{"total":265,"rows":[{"id":"2504.19678","title":"From LLM Reasoning to Autonomous AI Agents: A Comprehensive Review","created":"2025-04-28","cited_by_count":149,"area":"lr"},{"id":"2507.13334","title":"A Survey of Context Engineering for Large Language Models","created":"2025-07-17","cited_by_count":126,"area":null},{"id":"2504.09037","title":"A Survey of Frontiers in LLM Reasoning: Inference Scaling, Learning to Reason, and Agentic Systems","created":"2025-04-12","cited_by_count":111,"area":"lr"},{"id":"2505.01441","title":"Agentic Reasoning and Tool Integration for LLMs via Reinforcement Learning","created":"2025-04-28","cited_by_count":110,"area":"lr"},{"id":"2510.21618","title":"DeepAgent: A General Reasoning Agent with Scalable Toolsets","created":"2025-10-24","cited_by_count":71,"area":"lr"},{"id":"2509.26603","title":"DeepScientist: Advancing Frontier-Pushing Scientific Findings Progressively","created":"2025-09-30","cited_by_count":63,"area":null},{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2604.18292","title":"Agent-World: Scaling Real-World Environment Synthesis for Evolving General Agent Intelligence","created":"2026-04-20","cited_by_count":54,"area":"agents"},{"id":"2506.07900","title":"MiniCPM4: Ultra-Efficient LLMs on End Devices","created":"2025-06-09","cited_by_count":52,"area":null},{"id":"2508.01780","title":"LiveMCPBench: Can Agents Navigate an Ocean of MCP Tools?","created":"2025-08-03","cited_by_count":48,"area":"agents"},{"id":"2509.23141","title":"Earth-Agent: Unlocking the Full Landscape of Earth Observation with Agents","created":"2025-09-27","cited_by_count":46,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2504.08623","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","created":"2025-04-11","cited_by_count":42,"area":null},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2509.24002","title":"MCPMark: A Benchmark for Stress-Testing Realistic and Comprehensive MCP Use","created":"2025-09-28","cited_by_count":39,"area":null},{"id":"2603.10749","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","created":"2026-03-11","cited_by_count":38,"area":"agents"},{"id":"2604.14228","title":"Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems","created":"2026-04-14","cited_by_count":38,"area":"agents"},{"id":"2505.06416","title":"ScaleMCP: Dynamic and Auto-Synchronizing Model Context Protocol Tools for LLM Agents","created":"2025-05-09","cited_by_count":36,"area":"agents"},{"id":"2505.11154","title":"MPMA: Preference Manipulation Attack Against Model Context Protocol","created":"2025-05-16","cited_by_count":34,"area":"agents"},{"id":"2512.15163","title":"MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers","created":"2025-12-17","cited_by_count":34,"area":"agents"},{"id":"2508.18669","title":"MUA-RL: Multi-turn User-interacting Agent Reinforcement Learning for agentic tool use","created":"2025-08-26","cited_by_count":32,"area":"agents"},{"id":"2509.09734","title":"MCP-AgentBench: Evaluating Real-World Language Agent Performance with MCP-Mediated Tools","created":"2025-09-10","cited_by_count":32,"area":"agents"},{"id":"2505.07176","title":"Internet of Agents: Fundamentals, Applications, and Challenges","created":"2025-05-12","cited_by_count":31,"area":"agents"},{"id":"2506.03610","title":"Orak: A Foundational Benchmark for Training and Evaluating LLM Agents on Diverse Video Games","created":"2025-06-04","cited_by_count":31,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2506.14728","title":"AgentDistill: Training-Free Agent Distillation with Generalizable MCP Boxes","created":"2025-06-17","cited_by_count":30,"area":"agents"},{"id":"2512.24873","title":"Let It Flow: Agentic Crafting on Rock and Roll, Building the ROME Model within an Open Agentic Learning Ecosystem","created":"2025-12-31","cited_by_count":30,"area":"agents"},{"id":"2504.12757","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","created":"2025-04-17","cited_by_count":28,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2508.02110","title":"Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools","created":"2025-08-04","cited_by_count":24,"area":"agents"},{"id":"2506.18019","title":"Graphs Meet AI Agents: Taxonomy, Progress, and Future Opportunities","created":"2025-06-22","cited_by_count":23,"area":"agents"},{"id":"2509.06917","title":"Paper2Agent: Reimagining Research Papers As Interactive and Reliable AI Agents","created":"2025-09-08","cited_by_count":23,"area":null},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2506.01372","title":"AI Scientists Fail Without Strong Implementation Capability","created":"2025-06-02","cited_by_count":21,"area":null},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2511.12609","title":"Uni-MoE-2.0-Omni: Scaling Language-Centric Omnimodal Large Model with Advanced MoE, Training and Data","created":"2025-11-16","cited_by_count":21,"area":"moe"},{"id":"2510.14359","title":"AI for Service: Proactive Assistance with AI Glasses","created":"2025-10-16","cited_by_count":20,"area":null},{"id":"2506.02040","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","created":"2025-05-31","cited_by_count":19,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2508.15760","title":"LiveMCP-101: Stress Testing and Diagnosing MCP-enabled Agents on Challenging Queries","created":"2025-08-21","cited_by_count":17,"area":"agents"},{"id":"2508.16279","title":"AgentScope 1.0: A Developer-Centric Framework for Building Agentic Applications","created":"2025-08-22","cited_by_count":17,"area":"agents"},{"id":"2512.08290","title":"Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystem","created":"2025-12-09","cited_by_count":16,"area":"agents"},{"id":"2507.06250","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","created":"2025-07-05","cited_by_count":15,"area":null},{"id":"2511.18538","title":"From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence","created":"2025-11-23","cited_by_count":15,"area":"agents"},{"id":"2512.08769","title":"A Practical Guide for Designing, Developing, and Deploying Production-Grade Agentic AI Workflows","created":"2025-12-09","cited_by_count":15,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2505.03864","title":"From Glue-Code to Protocols: A Critical Analysis of A2A and MCP Integration for Scalable Agent Systems","created":"2025-05-06","cited_by_count":14,"area":null},{"id":"2508.01186","title":"A Survey on Agent Workflow -- Status and Future","created":"2025-08-02","cited_by_count":14,"area":"agents"},{"id":"2510.23673","title":"MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers","created":"2025-10-27","cited_by_count":14,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2505.13516","title":"HALO: Hierarchical Autonomous Logic-Oriented Orchestration for Multi-Agent LLM Systems","created":"2025-05-17","cited_by_count":13,"area":"agents"},{"id":"2508.07935","title":"SHIELDA: Structured Handling of Exceptions in LLM-Driven Agentic Workflows","created":"2025-08-11","cited_by_count":13,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2601.04583","title":"Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundaries","created":"2026-01-08","cited_by_count":13,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2507.11277","title":"Taming Uncertainty via Automation: Observing, Analyzing, and Optimizing Agentic AI Systems","created":"2025-07-15","cited_by_count":12,"area":"agents"},{"id":"2508.02721","title":"Blueprint First, Model Second: A Framework for Deterministic LLM Workflow","created":"2025-08-01","cited_by_count":12,"area":null},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2606.22388","title":"PlanBench-XL: Evaluating Long-Horizon Planning of LLM Tool-Use Agents in Large-Scale Tool Ecosystems","created":"2026-06-21","cited_by_count":11,"area":"agents"},{"id":"2505.09757","title":"Trustless Autonomy: Understanding Motivations, Benefits, and Governance Dilemmas in Self-Sovereign Decentralized AI Agents","created":"2025-05-14","cited_by_count":10,"area":"agents"},{"id":"2510.14312","title":"Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies","created":"2025-10-16","cited_by_count":10,"area":"agents"},{"id":"2511.04307","title":"GUI-360$^\\circ$: A Comprehensive Dataset and Benchmark for Computer-Using Agents","created":"2025-11-06","cited_by_count":10,"area":"agents"},{"id":"2512.20789","title":"X-GridAgent: An LLM-Powered Agentic AI System for Assisting Power Grid Analysis","created":"2025-12-23","cited_by_count":10,"area":"agents"},{"id":"2601.03281","title":"$\\alpha^3$-Bench: A Unified Benchmark of Safety, Robustness, and Efficiency for LLM-Based UAV Agents over 6G Networks","created":"2026-01-01","cited_by_count":10,"area":"agents"},{"id":"2507.19570","title":"MCP4EDA: LLM-Powered Model Context Protocol RTL-to-GDSII Automation with Backend Aware Synthesis Optimization","created":"2025-07-25","cited_by_count":9,"area":"agents"},{"id":"2511.01527","title":"TPS-Bench: Evaluating AI Agents' Tool Planning \\& Scheduling Abilities in Compounding Tasks","created":"2025-11-03","cited_by_count":9,"area":"agents"},{"id":"2511.15203","title":"Taxonomy, Evaluation and Exploitation of IPI-Centric LLM Agent Defense Frameworks","created":"2025-11-19","cited_by_count":9,"area":"agents"},{"id":"2512.24565","title":"MCPAgentBench: A Real-world Task Benchmark for Evaluating LLM Agent MCP Tool Use","created":"2025-12-31","cited_by_count":9,"area":"agents"},{"id":"2510.26603","title":"Agentic AI Home Energy Management System: A Large Language Model Framework for Residential Load Scheduling","created":"2025-10-30","cited_by_count":8,"area":"agents"},{"id":"2604.07765","title":"RemoteAgent: Bridging Vague Human Intents and Earth Observation with RL-based Agentic MLLMs","created":"2026-04-09","cited_by_count":8,"area":"agents"},{"id":"2606.22504","title":"Lingering Authority: Revocable Resource-and-Effect Capabilities for Coding Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2506.23474","title":"A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis","created":"2025-06-30","cited_by_count":7,"area":"agents"},{"id":"2507.06323","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","created":"2025-07-08","cited_by_count":7,"area":"agents"},{"id":"2507.06520","title":"Gradientsys: A Multi-Agent LLM Scheduler with ReAct Orchestration","created":"2025-07-09","cited_by_count":7,"area":"agents"},{"id":"2508.14123","title":"AI Agents for Photonic Integrated Circuit Design Automation","created":"2025-08-18","cited_by_count":7,"area":"agents"},{"id":"2509.20175","title":"Federation of Agents: A Semantics-Aware Communication Fabric for Large-Scale Agentic AI","created":"2025-09-24","cited_by_count":7,"area":"agents"},{"id":"2603.02240","title":"SuperLocalMemory: Privacy-Preserving Multi-Agent Memory with Bayesian Trust Defense Against Memory Poisoning","created":"2026-02-17","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2507.00951","title":"Thinking Beyond Tokens: From Brain-Inspired Intelligence to Cognitive Foundations for Artificial General Intelligence and its Societal Impact","created":"2025-07-01","cited_by_count":6,"area":"lr"},{"id":"2507.19880","title":"Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data","created":"2025-07-26","cited_by_count":6,"area":null},{"id":"2508.07468","title":"CP-Agent: Agentic Constraint Programming","created":"2025-08-10","cited_by_count":6,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2509.24380","title":"Agentic Services Computing","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2511.11332","title":"UFO3: Weaving the Digital Agent Galaxy","created":"2025-11-14","cited_by_count":6,"area":"agents"},{"id":"2512.05951","title":"Trusted AI Agents in the Cloud","created":"2025-12-05","cited_by_count":6,"area":"agents"},{"id":"2603.18063","title":"MCP-38: A Comprehensive Threat Taxonomy for Model Context Protocol Systems (v1.0)","created":"2026-03-18","cited_by_count":6,"area":null},{"id":"2604.08896","title":"GeoMMBench and GeoMMAgent: Toward Expert-Level Multimodal Intelligence in Geoscience and Remote Sensing","created":"2026-04-10","cited_by_count":6,"area":"mllm"},{"id":"2505.15874","title":"Text-to-Pipeline: Bridging Natural Language and Data Preparation Pipelines","created":"2025-05-21","cited_by_count":5,"area":null},{"id":"2506.19998","title":"Doc2Agent: Scalable Generation of Tool-Using Agents from API Documentation","created":"2025-06-24","cited_by_count":5,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2509.09321","title":"Towards Adaptive ML Benchmarks: Web-Agent-Driven Construction, Domain Expansion, and Metric Optimization","created":"2025-09-11","cited_by_count":5,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2512.02321","title":"LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems","created":"2025-12-02","cited_by_count":5,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2602.10122","title":"A Practical Guide to Agentic AI Transition in Organizations","created":"2026-01-27","cited_by_count":5,"area":"agents"},{"id":"2605.13044","title":"No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills","created":"2026-05-13","cited_by_count":5,"area":"agents"},{"id":"2605.14932","title":"Toward Securing AI Agents Like Operating Systems","created":"2026-05-14","cited_by_count":5,"area":"agents"},{"id":"2606.14154","title":"SkillMutator: Benchmarking and Defending Language-and-Code Cross-modal Attacks on LLM Agent Skills","created":"2026-06-12","cited_by_count":5,"area":"agents"}],"next_cursor":"100"}