{"total":33,"rows":[{"id":"2602.16901","title":"AgentLAB: Benchmarking LLM Agents against Long-Horizon Attacks","created":"2026-02-18","cited_by_count":39,"area":"agents"},{"id":"2512.15163","title":"MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers","created":"2025-12-17","cited_by_count":34,"area":"agents"},{"id":"2508.19461","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","created":"2025-08-26","cited_by_count":31,"area":"agents"},{"id":"2604.02623","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","created":"2026-04-03","cited_by_count":24,"area":"agents"},{"id":"2512.13526","title":"Async Control: Stress-testing Asynchronous Control Measures for LLM Agents","created":"2025-12-15","cited_by_count":22,"area":"agents"},{"id":"2603.01608","title":"Evaluating and Understanding Scheming Propensity in LLM Agents","created":"2026-03-02","cited_by_count":14,"area":"agents"},{"id":"2508.07935","title":"SHIELDA: Structured Handling of Exceptions in LLM-Driven Agentic Workflows","created":"2025-08-11","cited_by_count":13,"area":"agents"},{"id":"2605.08715","title":"AgentForesight: Online Auditing for Early Failure Prediction in Multi-Agent Systems","created":"2026-05-09","cited_by_count":11,"area":"agents"},{"id":"2601.06663","title":"SafePro: Evaluating the Safety of Professional-Level AI Agents","created":"2026-01-10","cited_by_count":10,"area":"agents"},{"id":"2602.13477","title":"OMNI-LEAK: Orchestrator Multi-Agent Network Induced Data Leakage","created":"2026-02-13","cited_by_count":9,"area":"agents"},{"id":"2509.25624","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","created":"2025-09-30","cited_by_count":8,"area":"agents"},{"id":"2604.15384","title":"LinuxArena: A Control Setting for AI Agents in Live Production Software Environments","created":"2026-04-16","cited_by_count":8,"area":"agents"},{"id":"2605.03228","title":"Safeguarding LLM Agents against Long-Horizon Threats via Shadow Memory","created":"2026-05-04","cited_by_count":7,"area":"agents"},{"id":"2602.22303","title":"Training Agents to Self-Report Misbehavior","created":"2026-02-25","cited_by_count":6,"area":"agents"},{"id":"2607.02514","title":"Distributed Attacks in Persistent-State AI Control","created":"2026-07-02","cited_by_count":5,"area":"agents"},{"id":"2605.09684","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","created":"2026-05-10","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2606.05647","title":"Coding with \"Enemy\": Can Human Developers Detect AI Agent Sabotage?","created":"2026-06-04","cited_by_count":4,"area":"agents"},{"id":"2511.04707","title":"Jailbreaking in the Haystack","created":"2025-11-05","cited_by_count":2,"area":"agents"},{"id":"2609.00038","title":"trajectory-judge: What Outcome-Only LLM Judges Miss on Agent Trajectories","created":"2026-08-29","cited_by_count":2,"area":"agents"},{"id":"2606.06529","title":"Attack Selection in Agentic AI Control Evaluations Meaningfully Decreases Safety","created":"2026-06-03","cited_by_count":1,"area":"agents"},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.08126","title":"SchemeArena: Factorized Stress Testing of Scheming in LLM Agents","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.19587","title":"Red-Teaming Auto Mode: Improving Blocking Classifiers Against Malign Coding Agents","created":"2026-09-17","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.30383","title":"Stealth Apart, Harm Together: Skill Cascading Attacks on Skill-Based Agent Systems","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.33295","title":"TraceDance: An Automated System for Building Agent Behavior Benchmarks from Real-World Agent Deployment Traces","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.38291","title":"HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.04083","title":"Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.04378","title":"COPEX: Benchmarking LLM Robustness to Adversarial Context Across Model Context Protocol Layers","created":"2026-10-03","cited_by_count":0,"area":"agents"},{"id":"2610.07089","title":"Towards a Unified Misuse Monitoring Benchmark","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.12445","title":"Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deception","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.17727","title":"SkillScreen: High-Recall Screening of Malicious Agent Skills with Decision Models","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}