{"total":17,"rows":[{"id":"2603.24414","title":"ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, and Watchers","created":"2026-03-25","cited_by_count":20,"area":null},{"id":"2604.11806","title":"Detecting Safety Violations Across Many Agent Traces","created":"2026-04-13","cited_by_count":14,"area":null},{"id":"2510.00307","title":"BiasBusters: Uncovering and Mitigating Tool Selection Bias in Large Language Models","created":"2025-09-30","cited_by_count":11,"area":null},{"id":"2606.22916","title":"Intent-Governed Tool Authorization for AI Agents","created":"2026-06-22","cited_by_count":5,"area":null},{"id":"2605.05271","title":"IntraGuard: Committee-Side Defenses Against Review Outsourcing to Commercial Chatbots","created":"2026-05-06","cited_by_count":2,"area":null},{"id":"2607.25364","title":"Explanation-Bound Tool Execution for AI Agents: Server-Verified Action Claims Without Trusting Model Rationales","created":"2026-07-28","cited_by_count":2,"area":null},{"id":"2601.01584","title":"Steerability of Instrumental-Convergence Tendencies in LLMs","created":"2026-01-04","cited_by_count":1,"area":null},{"id":"2604.16762","title":"CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution","created":"2026-04-18","cited_by_count":1,"area":null},{"id":"2605.13213","title":"Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2605.18414","title":"Prompts Don't Protect: Architectural Enforcement via MCP Proxy for LLM Tool Access Control","created":"2026-05-18","cited_by_count":1,"area":null},{"id":"2606.10173","title":"Beyond Locality: Feature-Boundary Auditing for OS-Integrated AI","created":"2026-06-08","cited_by_count":1,"area":null},{"id":"2608.09124","title":"ChronoState: Hidden Elapsed-Time Conditioning for Temporal-State Action Selection in Frozen-Backbone Language Models","created":"2026-08-10","cited_by_count":1,"area":null},{"id":"2606.28270","title":"Agent-Native Immune System: Architecture, Taxonomy, and Engineering","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2607.19837","title":"Know Your Agent: Reconnaissance-Driven Pentesting of AI Agents","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2610.02920","title":"HASTE: Evolving Agent Harnesses Against Emerging Attacks Using Sparse Evidence","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.08098","title":"Surviving the Router: Optimizing Skill Injections for Retrieval and Execution","created":"2026-10-06","cited_by_count":0,"area":null},{"id":"2610.17820","title":"Same Attack, Different Judge: A First Controlled Adversarial Comparison of Jev, LLM Judges, and Purpose-Built Safety Classifiers","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}