{"total":20,"rows":[{"id":"2605.14271","title":"Auditing Agent Harness Safety","created":"2026-05-14","cited_by_count":11,"area":"agents"},{"id":"2605.11514","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2605.02801","title":"Reinforcement Learning for LLM-based Multi-Agent Systems through Orchestration Traces","created":"2026-05-04","cited_by_count":5,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2606.28958","title":"When Latent Agents Lie: KV-Cache Integrity in Multi-Agent LLM Collaboration","created":"2026-06-27","cited_by_count":4,"area":"agents"},{"id":"2605.19240","title":"CASPIAN: Online Detection and Attribution of Cascade Attacks in LLM Multi-Agent Systems via Cross-Channel Causal Monitoring","created":"2026-05-19","cited_by_count":3,"area":"agents"},{"id":"2604.16543","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","created":"2026-04-17","cited_by_count":2,"area":"agents"},{"id":"2605.17480","title":"The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2606.30602","title":"MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.26120","title":"Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systems","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2608.00202","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.03272","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.32635","title":"Trust the Brand, Lose Control: How Identity Hijacks LLM Agent Orchestration","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.37567","title":"Concealing LLM-Based Multi-Agent Topology via Phantom Structure Injection","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39297","title":"MiniRep: Robust Reputation-Based Aggregation for Multi-Agent Debate","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.14071","title":"Loose Lips: Understanding Privacy Leakage in Agentic Dialogue","created":"2026-10-07","cited_by_count":0,"area":"agents"}],"next_cursor":null}