{"total":15,"rows":[{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2602.01129","title":"SMCP: Secure Model Context Protocol","created":"2026-02-01","cited_by_count":5,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2603.22447","title":"Latent Reuse in Agent Skills: Multi-modal Clone Detection at Ecosystem Scale","created":"2026-03-23","cited_by_count":4,"area":"agents"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2603.24203","title":"Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search","created":"2026-03-25","cited_by_count":2,"area":"agents"},{"id":"2604.07551","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","created":"2026-04-08","cited_by_count":2,"area":"agents"},{"id":"2606.09084","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","created":"2026-06-08","cited_by_count":2,"area":"agents"},{"id":"2603.07473","title":"Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2606.05339","title":"A Taxonomy of Runtime Faults in Model Context Protocol Servers","created":"2026-06-03","cited_by_count":1,"area":"agents"},{"id":"2608.05204","title":"SkillTrace: Multi-Trace Provenance Auditing for LLM-Agent Skill Reuse","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2606.06387","title":"WebMCP Tool Surface Poisoning: Runtime Manipulation Attacks on LLM Agents","created":"2026-06-04","cited_by_count":0,"area":"agents"},{"id":"2606.09182","title":"Understanding How Enterprises Adopt the Model Context Protocol for LLM-Driven Software Engineering","created":"2026-06-08","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.33371","title":"API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary","created":"2026-09-27","cited_by_count":0,"area":"agents"}],"next_cursor":null}