{"total":38,"rows":[{"id":"2604.11790","title":"ClawGuard: A Runtime Security Framework for Tool-Augmented LLM Agents Against Indirect Prompt Injection","created":"2026-04-13","cited_by_count":27,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2605.28914","title":"AIRGuard: Guarding Agent Actions with Runtime Authority Control","created":"2026-05-27","cited_by_count":13,"area":"agents"},{"id":"2605.13940","title":"AgentTrap: Measuring Runtime Trust Failures in Third-Party Agent Skills","created":"2026-05-13","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2608.21156","title":"Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligence","created":"2026-08-21","cited_by_count":3,"area":"agents"},{"id":"2603.24203","title":"Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search","created":"2026-03-25","cited_by_count":2,"area":"agents"},{"id":"2604.07551","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","created":"2026-04-08","cited_by_count":2,"area":"agents"},{"id":"2605.11047","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","created":"2026-05-11","cited_by_count":2,"area":"agents"},{"id":"2604.04426","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","created":"2026-04-06","cited_by_count":1,"area":"agents"},{"id":"2605.24069","title":"When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents","created":"2026-05-22","cited_by_count":1,"area":"agents"},{"id":"2606.23277","title":"GIF: Locally Sound Geometric Information Flow Control for LLMs","created":"2026-06-22","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2607.21835","title":"ToolGuardian: Declarative Security for AI Agent-Tool Interactions","created":"2026-07-23","cited_by_count":1,"area":"agents"},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2604.13849","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","created":"2026-04-15","cited_by_count":0,"area":"agents"},{"id":"2605.07110","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2605.11229","title":"Comment and Control: Hijacking Agentic Workflows via Context-Grounded Evolution","created":"2026-05-11","cited_by_count":0,"area":"agents"},{"id":"2607.03423","title":"Securing Multi-Tool AI Agent Chains With Dynamic, Real-Time Compositional Policies","created":"2026-07-03","cited_by_count":0,"area":"agents"},{"id":"2607.20531","title":"DynamicMCPBench: A Trace-Grounded, Effect-Scored Benchmark for LLM Agents over Live MCP Servers","created":"2026-07-10","cited_by_count":0,"area":"agents"},{"id":"2608.06130","title":"Hardware Keystores for AI Agent Signing Workflows: A Zero-Trust MCP Enforcement Architecture","created":"2026-08-06","cited_by_count":0,"area":"agents"},{"id":"2608.17275","title":"When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Calling","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.01693","title":"Public-Sharing Labels and Verbatim Field Egress in an MCP-to-A2A Agent Configuration: A Controlled Multi-Model Study","created":"2026-09-01","cited_by_count":0,"area":"agents"},{"id":"2609.03884","title":"A Blind Trust, the Bloody Thrust: When Attacker-Controlled Hook Updates Steer AI Agent Harnesses towards Malicious Behaviors","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.14987","title":"ActGuard: Pre-execution Action Auditing against Indirect Prompt Injection in LLM Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.18217","title":"Measuring and Exploiting Implicit Trust in LLM Tool-Calling Pipelines","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.25173","title":"Attack Success Rate Is Not a Number: On Measurement Validity in Agentic AI Security Evaluation","created":"2026-09-21","cited_by_count":0,"area":"agents"},{"id":"2609.28585","title":"Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.28915","title":"On the Effectiveness of Kernel-Level Evidence for Agent Security","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2610.01349","title":"PACE: Provenance-Aware Capability Enforcement for Tool-Using LLM Agents","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.04378","title":"COPEX: Benchmarking LLM Robustness to Adversarial Context Across Model Context Protocol Layers","created":"2026-10-03","cited_by_count":0,"area":"agents"},{"id":"2610.06966","title":"APEX: Active Protection at Execution Boundaries for LLM Agents","created":"2026-10-03","cited_by_count":0,"area":"agents"},{"id":"2610.15529","title":"Agent-Canary-Mas: End-to-End Evaluation of Protocol Risk in Long-Horizon Multi-Agent Systems","created":"2026-10-11","cited_by_count":0,"area":"agents"},{"id":"2610.19422","title":"AgentSafeEvo: Adversarial Co-Evolution for LLM Agent Safety","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}