026-04-01","cited_by_count":4,"area":"agents"},{"id":"2605.10787","title":"ComplexMCP: Evaluation of LLM Agents in Dynamic, Interdependent, and Large-Scale Tool Sandbox","created":"2026-05-11","cited_by_count":4,"area":"agents"},{"id":"2507.07901","title":"The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Web","created":"2025-07-10","cited_by_count":3,"area":"agents"},{"id":"2510.00229","title":"AgentFlux: Decoupled Fine-Tuning & Inference for On-Device Agentic Systems","created":"2025-09-30","cited_by_count":3,"area":"agents"},{"id":"2510.02271","title":"InfoMosaic-Bench: Evaluating Multi-Source Information Seeking in Tool-Augmented Agents","created":"2025-10-02","cited_by_count":3,"area":"agents"},{"id":"2511.14478","title":"Agentic AI Systems in Electrical Power Systems Engineering: Current State-of-the-Art and Challenges","created":"2025-11-18","cited_by_count":3,"area":"agents"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2602.15945","title":"From Tool Orchestration to Code Execution: A Study of MCP Design Choices","created":"2026-02-17","cited_by_count":3,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2604.26274","title":"Enforcing Benign Trajectories: A Behavioral Firewall for Structured-Workflow AI Agents","created":"2026-04-29","cited_by_count":3,"area":"agents"},{"id":"2605.02729","title":"Augmenting Interface Usability Heuristics for Reliable Computer-Use Agents","created":"2026-05-04","cited_by_count":3,"area":"agents"},{"id":"2606.12329","title":"PROJECTMEM: A Local-First, Event-Sourced Memory and Judgment Layer for AI Coding Agents","created":"2026-06-10","cited_by_count":3,"area":"agents"},{"id":"2607.09195","title":"Toward Auditable AI Scientists: A Hypothesis Evolution Protocol for LLM Agents","created":"2026-07-10","cited_by_count":3,"area":"agents"}],"next_cursor":"100"}