{"total":21,"rows":[{"id":"2606.04329","title":"From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents","created":"2026-06-03","cited_by_count":33,"area":"agents"},{"id":"2603.11619","title":"Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats","created":"2026-03-12","cited_by_count":29,"area":"agents"},{"id":"2602.07918","title":"CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution","created":"2026-02-08","cited_by_count":14,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2606.10525","title":"Assessing Automated Prompt Injection Attacks in Agentic Environments","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2607.06595","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","created":"2026-07-06","cited_by_count":6,"area":"agents"},{"id":"2606.15057","title":"AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents","created":"2026-06-13","cited_by_count":5,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2601.10758","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","created":"2026-01-14","cited_by_count":3,"area":"agents"},{"id":"2607.05277","title":"Untrusted Content Masking for Web Agents with Security Guarantees","created":"2026-07-06","cited_by_count":3,"area":"agents"},{"id":"2608.27496","title":"ROPE: Routed Origin Policy Enforcement against Indirect Prompt Injection","created":"2026-08-27","cited_by_count":2,"area":"agents"},{"id":"2608.05108","title":"Agent Against Agent: An Agentic System for Automatic Prompt Injection Red Teaming","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.24022","title":"What Guides the Agent? Adjudicating Unauthorized Behavior via Localizing Behavior-Guiding Instructions","created":"2026-08-25","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2605.01143","title":"A Low-Latency Fraud Detection Layer for Detecting Adversarial Interaction Patterns in LLM-Powered Agents","created":"2026-05-01","cited_by_count":0,"area":"agents"},{"id":"2605.12535","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","created":"2026-05-02","cited_by_count":0,"area":"agents"},{"id":"2607.24964","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","created":"2026-07-27","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2609.36570","title":"CounterSteer: Suppressing Indirect Prompt Injection with Activation Steering","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.37196","title":"ToolFence: Fine-Grained Authorization for Secure Tool-Using LLM Agents","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39107","title":"MASCRDM: Multi-Agent System for Compliance Risk Detection and Mitigation in Training Process of Large Language Models","created":"2026-09-30","cited_by_count":0,"area":"agents"}],"next_cursor":null}