{"total":22,"rows":[{"id":"2603.15125","title":"From Storage to Steering: Memory Control Flow Attacks on LLM Agents","created":"2026-03-16","cited_by_count":19,"area":"agents"},{"id":"2604.13630","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","created":"2026-04-15","cited_by_count":15,"area":"agents"},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2509.25624","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","created":"2025-09-30","cited_by_count":8,"area":"agents"},{"id":"2606.22504","title":"Lingering Authority: Revocable Resource-and-Effect Capabilities for Coding Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2602.10498","title":"When Skills Lie: Hidden-Comment Injection in LLM Agents","created":"2026-02-11","cited_by_count":7,"area":"agents"},{"id":"2603.23802","title":"How are AI agents used? Evidence from 177,000 MCP tools","created":"2026-03-25","cited_by_count":7,"area":"agents"},{"id":"2604.18874","title":"How Adversarial Environments Mislead Agentic AI?","created":"2026-04-20","cited_by_count":5,"area":"agents"},{"id":"2604.03870","title":"Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs","created":"2026-04-04","cited_by_count":4,"area":"agents"},{"id":"2602.15945","title":"From Tool Orchestration to Code Execution: A Study of MCP Design Choices","created":"2026-02-17","cited_by_count":3,"area":"agents"},{"id":"2604.10286","title":"STARS: Skill-Triggered Audit for Request-Conditioned Invocation Safety in Agent Systems","created":"2026-04-11","cited_by_count":3,"area":"agents"},{"id":"2606.20922","title":"Think Twice Before You Act: Protecting LLM Agents Against Tool Description Poisoning via Isolated Planning","created":"2026-06-18","cited_by_count":3,"area":"agents"},{"id":"2604.16543","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","created":"2026-04-17","cited_by_count":2,"area":"agents"},{"id":"2608.12273","title":"Convergent Detour Hijacking: Task-Preserving Resource Amplification in Skill-Based LLM Agents","created":"2026-08-12","cited_by_count":2,"area":"agents"},{"id":"2603.13950","title":"ToolFlood: Beyond Selection -- Hiding Valid Tools from LLM Agents via Semantic Covering","created":"2026-03-14","cited_by_count":1,"area":"agents"},{"id":"2604.04426","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","created":"2026-04-06","cited_by_count":1,"area":"agents"},{"id":"2605.23916","title":"Agent-Facing Information Design in LLM Tool Registries","created":"2026-04-12","cited_by_count":0,"area":"agents"},{"id":"2608.27800","title":"ContextLeak: Exfiltrating LLM Agent Context via Malicious Tools","created":"2026-08-28","cited_by_count":0,"area":"agents"},{"id":"2609.02035","title":"Implicit Manipulation for Skill Selection in LLM Agents with Semantic Matching","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.26761","title":"A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.30383","title":"Stealth Apart, Harm Together: Skill Cascading Attacks on Skill-Based Agent Systems","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2610.19422","title":"AgentSafeEvo: Adversarial Co-Evolution for LLM Agent Safety","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}