{"total":62,"rows":[{"id":"2509.24704","title":"MemGen: Weaving Generative Latent Memory for Self-Evolving Agents","created":"2025-09-29","cited_by_count":109,"area":"agents"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2510.02373","title":"A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory","created":"2025-09-29","cited_by_count":67,"area":"agents"},{"id":"2509.18970","title":"LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directions","created":"2025-09-23","cited_by_count":50,"area":"agents"},{"id":"2604.02022","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","created":"2026-04-02","cited_by_count":36,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2607.09996","title":"Who&When Pro: Can LLMs Really Attribute Failures in AI Agents?","created":"2026-07-10","cited_by_count":18,"area":"agents"},{"id":"2506.15253","title":"RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environments","created":"2025-06-18","cited_by_count":17,"area":"agents"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2507.21407","title":"Graph-Augmented Large Language Model Agents: Current Progress and Future Prospects","created":"2025-07-29","cited_by_count":14,"area":"agents"},{"id":"2510.11108","title":"A Vision for Access Control in LLM-based Agent Systems","created":"2025-10-13","cited_by_count":14,"area":"agents"},{"id":"2512.04111","title":"CentaurEval: Benchmarking Human-in-the-Loop Value in Agentic Coding","created":"2025-11-30","cited_by_count":12,"area":"agents"},{"id":"2512.23128","title":"It's a TRAP! Task-Redirecting Agent Persuasion Benchmark for Web Agents","created":"2025-12-29","cited_by_count":10,"area":"agents"},{"id":"2601.07470","title":"Learning How to Remember: A Meta-Cognitive Management Method for Structured and Transferable Agent Memory","created":"2026-01-12","cited_by_count":10,"area":"agents"},{"id":"2602.03224","title":"TAME: A Trustworthy Test-Time Evolution of Agent Memory with Systematic Benchmarking","created":"2026-02-03","cited_by_count":10,"area":"agents"},{"id":"2604.13954","title":"HINTBench: Horizon-agent Intrinsic Non-attack Trajectory Benchmark","created":"2026-04-15","cited_by_count":9,"area":"agents"},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2605.27690","title":"TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling","created":"2026-05-26","cited_by_count":8,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2506.02546","title":"To trust or not to trust: Attention-based Trust Management for LLM Multi-Agent Systems","created":"2025-06-03","cited_by_count":6,"area":"agents"},{"id":"2608.24777","title":"StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing","created":"2026-08-25","cited_by_count":6,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2608.18398","title":"LEDGER: Claim-to-Evidence Trace Graphs for Auditing LLM Agents","created":"2026-08-19","cited_by_count":5,"area":"agents"},{"id":"2508.07745","title":"Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulation","created":"2025-08-11","cited_by_count":4,"area":"agents"},{"id":"2510.15739","title":"AURA: An Agent Autonomy Risk Assessment Framework","created":"2025-10-17","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2607.20982","title":"GuardianAgentBench: Where Agents Fail and How to Guard Them","created":"2026-07-23","cited_by_count":4,"area":"agents"},{"id":"2603.11862","title":"You Told Me to Do It: Measuring Instructional Text-induced Private Data Leakage in LLM Agents","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2607.27294","title":"AgentS4D: Benchmarking Runtime Risks across the Execution Lifecycle of LLM-Based Workspace Agents","created":"2026-07-29","cited_by_count":3,"area":"agents"},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2604.24920","title":"SUDP: Secret-Use Delegation Protocol for Agentic Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2605.07135","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.20874","title":"Governance by Construction for Generalist Agents","created":"2026-05-20","cited_by_count":1,"area":"agents"},{"id":"2606.00611","title":"TRACE: Trajectory Risk-Aware Compression for Long-Horizon Agent Safety","created":"2026-05-30","cited_by_count":1,"area":"agents"},{"id":"2606.04037","title":"Toward Pre-Deployment Assurance for Enterprise AI Agents: Ontology-Grounded Simulation and Trust Certification","created":"2026-06-02","cited_by_count":1,"area":"agents"},{"id":"2606.12474","title":"SAIGuard: Communication-State Simulation for Proactive Defense of LLM Multi-Agent Systems","created":"2026-06-10","cited_by_count":1,"area":"agents"},{"id":"2607.28037","title":"ClawTrack: Towards Trace-Level Evaluation and Improvement of Real-World Autonomous Agents","created":"2026-07-30","cited_by_count":1,"area":"agents"},{"id":"2608.17718","title":"Beyond Suspicious Steps: Ontological Trust in Long-Horizon Agents","created":"2026-08-18","cited_by_count":1,"area":"agents"},{"id":"2607.22569","title":"Execution-Grounded Security Testing for Coding Agents in Software Engineering Pipelines","created":"2026-06-01","cited_by_count":0,"area":"agents"},{"id":"2608.00104","title":"Skillsets on the Chain: A Blockchain-based Zero-Trust Framework for Agentic AI Networking","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.01637","title":"Salami Attack: Stealthy Collusive Memory Poisoning against OpenClaw","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.09577","title":"ElasticBack: Stealthy Conditional Backdoor in LLM-Agent Skills via Coupled Trigger-Rule Optimization","created":"2026-08-10","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.24275","title":"RePolicy: Reinforcement Learning for Safety-Policy Invocation in Agent Safeguards","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2609.06783","title":"AURA-Eval: Evaluation Framework for Acting Under Risk Awareness in LLM Agent Trajectories","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.09212","title":"AgentHijack: Visual Patch Attacks on Multimodal Computer-Use Agents","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.15134","title":"HazardAuditor: From Executable Threats to Safer Computer-Use Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.18128","title":"Symbolic Temporal Supervision of LLM Agents Using Contracts","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.22724","title":"MATE: Policy-Aware Security Auditing for Mobile Agents via Synthesis-Driven Trajectory Learning","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.33039","title":"Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal States","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.07089","title":"Towards a Unified Misuse Monitoring Benchmark","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.08662","title":"ParanoiaEval: Benchmarking Unnecessary Defensive Work in Agentic Coding","created":"2026-10-06","cited_by_count":0,"area":"agents"},{"id":"2610.11561","title":"Workerville: Towards an Organizational Behavior Account of Agent Safety","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}