{"total":28,"rows":[{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2510.07978","title":"VoiceAgentBench: Are Voice Assistants ready for agentic tasks?","created":"2025-10-09","cited_by_count":19,"area":"agents"},{"id":"2506.10953","title":"Build the web for agents, not agents for the web","created":"2025-06-12","cited_by_count":18,"area":"agents"},{"id":"2510.03204","title":"FocusAgent: Simple Yet Effective Ways of Trimming the Large Context of Web Agents","created":"2025-10-03","cited_by_count":16,"area":"agents"},{"id":"2510.03285","title":"WAREX: Web Agent Reliability Evaluation on Existing Benchmarks","created":"2025-09-28","cited_by_count":15,"area":"agents"},{"id":"2602.07918","title":"CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution","created":"2026-02-08","cited_by_count":14,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2604.10577","title":"The Blind Spot of Agent Safety: How Benign User Instructions Expose Critical Vulnerabilities in Computer-Use Agents","created":"2026-04-12","cited_by_count":12,"area":"agents"},{"id":"2510.01670","title":"Just Do It!? Computer-Use Agents Exhibit Blind Goal-Directedness","created":"2025-10-02","cited_by_count":9,"area":"agents"},{"id":"2510.11035","title":"SusBench: An Online Benchmark for Evaluating Dark Pattern Susceptibility of Computer-Use Agents","created":"2025-10-13","cited_by_count":8,"area":"agents"},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2510.05159","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","created":"2025-10-03","cited_by_count":6,"area":"agents"},{"id":"2506.07153","title":"Mind the Web: The Security of Web Use Agents","created":"2025-06-08","cited_by_count":5,"area":"agents"},{"id":"2506.02859","title":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs","created":"2025-06-03","cited_by_count":4,"area":"agents"},{"id":"2602.12285","title":"From Biased Chatbots to Biased Agents: Examining Role Assignment Effects on LLM Agent Robustness","created":"2026-01-21","cited_by_count":3,"area":"agents"},{"id":"2603.18762","title":"ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation","created":"2026-03-19","cited_by_count":3,"area":"agents"},{"id":"2604.15505","title":"PolicyBank: Evolving Policy Understanding for LLM Agents","created":"2026-04-16","cited_by_count":3,"area":"agents"},{"id":"2605.05509","title":"WAAA! Web Adversaries Against Agentic Browsers","created":"2026-05-06","cited_by_count":3,"area":"agents"},{"id":"2606.13686","title":"Benchmarking Web Agent Safety under E-commerce Deceptive Interfaces","created":"2026-04-26","cited_by_count":3,"area":"agents"},{"id":"2607.05277","title":"Untrusted Content Masking for Web Agents with Security Guarantees","created":"2026-07-06","cited_by_count":3,"area":"agents"},{"id":"2608.06477","title":"StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection","created":"2026-08-06","cited_by_count":3,"area":"agents"},{"id":"2608.02018","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2606.06708","title":"Signal-Driven Observation for Long-Horizon Web Agents","created":"2026-06-04","cited_by_count":0,"area":"agents"}],"next_cursor":null}