{"total":22,"rows":[{"id":"2607.10487","title":"Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents","created":"2026-07-11","cited_by_count":18,"area":"agents"},{"id":"2604.16968","title":"On Safety Risks in Experience-Driven Self-Evolving Agents","created":"2026-04-18","cited_by_count":14,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2602.03012","title":"CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2607.01236","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","created":"2026-05-01","cited_by_count":6,"area":"agents"},{"id":"2606.18198","title":"Seeing Is Not Screening: Multimodal Hidden Instruction Attacks on Agent Skill Scanners","created":"2026-06-16","cited_by_count":5,"area":"agents"},{"id":"2606.06976","title":"Exploring Agentic Tool-Calling Decisions via Uncertainty-Aligned Reinforcement Learning","created":"2026-06-05","cited_by_count":4,"area":"agents"},{"id":"2605.22643","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","created":"2026-05-21","cited_by_count":3,"area":"agents"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2512.16532","title":"From Personalization to Prejudice: Bias and Discrimination in Memory-Enhanced AI Agents for Recruitment","created":"2025-12-18","cited_by_count":1,"area":"agents"},{"id":"2607.13594","title":"SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing","created":"2026-07-15","cited_by_count":1,"area":"agents"},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.13564","title":"Inducing Reward-Free Judging Rubrics that Reduce Over-Crediting in Agent Evaluation","created":"2026-06-25","cited_by_count":1,"area":"agents"},{"id":"2609.02889","title":"Where Does Harness-Optimization Value Live? Localized Gains and the Budget-Splitting Trap in Self-Evolving LLM Agents","created":"2026-06-25","cited_by_count":1,"area":"agents"},{"id":"2607.16199","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2609.04217","title":"At Equal Inference Cost, Multi-Agent Structure Does Not Beat a Single Frozen Agent","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2609.07395","title":"Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study","created":"2026-09-07","cited_by_count":0,"area":"agents"},{"id":"2609.22067","title":"Value-Sensitive Delegation in Everyday AI Agent Use: Evidence from OpenClaw","created":"2026-09-18","cited_by_count":0,"area":"agents"},{"id":"2609.32778","title":"Agentic Network Traffic Monitoring","created":"2026-09-26","cited_by_count":0,"area":"agents"}],"next_cursor":null}