{"total":19,"rows":[{"id":"2606.04990","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","created":"2026-06-03","cited_by_count":37,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2606.22504","title":"Lingering Authority: Revocable Resource-and-Effect Capabilities for Coding Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2606.03024","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","created":"2026-06-02","cited_by_count":6,"area":"agents"},{"id":"2607.13987","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","created":"2026-07-15","cited_by_count":5,"area":"agents"},{"id":"2605.28071","title":"AgentGuard: An Attribute-Based Access Control Framework for Tool-Use LLM-Based Agent","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2603.28428","title":"Synergy: A Next-Generation General-Purpose Agent for Open Agentic Web","created":"2026-03-30","cited_by_count":2,"area":"agents"},{"id":"2605.02187","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2607.05743","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2607.23624","title":"Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?","created":"2026-07-26","cited_by_count":0,"area":"agents"},{"id":"2608.05884","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","created":"2026-08-06","cited_by_count":0,"area":"agents"},{"id":"2608.06130","title":"Hardware Keystores for AI Agent Signing Workflows: A Zero-Trust MCP Enforcement Architecture","created":"2026-08-06","cited_by_count":0,"area":"agents"},{"id":"2608.27443","title":"Do User-Authored Permission Policies Improve Protection Against AI Agent Overreach?","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2609.17648","title":"Trust propagation and structural containment in Multi-agent LLM pipelines","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.26529","title":"From Approval to Execution: Reconstruction-Aware Repair Analysis for LLM-Agent Software","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.28915","title":"On the Effectiveness of Kernel-Level Evidence for Agent Security","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2610.06001","title":"AgentSpy: Making AI Agent Behavior Observable","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}