{"total":32,"rows":[{"id":"2603.11619","title":"Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats","created":"2026-03-12","cited_by_count":29,"area":"agents"},{"id":"2607.13104","title":"Self-Improvements in Modern Agentic Systems: A Survey","created":"2026-07-14","cited_by_count":19,"area":"agents"},{"id":"2606.24322","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","created":"2026-06-23","cited_by_count":18,"area":"agents"},{"id":"2605.18930","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","created":"2026-05-18","cited_by_count":14,"area":"agents"},{"id":"2606.25115","title":"Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memory","created":"2026-06-23","cited_by_count":9,"area":"agents"},{"id":"2604.15367","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","created":"2026-04-15","cited_by_count":8,"area":"agents"},{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2608.10502","title":"From Faulty Memories to Corrected Actions: Dependency-Guided Rollback Repair for Memory-Augmented Agents","created":"2026-08-11","cited_by_count":8,"area":"agents"},{"id":"2605.23723","title":"MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection","created":"2026-05-22","cited_by_count":7,"area":"agents"},{"id":"2606.07943","title":"Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents","created":"2026-06-06","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2607.14651","title":"MemPoison: Uncovering Persistent Memory Threats and Structural Blind Spots in LLM Agents","created":"2026-07-16","cited_by_count":7,"area":"agents"},{"id":"2606.22030","title":"When Does Belief-Based Agent Memory Help? Reliability-Conditional Updating and Provenance-Capped Poisoning Defense","created":"2026-06-20","cited_by_count":6,"area":"agents"},{"id":"2605.09330","title":"The Trap of Trajectory: Towards Understanding and Mitigating Spurious Correlations in Agentic Memory","created":"2026-05-10","cited_by_count":4,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2607.05189","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","created":"2026-07-06","cited_by_count":2,"area":"agents"},{"id":"2608.17597","title":"HarnessRisk: A Lifecycle-Oriented Benchmark for Agent Harness Safety","created":"2026-08-18","cited_by_count":2,"area":"agents"},{"id":"2605.06393","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.10742","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","created":"2026-06-09","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.02683","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2605.08468","title":"PYTHALAB-MERA: Validation-Grounded Memory, Retrieval, and Acceptance Control for Frozen-LLM Coding Agents","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2608.07952","title":"Persistent Semantic Entities in Tool-Augmented LLM Systems","created":"2026-08-08","cited_by_count":0,"area":"agents"},{"id":"2608.17665","title":"GraphWake: Group Polarization via Memory-Mediated Polarization Cascade in LLM-Agent Communities","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2609.08747","title":"MemSentry: A Framework for Detecting Persistent Memory Poisoning in Agentic AI","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.34132","title":"From Attack Success to Attack Severity: Counterfactual Memory Attacks on LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"},{"id":"2610.14431","title":"MemForm: Benchmarking Memory Formation Poisoning in LLM Agents","created":"2026-10-10","cited_by_count":0,"area":"agents"}],"next_cursor":null}