{"total":15,"rows":[{"id":"2602.07918","title":"CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution","created":"2026-02-08","cited_by_count":14,"area":"agents"},{"id":"2603.11853","title":"OpenClaw PRISM: A Zero-Fork, Defense-in-Depth Runtime Security Layer for Tool-Augmented LLM Agents","created":"2026-03-12","cited_by_count":11,"area":"agents"},{"id":"2602.20708","title":"ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correction","created":"2026-02-24","cited_by_count":10,"area":"agents"},{"id":"2606.22504","title":"Lingering Authority: Revocable Resource-and-Effect Capabilities for Coding Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2604.03870","title":"Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs","created":"2026-04-04","cited_by_count":4,"area":"agents"},{"id":"2607.10490","title":"NetInjectBench: Benchmarking Indirect Prompt Injection in Tool-Using Large Language Model Agents for Network Operations","created":"2026-07-11","cited_by_count":4,"area":"agents"},{"id":"2605.28201","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2606.21856","title":"Harness-MU: A Safe, Governed, and Effective Harness for Multi-User LLM Agents","created":"2026-06-20","cited_by_count":1,"area":"agents"},{"id":"2607.24625","title":"APPA: Recoverable Information-Flow Control for Real-World LLM Agents","created":"2026-07-27","cited_by_count":1,"area":"agents"},{"id":"2609.11028","title":"BenchShield: Formal Model-Backed Instrumentation for Reward Integrity in LLM-Agent Evaluation Infrastructure","created":"2026-09-10","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2608.11295","title":"Backdoor Decontamination Dynamics in LLM Agents","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2609.08371","title":"Authority Is Not a String: A Capability-Scoped Harness for Prompt-Injection-Resistant Coding Agents","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.36576","title":"Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?","created":"2026-09-29","cited_by_count":0,"area":"agents"}],"next_cursor":null}