{"total":28,"rows":[{"id":"2604.02022","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","created":"2026-04-02","cited_by_count":36,"area":"agents"},{"id":"2604.02947","title":"AgentHazard: A Benchmark for Evaluating Harmful Behavior in Computer-Use Agents","created":"2026-04-03","cited_by_count":18,"area":"agents"},{"id":"2601.10955","title":"Beyond Max Tokens: Stealthy Resource Amplification via Tool Calling Chains in LLM Agents","created":"2026-01-16","cited_by_count":14,"area":"agents"},{"id":"2601.06663","title":"SafePro: Evaluating the Safety of Professional-Level AI Agents","created":"2026-01-10","cited_by_count":10,"area":"agents"},{"id":"2602.03224","title":"TAME: A Trustworthy Test-Time Evolution of Agent Memory with Systematic Benchmarking","created":"2026-02-03","cited_by_count":10,"area":"agents"},{"id":"2602.20708","title":"ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correction","created":"2026-02-24","cited_by_count":10,"area":"agents"},{"id":"2605.11882","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","created":"2026-05-12","cited_by_count":8,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2608.24777","title":"StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing","created":"2026-08-25","cited_by_count":6,"area":"agents"},{"id":"2606.01166","title":"BraveGuard: From Open-World Threats to Safer Computer-Use Agents","created":"2026-05-31","cited_by_count":4,"area":"agents"},{"id":"2603.04469","title":"Cross-Layer Semantic Flow Reconstruction for Attack Detection in Agentic Systems","created":"2026-03-04","cited_by_count":3,"area":"agents"},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3,"area":"agents"},{"id":"2605.16346","title":"PropGuard: Safeguarding LLM-MAS via Propagation-Aware Exploration and Remediation","created":"2026-05-08","cited_by_count":3,"area":"agents"},{"id":"2605.22321","title":"ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents","created":"2026-05-21","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2607.13081","title":"SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification","created":"2026-07-13","cited_by_count":2,"area":"agents"},{"id":"2605.06230","title":"Safactory: A Scalable Agentic Infrastructure for Training Trustworthy Autonomous Intelligence","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2610.00400","title":"Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2608.24275","title":"RePolicy: Reinforcement Learning for Safety-Policy Invocation in Agent Safeguards","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2608.25340","title":"HRGuard: Gating Relationship Manipulation in Multi-Turn Agentic AI Conversations","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.15134","title":"HazardAuditor: From Executable Threats to Safer Computer-Use Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.22724","title":"MATE: Policy-Aware Security Auditing for Mobile Agents via Synthesis-Driven Trajectory Learning","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.33039","title":"Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal States","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.34241","title":"AdaGuard: An Adaptive Guard Model with User-defined Policies","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.07089","title":"Towards a Unified Misuse Monitoring Benchmark","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.11773","title":"Safe Actions Alone Do Not Ensure Safe Agents: Identifying Unfulfilled Obligations with Guard Models","created":"2026-10-08","cited_by_count":0,"area":"agents"}],"next_cursor":null}