{"total":30,"rows":[{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2512.15163","title":"MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers","created":"2025-12-17","cited_by_count":34,"area":"agents"},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2508.10991","title":"MCP-Guard: A Multi-Stage Defense-in-Depth Framework for Securing Model Context Protocol in Agentic AI","created":"2025-08-14","cited_by_count":19,"area":"agents"},{"id":"2602.14878","title":"Model Context Protocol (MCP) Tool Descriptions Are Smelly! Towards Improving AI Agent Efficiency with Augmented MCP Tool Descriptions","created":"2026-02-16","cited_by_count":17,"area":"agents"},{"id":"2510.23673","title":"MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers","created":"2025-10-27","cited_by_count":14,"area":"agents"},{"id":"2601.10955","title":"Beyond Max Tokens: Stealthy Resource Amplification via Tool Calling Chains in LLM Agents","created":"2026-01-16","cited_by_count":14,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2601.12449","title":"AgenTRIM: Tool Risk Mitigation for Agentic AI","created":"2026-01-18","cited_by_count":11,"area":"agents"},{"id":"2511.03841","title":"Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation","created":"2025-11-05","cited_by_count":9,"area":"agents"},{"id":"2602.19555","title":"SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime","created":"2026-02-23","cited_by_count":8,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2603.24203","title":"Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search","created":"2026-03-25","cited_by_count":2,"area":"agents"},{"id":"2604.07551","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","created":"2026-04-08","cited_by_count":2,"area":"agents"},{"id":"2604.20994","title":"Breaking MCP with Function Hijacking Attacks: Novel Threats for Function Calling and Agentic Models","created":"2026-04-22","cited_by_count":2,"area":"agents"},{"id":"2605.09889","title":"Skill Description Deception Attack against Task Routing in Internet of Agents","created":"2026-05-11","cited_by_count":2,"area":"agents"},{"id":"2606.27027","title":"ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP","created":"2026-06-25","cited_by_count":2,"area":"agents"},{"id":"2606.02302","title":"SeClaw: Spec-Driven Security Task Synthesis for Evaluating Autonomous Agents","created":"2026-06-01","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2608.01558","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2602.21127","title":"\"Are You Sure?\": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems","created":"2026-02-24","cited_by_count":0,"area":"agents"},{"id":"2604.13849","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","created":"2026-04-15","cited_by_count":0,"area":"agents"},{"id":"2605.23916","title":"Agent-Facing Information Design in LLM Tool Registries","created":"2026-04-12","cited_by_count":0,"area":"agents"},{"id":"2608.17275","title":"When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Calling","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.02564","title":"A Finger on the Scale: Covert Policy Steering through Agentic Skills","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.26761","title":"A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2610.03014","title":"Beyond Predefined Sinks: Security-Aware Dependency Analysis for LLM Agents","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.14334","title":"Which Metadata Matters for LLM Tool Selection in MCP? Evidence from Controlled Factor-Level Interventions","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}