{"total":51,"rows":[{"id":"2507.15219","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","created":"2025-07-21","cited_by_count":108,"area":"agents"},{"id":"2506.02456","title":"VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents","created":"2025-06-03","cited_by_count":45,"area":"agents"},{"id":"2510.12252","title":"PromptLocate: Localizing Prompt Injection Attacks","created":"2025-10-14","cited_by_count":28,"area":"safety"},{"id":"2602.14211","title":"SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents","created":"2026-02-15","cited_by_count":25,"area":"agents"},{"id":"2511.20597","title":"BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents","created":"2025-11-25","cited_by_count":24,"area":"safety"},{"id":"2604.01438","title":"ClawSafety: \"Safe\" LLMs, Unsafe Agents","created":"2026-04-01","cited_by_count":17,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2602.03792","title":"WebSentinel: Detecting and Localizing Prompt Injection Attacks for Web Agents","created":"2026-02-03","cited_by_count":11,"area":"agents"},{"id":"2511.13248","title":"DualTAP: A Dual-Task Adversarial Protector for Mobile MLLM Agents","created":"2025-11-17","cited_by_count":9,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2602.17345","title":"What Breaks Embodied AI Security:LLM Vulnerabilities, CPS Flaws,or Something Else?","created":"2026-02-19","cited_by_count":6,"area":null},{"id":"2601.02371","title":"Permission Manifests for Web Agents","created":"2025-12-07","cited_by_count":5,"area":"agents"},{"id":"2605.28999","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","created":"2026-05-27","cited_by_count":5,"area":"safety"},{"id":"2601.21961","title":"How do Visual Attributes Influence Web Agents? A Comprehensive Evaluation of User Interface Design Factors","created":"2026-01-29","cited_by_count":4,"area":"agents"},{"id":"2605.14290","title":"Web Agents Should Adopt the Plan-Then-Execute Paradigm","created":"2026-05-14","cited_by_count":4,"area":"agents"},{"id":"2605.15030","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","created":"2026-05-14","cited_by_count":4,"area":"agents"},{"id":"2511.20494","title":"Adversarial Confusion Attack: Disrupting Multimodal Large Language Models","created":"2025-11-25","cited_by_count":3,"area":"mllm"},{"id":"2603.18762","title":"ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation","created":"2026-03-19","cited_by_count":3,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3,"area":"agents"},{"id":"2604.12284","title":"WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2605.28201","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2607.05277","title":"Untrusted Content Masking for Web Agents with Security Guarantees","created":"2026-07-06","cited_by_count":3,"area":"agents"},{"id":"2607.14493","title":"Context Contamination in LLM Analysis of Network Security Logs: Poison with Passive Prompt Injection and Mitigation Evaluation","created":"2026-07-16","cited_by_count":3,"area":"safety"},{"id":"2606.13385","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2607.19957","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","created":"2026-07-22","cited_by_count":2,"area":"inference"},{"id":"2601.01584","title":"Steerability of Instrumental-Convergence Tendencies in LLMs","created":"2026-01-04","cited_by_count":1,"area":null},{"id":"2602.07104","title":"Extended to Reality: Prompt Injection in 3D Environments","created":"2026-02-06","cited_by_count":1,"area":"mllm"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2606.12474","title":"SAIGuard: Communication-State Simulation for Proactive Defense of LLM Multi-Agent Systems","created":"2026-06-10","cited_by_count":1,"area":"agents"},{"id":"2608.04053","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2609.09404","title":"An Experimental Evaluation of Multimodal Prompt Injection Attacks on Agentic AI Frameworks","created":"2026-09-08","cited_by_count":1,"area":"agents"},{"id":"2605.00460","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.07110","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2606.06387","title":"WebMCP Tool Surface Poisoning: Runtime Manipulation Attacks on LLM Agents","created":"2026-06-04","cited_by_count":0,"area":"agents"},{"id":"2606.20717","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","created":"2026-06-16","cited_by_count":0,"area":"agents"},{"id":"2607.04334","title":"Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure","created":"2026-07-05","cited_by_count":0,"area":"agents"},{"id":"2607.28165","title":"Piggybacking on Perception: Stealthy Concurrent Audio Prompt Injections against Multimodal LLM Agents","created":"2026-07-30","cited_by_count":0,"area":"agents"},{"id":"2608.03740","title":"MissClick: Execution-Aware Adversarial Attacks on Coordinate Generation in GUI Grounding Models","created":"2026-08-04","cited_by_count":0,"area":null},{"id":"2608.24017","title":"WebMCP-Phalanx: Enforcing and Characterizing Trust Boundaries for Browser-Integrated LLM Agents","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2608.30303","title":"Lazy Grounding: Attacking Search Agents with Factual Evidence","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.05535","title":"Beyond the Verdict: Evidence-Aligned Evaluation of Visual Prompt-Injection Guardrails","created":"2026-09-02","cited_by_count":0,"area":"mllm"},{"id":"2609.09212","title":"AgentHijack: Visual Patch Attacks on Multimodal Computer-Use Agents","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.14723","title":"Detecting and Localizing Segment-Level Poisoning in Multi-Source LLM-Agent Inputs","created":"2026-09-13","cited_by_count":0,"area":"agents"},{"id":"2609.14987","title":"ActGuard: Pre-execution Action Auditing against Indirect Prompt Injection in LLM Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.26072","title":"Policy-Backed Selective Regeneration under Tainted Inter-Agent Communication","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2609.34463","title":"CoDeL: Co-Evolutionary Defense against Indirect Prompt Injection in LLM-based Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.09240","title":"Adversarial Images Hijack Web Agents from Visual Grounding to Browser Execution","created":"2026-10-07","cited_by_count":0,"area":"agents"},{"id":"2610.17457","title":"BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}