{"total":72,"rows":[{"id":"2604.20087","title":"SkillLearnBench: Benchmarking Continual Learning Methods for Agent Skill Generation on Real-World Tasks","created":"2026-04-22","cited_by_count":55,"area":"agents"},{"id":"2604.18292","title":"Agent-World: Scaling Real-World Environment Synthesis for Evolving General Agent Intelligence","created":"2026-04-20","cited_by_count":54,"area":"agents"},{"id":"2601.12449","title":"AgenTRIM: Tool Risk Mitigation for Agentic AI","created":"2026-01-18","cited_by_count":11,"area":"agents"},{"id":"2604.13954","title":"HINTBench: Horizon-agent Intrinsic Non-attack Trajectory Benchmark","created":"2026-04-15","cited_by_count":9,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2603.14707","title":"Visual Confused Deputy: Exploiting and Defending Perception Failures in Computer-Using Agents","created":"2026-03-16","cited_by_count":7,"area":"safety"},{"id":"2604.05229","title":"From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI","created":"2026-04-06","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2606.05805","title":"From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents","created":"2026-06-04","cited_by_count":6,"area":"agents"},{"id":"2606.29225","title":"PolicyGuard: A Dialogue-Grounded Sub-Agent Verifier for Policy Adherence in LLM Agents","created":"2026-06-28","cited_by_count":6,"area":"agents"},{"id":"2608.09885","title":"SHE: Trajectory-driven Safety Harness Evolution for LLM Agents","created":"2026-08-10","cited_by_count":6,"area":"agents"},{"id":"2608.24777","title":"StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing","created":"2026-08-25","cited_by_count":6,"area":"agents"},{"id":"2605.29253","title":"OpenClawBench: Benchmarking Process-side Anomalies in Real-world Agent Execution Trajectories","created":"2026-05-28","cited_by_count":4,"area":null},{"id":"2606.08919","title":"Oversight Has a Capacity: Calibrating Agent Guards to a Subjective, Fatiguing Human","created":"2026-06-08","cited_by_count":4,"area":"agents"},{"id":"2607.22868","title":"What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents","created":"2026-07-24","cited_by_count":4,"area":"safety"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2603.20260","title":"ProMAS: Proactive Error Forecasting for Multi-Agent Systems Using Markov Transition Dynamics","created":"2026-03-12","cited_by_count":3,"area":"agents"},{"id":"2605.28201","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2606.12329","title":"PROJECTMEM: A Local-First, Event-Sourced Memory and Judgment Layer for AI Coding Agents","created":"2026-06-10","cited_by_count":3,"area":"agents"},{"id":"2606.22673","title":"AgentLens: Interpretable Safety Steering via Mechanistic Subspaces for Multi-Turn Coding Agent","created":"2026-06-21","cited_by_count":3,"area":"agents"},{"id":"2607.07774","title":"ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agents","created":"2026-07-08","cited_by_count":3,"area":"agents"},{"id":"2608.05695","title":"DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model","created":"2026-08-06","cited_by_count":3,"area":"wm"},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2603.18245","title":"Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety","created":"2026-03-18","cited_by_count":2,"area":"agents"},{"id":"2604.19818","title":"Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI","created":"2026-04-18","cited_by_count":2,"area":"agents"},{"id":"2605.17453","title":"Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2,"area":"agents"},{"id":"2606.04051","title":"RUBAS: Rubric-Based Reinforcement Learning for Agent Safety","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2608.19303","title":"Outcome Monitors: Recovery Affordances for Silent Tool Failures","created":"2026-08-19","cited_by_count":2,"area":null},{"id":"2609.00038","title":"trajectory-judge: What Outcome-Only LLM Judges Miss on Agent Trajectories","created":"2026-08-29","cited_by_count":2,"area":"agents"},{"id":"2606.08234","title":"SciTrace: Trajectory-Aware Safety Reasoning for Scientific Discovery Agents","created":"2026-06-06","cited_by_count":1,"area":"lr"},{"id":"2606.14517","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","created":"2026-06-12","cited_by_count":1,"area":"agents"},{"id":"2607.04528","title":"Measuring Harness-Induced Belief Divergence in Multi-Step LLM Agents","created":"2026-07-05","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2607.13594","title":"SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing","created":"2026-07-15","cited_by_count":1,"area":"agents"},{"id":"2607.19356","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2607.19913","title":"JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety","created":"2026-07-22","cited_by_count":1,"area":null},{"id":"2608.07639","title":"SkillConsist: Detecting Inconsistencies in Agent Skills via Bidirectional Graph Alignment","created":"2026-08-07","cited_by_count":1,"area":"agents"},{"id":"2608.28411","title":"LongPIBench: A Long-Context Benchmark for Prompt Injection","created":"2026-08-28","cited_by_count":1,"area":"safety"},{"id":"2609.00015","title":"OpenAgentFlow: Enabling System-Wide Safety Boundaries for Heterogeneous AI Agent Fleets","created":"2026-08-14","cited_by_count":1,"area":"agents"},{"id":"2609.29543","title":"Safe Skill Retirement for Physical Agents","created":"2026-08-25","cited_by_count":1,"area":null},{"id":"2609.30325","title":"ScopeBench: Do Agents Preserve Engagement Boundaries Under Goal Pressure?","created":"2026-09-23","cited_by_count":1,"area":null},{"id":"2609.33658","title":"AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents","created":"2026-09-27","cited_by_count":1,"area":"agents"},{"id":"2605.02346","title":"APIOT: Autonomous Vulnerability Management Across Bare-Metal Industrial OT Networks","created":"2026-05-04","cited_by_count":0,"area":null},{"id":"2605.12240","title":"No Action Without a NOD: A Heterogeneous Multi-Agent Architecture for Reliable Service Agents","created":"2026-05-12","cited_by_count":0,"area":"agents"},{"id":"2606.02483","title":"Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools","created":"2026-06-01","cited_by_count":0,"area":"agents"},{"id":"2606.09038","title":"Personalization Meets Safety:Mechanisms,Risks,and Mitigations in Personalized LLMs","created":"2026-06-08","cited_by_count":0,"area":"moe"},{"id":"2606.19812","title":"Human-on-the-Loop Orchestration for AI-Assisted Legal Discovery","created":"2026-06-18","cited_by_count":0,"area":"lr"},{"id":"2607.23624","title":"Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?","created":"2026-07-26","cited_by_count":0,"area":"agents"},{"id":"2607.26314","title":"StealthBench: Measuring Operational Stealth in Autonomous Offensive-Security Agents","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2608.15108","title":"Beyond Direct Access: Resource Hijacking in LLM Agents","created":"2026-08-15","cited_by_count":0,"area":"agents"},{"id":"2608.25711","title":"Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2608.27009","title":"The Guard That Cried Wolf: How Scary Words Make Agent Guardrails Refuse Legitimate Actions","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2609.06783","title":"AURA-Eval: Evaluation Framework for Acting Under Risk Awareness in LLM Agent Trajectories","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.23808","title":"FLARE: A Full-Lifecycle Dense Supervision Paradigm for Long-Horizon Coding Agents via Generative Reward Model","created":"2026-09-20","cited_by_count":0,"area":"lr"},{"id":"2609.26529","title":"From Approval to Execution: Reconstruction-Aware Repair Analysis for LLM-Agent Software","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.28197","title":"PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.33039","title":"Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal States","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.34415","title":"PROACT-Agent: Progressive Runtime Oversight and Active Circuit-breaking for Real-Time Safety","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34463","title":"CoDeL: Co-Evolutionary Defense against Indirect Prompt Injection in LLM-based Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34518","title":"SEAD: A State-Based Perspective on Attack and Defense in Tool-Using Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34686","title":"Jailbreak Context Lingers: Divergent Safety Routing and Its Cross-Task Predictability in Tool Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.35807","title":"Environment Steering: Using Data Flow Control to Improve Agent Utility and Safety","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.38291","title":"HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39450","title":"ActionGuard: Tool Call Authorization under Poisoned Skills","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2609.39717","title":"Trust Is Not a Score: Runtime Assurance Contracts for High-Risk AI Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.02920","title":"HASTE: Evolving Agent Harnesses Against Emerging Attacks Using Sparse Evidence","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.05163","title":"Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.06001","title":"AgentSpy: Making AI Agent Behavior Observable","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.18206","title":"SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding Agents","created":"2026-10-13","cited_by_count":0,"area":"agents"},{"id":"2610.18326","title":"Jev-Guard: Fast Routing and Auditing Agent Actions over Editable Policy Trees","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}