{"total":29,"rows":[{"id":"2604.04989","title":"SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement","created":"2026-04-05","cited_by_count":30,"area":"agents"},{"id":"2604.03070","title":"How Your Credentials Are Leaked by LLM Agent Skills: An Empirical Study","created":"2026-04-03","cited_by_count":19,"area":"agents"},{"id":"2604.01438","title":"ClawSafety: \"Safe\" LLMs, Unsafe Agents","created":"2026-04-01","cited_by_count":17,"area":"agents"},{"id":"2606.00448","title":"When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems","created":"2026-05-30","cited_by_count":17,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2606.30755","title":"Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens","created":"2026-06-29","cited_by_count":5,"area":"agents"},{"id":"2603.22447","title":"Latent Reuse in Agent Skills: Multi-modal Clone Detection at Ecosystem Scale","created":"2026-03-23","cited_by_count":4,"area":"agents"},{"id":"2603.18377","title":"PlanTwin: Privacy-Preserving Planning Abstractions for Cloud-Assisted LLM Agents","created":"2026-03-19","cited_by_count":3,"area":"agents"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2604.07551","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","created":"2026-04-08","cited_by_count":2,"area":"agents"},{"id":"2605.06393","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2607.20759","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","created":"2026-07-22","cited_by_count":1,"area":"agents"},{"id":"2606.00566","title":"Same Payload, Different Channel: Measuring Trust Asymmetry in Tool-Using Language Models","created":"2026-05-30","cited_by_count":0,"area":"agents"},{"id":"2607.02389","title":"Steerability via constraints: a substrate for scalable oversight of coding agents","created":"2026-07-02","cited_by_count":0,"area":"agents"},{"id":"2607.05743","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2607.09586","title":"TrustX Agent Risk Classification Framework (ARC): Risk-Tiering Internally Created Agentic AI Systems","created":"2026-07-10","cited_by_count":0,"area":"agents"},{"id":"2607.24964","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","created":"2026-07-27","cited_by_count":0,"area":"agents"},{"id":"2608.14876","title":"Workspace Topology as an Attack Vector in Agentic Coding Assistants","created":"2026-08-14","cited_by_count":0,"area":"agents"},{"id":"2608.29596","title":"Towards a Systems Foundation for Agentic Skills: Architecture, Lifecycle, and Security","created":"2026-08-30","cited_by_count":0,"area":"agents"},{"id":"2608.30686","title":"Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.17817","title":"Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.18217","title":"Measuring and Exploiting Implicit Trust in LLM Tool-Calling Pipelines","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.22949","title":"Beyond Single-Model Injection: A Threat Model and Defense Architecture for Prompt Injection in Multi-Agent Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.25173","title":"Attack Success Rate Is Not a Number: On Measurement Validity in Agentic AI Security Evaluation","created":"2026-09-21","cited_by_count":0,"area":"agents"},{"id":"2609.30383","title":"Stealth Apart, Harm Together: Skill Cascading Attacks on Skill-Based Agent Systems","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.39549","title":"Speculative Safety Honeypot: Toward Proactive Defense Against Multi-turn Agent Attacks","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.02569","title":"Pincer: Resource Authorization for Agents using a Digital Twin","created":"2026-10-01","cited_by_count":0,"area":"agents"}],"next_cursor":null}