{"total":45,"rows":[{"id":"2504.18575","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","created":"2025-04-22","cited_by_count":157,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2510.05445","title":"AgentRouter: A Knowledge-Graph-Guided LLM Router for Collaborative Multi-Agent Question Answering","created":"2025-10-06","cited_by_count":32,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2604.02623","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","created":"2026-04-03","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2505.17716","title":"Get Experience from Practice: LLM Agents with Record & Replay","created":"2025-05-23","cited_by_count":23,"area":"agents"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2508.10880","title":"Searching for Privacy Risks in LLM Agents via Simulation","created":"2025-08-14","cited_by_count":22,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2602.05073","title":"Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunities","created":"2026-02-04","cited_by_count":20,"area":"agents"},{"id":"2510.24411","title":"OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows","created":"2025-10-28","cited_by_count":19,"area":"agents"},{"id":"2601.09923","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","created":"2026-01-14","cited_by_count":17,"area":"agents"},{"id":"2509.10723","title":"Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight","created":"2025-09-12","cited_by_count":16,"area":"agents"},{"id":"2505.14418","title":"Hidden Ghost Hand: Unveiling Backdoor Vulnerabilities in MLLM-Powered Mobile GUI Agents","created":"2025-05-20","cited_by_count":13,"area":"agents"},{"id":"2505.14289","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","created":"2025-05-20","cited_by_count":9,"area":"agents"},{"id":"2505.12842","title":"GEM: Gaussian Embedding Modeling for Out-of-Distribution Detection in GUI Agents","created":"2025-05-19","cited_by_count":8,"area":"agents"},{"id":"2510.11035","title":"SusBench: An Online Benchmark for Evaluating Dark Pattern Susceptibility of Computer-Use Agents","created":"2025-10-13","cited_by_count":8,"area":"agents"},{"id":"2505.09875","title":"Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsing","created":"2025-05-15","cited_by_count":7,"area":"agents"},{"id":"2509.11250","title":"Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments","created":"2025-09-14","cited_by_count":6,"area":"agents"},{"id":"2601.12349","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","created":"2026-01-18","cited_by_count":6,"area":"agents"},{"id":"2604.04918","title":"Comparing Human Oversight Strategies for Computer-Use Agents","created":"2026-04-06","cited_by_count":6,"area":"agents"},{"id":"2601.16356","title":"The Behavioral Fabric of LLM-Powered GUI Agents: Human Values and Interaction Outcomes","created":"2026-01-22","cited_by_count":4,"area":"agents"},{"id":"2602.10915","title":"Blind Gods and Broken Screens: Architecting a Secure, Intent-Centric Mobile Agent Operating System","created":"2026-02-11","cited_by_count":4,"area":"agents"},{"id":"2505.17861","title":"Superplatforms Have to Attack AI Agents","created":"2025-05-23","cited_by_count":3,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3,"area":"agents"},{"id":"2604.09574","title":"Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization","created":"2026-02-24","cited_by_count":3,"area":"agents"},{"id":"2607.05277","title":"Untrusted Content Masking for Web Agents with Security Guarantees","created":"2026-07-06","cited_by_count":3,"area":"agents"},{"id":"2507.02699","title":"Your Mailbox Is Mine: Prompt Injection Attacks Against Real-World LLM Email Agents","created":"2025-07-03","cited_by_count":2,"area":"agents"},{"id":"2510.18289","title":"Food4All: An Agentic Framework and Benchmark for Food Resource Navigation with Adaptive User Understanding","created":"2025-10-21","cited_by_count":2,"area":"agents"},{"id":"2601.08406","title":"WebTrap Park: An Automated Platform for Systematic Security Evaluation of Web Agents","created":"2026-01-13","cited_by_count":2,"area":"agents"},{"id":"2602.05987","title":"From Human-Human Collaboration to Human-Agent Collaboration: A Vision, Design Philosophy, and an Empirical Framework for Achieving Successful Partnerships Between Humans and LLM Agents","created":"2026-02-05","cited_by_count":2,"area":"agents"},{"id":"2603.23007","title":"AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents","created":"2026-03-24","cited_by_count":2,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2608.02018","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2608.09278","title":"Software Engineering for and with GUI Agent","created":"2026-08-10","cited_by_count":1,"area":"agents"},{"id":"2602.21127","title":"\"Are You Sure?\": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems","created":"2026-02-24","cited_by_count":0,"area":"agents"},{"id":"2607.02846","title":"Object-Centric Environment Modeling for Agentic Tasks","created":"2026-07-03","cited_by_count":0,"area":"agents"},{"id":"2608.09946","title":"HoosierHelp: Benchmarking LLM Agents for Social Service Navigation","created":"2026-07-03","cited_by_count":0,"area":"agents"},{"id":"2608.17659","title":"MobileWorldSafety: Benchmarking GUI Agent Safety Against Environmental Injection Attacks in Android Apps","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2609.09212","title":"AgentHijack: Visual Patch Attacks on Multimodal Computer-Use Agents","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2610.03089","title":"Securing Computer-Use Agents Against Branch Steering Attacks","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.12823","title":"When Charts Deceive Web Agents: A Paired Benchmark for Misleading Visualization-Grounded Tasks","created":"2026-10-09","cited_by_count":0,"area":"agents"},{"id":"2610.16778","title":"PrivacyGuard: Source-Linked Sanitization and Locally Resolvable PII References for Cloud GUI Agents","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}