{"total":56,"rows":[{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2509.14745","title":"On the Use of Agentic Coding: An Empirical Study of Pull Requests on GitHub","created":"2025-09-18","cited_by_count":55,"area":"agents"},{"id":"2508.13220","title":"MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols","created":"2025-08-17","cited_by_count":51,"area":"agents"},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2509.06216","title":"Agentic Software Engineering: Foundational Pillars and a Research Roadmap","created":"2025-09-07","cited_by_count":41,"area":"agents"},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2511.12884","title":"Agent READMEs: An Empirical Study of Context Files for Agentic Coding","created":"2025-11-17","cited_by_count":23,"area":"agents"},{"id":"2602.14878","title":"Model Context Protocol (MCP) Tool Descriptions Are Smelly! Towards Improving AI Agent Efficiency with Augmented MCP Tool Descriptions","created":"2026-02-16","cited_by_count":17,"area":"agents"},{"id":"2509.19185","title":"An Empirical Study of Testing Practices in Open Source AI Agent Frameworks and Agentic Applications","created":"2025-09-23","cited_by_count":15,"area":"agents"},{"id":"2512.08769","title":"A Practical Guide for Designing, Developing, and Deploying Production-Grade Agentic AI Workflows","created":"2025-12-09","cited_by_count":15,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2507.16044","title":"From REST to MCP: An Empirical Study of API Wrapping and Automated Server Generation for LLM Agents","created":"2025-07-21","cited_by_count":14,"area":"agents"},{"id":"2510.23673","title":"MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers","created":"2025-10-27","cited_by_count":14,"area":"agents"},{"id":"2601.10955","title":"Beyond Max Tokens: Stealthy Resource Amplification via Tool Calling Chains in LLM Agents","created":"2026-01-16","cited_by_count":14,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2510.24284","title":"MCP-Flow: Facilitating LLM Agents to Master Real-World, Diverse and Scaling MCP Tools","created":"2025-10-28","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2509.05941","title":"Code2MCP: Transforming Code Repositories into MCP Services","created":"2025-09-07","cited_by_count":10,"area":"agents"},{"id":"2606.23416","title":"Detecting Malicious Agent Skills in the Wild using Attention","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2509.20175","title":"Federation of Agents: A Semantics-Aware Communication Fabric for Large-Scale Agentic AI","created":"2025-09-24","cited_by_count":7,"area":"agents"},{"id":"2603.05637","title":"Real Faults in Model Context Protocol (MCP) Software: a Comprehensive Taxonomy","created":"2026-03-05","cited_by_count":6,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2602.01129","title":"SMCP: Secure Model Context Protocol","created":"2026-02-01","cited_by_count":5,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2602.10122","title":"A Practical Guide to Agentic AI Transition in Organizations","created":"2026-01-27","cited_by_count":5,"area":"agents"},{"id":"2604.18071","title":"Architectural Design Decisions in AI Agent Harnesses","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2510.00229","title":"AgentFlux: Decoupled Fine-Tuning & Inference for On-Device Agentic Systems","created":"2025-09-30","cited_by_count":3,"area":"agents"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2602.15945","title":"From Tool Orchestration to Code Execution: A Study of MCP Design Choices","created":"2026-02-17","cited_by_count":3,"area":"agents"},{"id":"2605.02729","title":"Augmenting Interface Usability Heuristics for Reliable Computer-Use Agents","created":"2026-05-04","cited_by_count":3,"area":"agents"},{"id":"2605.08828","title":"When Agents Overtrust Environmental Evidence: An Extensible Agentic Framework for Benchmarking Evidence-Grounding Defects in LLM Agents","created":"2026-05-09","cited_by_count":3,"area":"agents"},{"id":"2606.02470","title":"MCP-Persona: Benchmarking LLM Agents on Real-World Personal Applications via Environment Simulation","created":"2026-06-01","cited_by_count":3,"area":"agents"},{"id":"2604.07551","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","created":"2026-04-08","cited_by_count":2,"area":"agents"},{"id":"2607.00911","title":"From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintained","created":"2026-07-01","cited_by_count":2,"area":"agents"},{"id":"2603.25243","title":"FluxEDA: A Unified Execution Infrastructure for Stateful Agentic EDA","created":"2026-03-26","cited_by_count":1,"area":"agents"},{"id":"2604.17125","title":"CASCADE: A Component Ablation and Corpus Audit of a Layered Local Defense for MCP-Based Systems","created":"2026-04-18","cited_by_count":1,"area":"agents"},{"id":"2606.05339","title":"A Taxonomy of Runtime Faults in Model Context Protocol Servers","created":"2026-06-03","cited_by_count":1,"area":"agents"},{"id":"2608.27990","title":"CAITLYN: Can LLM Agents Autonomously Synthesize Defenses against Emerging Injection Attacks?","created":"2026-08-28","cited_by_count":1,"area":"agents"},{"id":"2605.05247","title":"DADL: A Declarative Description Language for Enterprise Tool Libraries in LLM Agent Systems","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2605.16269","title":"Train the Trainers -- An Agentic AI Framework for Peer-Based Mental Health Support in Battlefield Environments","created":"2026-03-31","cited_by_count":0,"area":"agents"},{"id":"2605.21392","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","created":"2026-05-20","cited_by_count":0,"area":"agents"},{"id":"2606.09182","title":"Understanding How Enterprises Adopt the Model Context Protocol for LLM-Driven Software Engineering","created":"2026-06-08","cited_by_count":0,"area":"agents"},{"id":"2606.21071","title":"Local LLM Agents as Vulnerable Runtimes:A Source-Code Audit of the Agent Runtime Layer","created":"2026-06-19","cited_by_count":0,"area":"agents"},{"id":"2606.30317","title":"MCP Server Architecture Patterns for LLM-Integrated Applications","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.05743","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2607.08288","title":"From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure","created":"2026-07-09","cited_by_count":0,"area":"agents"},{"id":"2607.25635","title":"An Empirical Study of Model Context Protocol Applications","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2608.17659","title":"MobileWorldSafety: Benchmarking GUI Agent Safety Against Environmental Injection Attacks in Android Apps","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2608.20481","title":"AEGIS: Preventing Cross-Domain Resource Abuse in MCP","created":"2026-08-20","cited_by_count":0,"area":"agents"},{"id":"2609.14721","title":"A Two-Dimensional Study of the Model Context Protocol: Publication and Adoption","created":"2026-09-13","cited_by_count":0,"area":"agents"},{"id":"2609.17698","title":"A Large-Scale Empirical Study of Quality Assurance Practices and Gaps in AI Agents","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.25173","title":"Attack Success Rate Is Not a Number: On Measurement Validity in Agentic AI Security Evaluation","created":"2026-09-21","cited_by_count":0,"area":"agents"},{"id":"2609.28557","title":"BaseCamp --- An Agentic AI Framework for Automating DNA Sequencing Data Pipelines","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2610.04375","title":"Do Tool Calls Execute as Intended? Measuring and Repairing Intent-Execution Correspondence in LLM Agents","created":"2026-10-03","cited_by_count":0,"area":"agents"},{"id":"2610.04378","title":"COPEX: Benchmarking LLM Robustness to Adversarial Context Across Model Context Protocol Layers","created":"2026-10-03","cited_by_count":0,"area":"agents"}],"next_cursor":null}