{"total":27,"rows":[{"id":"2603.00195","title":"Formal Analysis and Supply Chain Security for Agentic AI Skills","created":"2026-02-27","cited_by_count":25,"area":"agents"},{"id":"2603.11853","title":"OpenClaw PRISM: A Zero-Fork, Defense-in-Depth Runtime Security Layer for Tool-Augmented LLM Agents","created":"2026-03-12","cited_by_count":11,"area":"agents"},{"id":"2603.19328","title":"The Verifier Tax: Horizon Dependent Safety Success Tradeoffs in Tool Using LLM Agents","created":"2026-03-18","cited_by_count":11,"area":"agents"},{"id":"2605.24309","title":"Reframing LLM Agent Security as an Agent-Human Interaction Problem","created":"2026-05-23","cited_by_count":9,"area":"agents"},{"id":"2605.27690","title":"TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling","created":"2026-05-26","cited_by_count":8,"area":"agents"},{"id":"2604.10286","title":"STARS: Skill-Triggered Audit for Request-Conditioned Invocation Safety in Agent Systems","created":"2026-04-11","cited_by_count":3,"area":"agents"},{"id":"2605.00424","title":"Skills as Verifiable Artifacts: A Trust Schema and a Biconditional Correctness Criterion for Human-in-the-Loop Agent Runtimes","created":"2026-05-01","cited_by_count":3,"area":"agents"},{"id":"2605.10990","title":"Skill Drift Is Contract Violation: Proactive Maintenance for LLM Agent Skill Libraries","created":"2026-05-09","cited_by_count":3,"area":"agents"},{"id":"2605.22643","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","created":"2026-05-21","cited_by_count":3,"area":"agents"},{"id":"2604.01483","title":"Type-Checked Compliance: Deterministic Guardrails for Agentic Financial Systems Using Lean 4 Theorem Proving","created":"2026-04-01","cited_by_count":2,"area":"agents"},{"id":"2608.14590","title":"Toward Safe LLM Agents: A Survey of Specification, Verification, and Enforcement","created":"2026-06-22","cited_by_count":2,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2604.18658","title":"Owner-Harm: A Missing Threat Model for AI Agent Safety","created":"2026-04-20","cited_by_count":1,"area":"agents"},{"id":"2606.06523","title":"Lean4Agent: Formal Modeling and Verification for Agent Workflow and Trajectory","created":"2026-06-02","cited_by_count":1,"area":"agents"},{"id":"2607.00334","title":"Managed Autonomy at Runtime: Gear-Based Safety and Governance for Single- and Multi-Agent Cyber-Physical Systems","created":"2026-07-01","cited_by_count":1,"area":"agents"},{"id":"2607.13594","title":"SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing","created":"2026-07-15","cited_by_count":1,"area":"agents"},{"id":"2608.13574","title":"Agentao: A Policy-Governed Runtime Harness for Embeddable Tool-Using LLM Agents","created":"2026-07-04","cited_by_count":1,"area":"agents"},{"id":"2609.03588","title":"KC-Bench: A Dynamic Interactive Benchmark for Evaluating Knowledge Conflicts in LLM Agents","created":"2026-09-03","cited_by_count":1,"area":"agents"},{"id":"2603.27905","title":"ATLAS-RTC: Closing the Loop on LLM Agent Output with Token-Level Runtime Control","created":"2026-03-29","cited_by_count":0,"area":"agents"},{"id":"2605.11229","title":"Comment and Control: Hijacking Agentic Workflows via Context-Grounded Evolution","created":"2026-05-11","cited_by_count":0,"area":"agents"},{"id":"2606.02483","title":"Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools","created":"2026-06-01","cited_by_count":0,"area":"agents"},{"id":"2606.08531","title":"ForesightSafety-SAGE:A Fully Automated Scenario Generation and Safety Evaluation Framework for LLM Agents","created":"2026-06-07","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2609.32184","title":"AI Harness: Certification under Proposal-Conditioned Information for Foundation-Model Agents","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.39717","title":"Trust Is Not a Score: Runtime Assurance Contracts for High-Risk AI Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.01195","title":"Federated Agent Optimization","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.15390","title":"From Acoustic Sensing to Physical Actions: A Comprehensive Survey of Security Risks in Edge-Deployed Audio LLM-Based Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}