{"total":13,"rows":[{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2605.11770","title":"Behavioral Integrity Verification for AI Agent Skills","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2609.00006","title":"Harness Engineering: Anatomy, Architecture, and Evolution of Coding Agents -- A Source-Code Study of Eleven Systems","created":"2026-07-15","cited_by_count":6,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2512.15144","title":"MCPZoo: A Large-Scale Dataset of Runnable Model Context Protocol Servers for AI Agent","created":"2025-12-17","cited_by_count":4,"area":"agents"},{"id":"2606.04769","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","created":"2026-06-03","cited_by_count":2,"area":"agents"},{"id":"2606.05339","title":"A Taxonomy of Runtime Faults in Model Context Protocol Servers","created":"2026-06-03","cited_by_count":1,"area":"agents"},{"id":"2605.21392","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","created":"2026-05-20","cited_by_count":0,"area":"agents"},{"id":"2606.30317","title":"MCP Server Architecture Patterns for LLM-Integrated Applications","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.15593","title":"Scalable LLM Agent Tool Access in the Cloud","created":"2026-07-17","cited_by_count":0,"area":"agents"},{"id":"2607.25635","title":"An Empirical Study of Model Context Protocol Applications","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2609.33371","title":"API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary","created":"2026-09-27","cited_by_count":0,"area":"agents"}],"next_cursor":null}