{"total":13,"rows":[{"id":"2508.13220","title":"MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols","created":"2025-08-17","cited_by_count":51,"area":"agents"},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2509.25292","title":"A Measurement Study of Model Context Protocol Ecosystem","created":"2025-09-29","cited_by_count":13,"area":"agents"},{"id":"2606.20023","title":"When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents","created":"2026-06-18","cited_by_count":13,"area":"agents"},{"id":"2602.10498","title":"When Skills Lie: Hidden-Comment Injection in LLM Agents","created":"2026-02-11","cited_by_count":7,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2602.15945","title":"From Tool Orchestration to Code Execution: A Study of MCP Design Choices","created":"2026-02-17","cited_by_count":3,"area":"agents"},{"id":"2509.22814","title":"Model Context Protocol for Vision Systems: Audit, Security, and Protocol Extensions","created":"2025-09-26","cited_by_count":1,"area":"agents"},{"id":"2606.05339","title":"A Taxonomy of Runtime Faults in Model Context Protocol Servers","created":"2026-06-03","cited_by_count":1,"area":"agents"},{"id":"2606.15822","title":"TrustedARI: Towards Trust-Native Agentic Routing Infrastructure for Agentic AI","created":"2026-06-14","cited_by_count":1,"area":"agents"},{"id":"2605.14312","title":"Making OpenAPI Documentation Agent-Ready: Detecting Documentation and REST Smells with a Multi-Agent LLM System","created":"2026-05-14","cited_by_count":0,"area":"agents"},{"id":"2609.33371","title":"API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary","created":"2026-09-27","cited_by_count":0,"area":"agents"}],"next_cursor":null}