{"total":54,"rows":[{"id":"2602.20156","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","created":"2026-02-23","cited_by_count":90,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2603.15714","title":"How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2604.13630","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","created":"2026-04-15","cited_by_count":15,"area":"agents"},{"id":"2603.22862","title":"The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration","created":"2026-03-24","cited_by_count":14,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2510.08829","title":"CommandSans: Securing AI Agents with Surgical Precision Prompt Sanitization","created":"2025-10-09","cited_by_count":12,"area":"agents"},{"id":"2510.17276","title":"Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems","created":"2025-10-20","cited_by_count":12,"area":"agents"},{"id":"2509.25926","title":"Preventing Prompt Injection with Type-Directed Privilege Separation","created":"2025-09-30","cited_by_count":9,"area":"agents"},{"id":"2603.18916","title":"Agentic Business Process Management: A Research Manifesto","created":"2026-03-19","cited_by_count":8,"area":"agents"},{"id":"2606.22504","title":"Lingering Authority: Revocable Resource-and-Effect Capabilities for Coding Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2507.06323","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","created":"2025-07-08","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2510.13825","title":"A2AS: Agentic AI Runtime Security and Self-Defense","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2512.05374","title":"Please Don't Kill My Vibe: Empowering Agents with Data Flow Control","created":"2025-12-05","cited_by_count":4,"area":"agents"},{"id":"2512.22211","title":"With Great Capabilities Come Great Responsibilities: Introducing the Agentic Risk & Capability Framework for Governing Agentic AI Systems","created":"2025-12-22","cited_by_count":4,"area":"agents"},{"id":"2601.19752","title":"Agentic Design Patterns: A System-Theoretic Framework","created":"2026-01-27","cited_by_count":4,"area":"agents"},{"id":"2605.14290","title":"Web Agents Should Adopt the Plan-Then-Execute Paradigm","created":"2026-05-14","cited_by_count":4,"area":"agents"},{"id":"2604.10286","title":"STARS: Skill-Triggered Audit for Request-Conditioned Invocation Safety in Agent Systems","created":"2026-04-11","cited_by_count":3,"area":"agents"},{"id":"2606.26479","title":"Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents","created":"2026-06-25","cited_by_count":3,"area":"agents"},{"id":"2607.01510","title":"Janus: a Playground for User-Involved Agentic Permission Management","created":"2026-07-01","cited_by_count":3,"area":"agents"},{"id":"2607.05277","title":"Untrusted Content Masking for Web Agents with Security Guarantees","created":"2026-07-06","cited_by_count":3,"area":"agents"},{"id":"2512.23132","title":"Multi-Agent Framework for Threat Mitigation and Resilience in AI-Based Systems","created":"2025-12-29","cited_by_count":2,"area":"agents"},{"id":"2605.19192","title":"Hallucination as Exploit: Evidence-Carrying Multimodal Agents","created":"2026-05-18","cited_by_count":2,"area":"agents"},{"id":"2606.02080","title":"Agentic-J: An AI Agent for Biological Microscopy Image Analysis","created":"2026-06-01","cited_by_count":2,"area":"agents"},{"id":"2608.27496","title":"ROPE: Routed Origin Policy Enforcement against Indirect Prompt Injection","created":"2026-08-27","cited_by_count":2,"area":"agents"},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2605.11868","title":"IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection","created":"2026-05-12","cited_by_count":1,"area":"agents"},{"id":"2605.28617","title":"LACUNA: Safe Agents as Recursive Program Holes","created":"2026-05-27","cited_by_count":1,"area":"agents"},{"id":"2606.23277","title":"GIF: Locally Sound Geometric Information Flow Control for LLMs","created":"2026-06-22","cited_by_count":1,"area":"agents"},{"id":"2607.05120","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","created":"2026-07-06","cited_by_count":1,"area":"agents"},{"id":"2607.08147","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","created":"2026-07-09","cited_by_count":1,"area":"agents"},{"id":"2607.20759","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","created":"2026-07-22","cited_by_count":1,"area":"agents"},{"id":"2602.15290","title":"Intellicise Wireless Networks Meet Agentic AI: A Security and Privacy Perspective","created":"2026-02-17","cited_by_count":0,"area":"agents"},{"id":"2606.23927","title":"RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems","created":"2026-06-22","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2607.19595","title":"Twin Agent: Context Residual Compression for Privilege Separated Agents","created":"2026-07-21","cited_by_count":0,"area":"agents"},{"id":"2608.21101","title":"ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.21423","title":"Agentic Security: A Systematization of Tools, Failure Modes, and Design Laws for LLM-Driven Penetration Testing","created":"2026-08-16","cited_by_count":0,"area":"agents"},{"id":"2608.27141","title":"Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2608.27146","title":"When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.22949","title":"Beyond Single-Model Injection: A Threat Model and Defense Architecture for Prompt Injection in Multi-Agent Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.28585","title":"Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.36570","title":"CounterSteer: Suppressing Indirect Prompt Injection with Activation Steering","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39065","title":"Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.02569","title":"Pincer: Resource Authorization for Agents using a Digital Twin","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.04083","title":"Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.09469","title":"Secure-CUA: Controlling Untrusted Influence in Computer-Use Agents","created":"2026-10-07","cited_by_count":0,"area":"agents"},{"id":"2610.11030","title":"NOMOS: Compiling Written Policies into Statically Verified Tool-Call Gates for LLM Agents","created":"2026-10-08","cited_by_count":0,"area":"agents"}],"next_cursor":null}