{"total":15,"rows":[{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2508.20412","title":"MindGuard: Intrinsic Decision Inspection for Securing LLM Agents Against Metadata Poisoning","created":"2025-08-28","cited_by_count":10,"area":"agents"},{"id":"2606.23416","title":"Detecting Malicious Agent Skills in the Wild using Attention","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2606.05391","title":"Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents","created":"2026-06-03","cited_by_count":6,"area":"agents"},{"id":"2605.08828","title":"When Agents Overtrust Environmental Evidence: An Extensible Agentic Framework for Benchmarking Evidence-Grounding Defects in LLM Agents","created":"2026-05-09","cited_by_count":3,"area":"agents"},{"id":"2605.08460","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2606.31227","title":"Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming","created":"2026-06-30","cited_by_count":2,"area":"agents"},{"id":"2605.21392","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","created":"2026-05-20","cited_by_count":0,"area":"agents"},{"id":"2607.05744","title":"Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2608.30441","title":"ECLIPSE: Self-Evolving Stealthy Prompt Injection Attack against Long-Horizon Agentic Systems","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.26761","title":"A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2610.06966","title":"APEX: Active Protection at Execution Boundaries for LLM Agents","created":"2026-10-03","cited_by_count":0,"area":"agents"}],"next_cursor":null}