{"total":40,"rows":[{"id":"2603.02176","title":"Organizing, Orchestrating, and Benchmarking Agent Skills at Ecosystem Scale","created":"2026-03-02","cited_by_count":72,"area":"agents"},{"id":"2604.04989","title":"SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement","created":"2026-04-05","cited_by_count":30,"area":"agents"},{"id":"2603.21019","title":"SkillProbe: Security Auditing for Emerging Agent Skill Marketplaces via Multi-Agent Collaboration","created":"2026-03-22","cited_by_count":21,"area":"agents"},{"id":"2602.12194","title":"MalTool: Malicious Tool Attacks on LLM Agents","created":"2026-02-12","cited_by_count":20,"area":"agents"},{"id":"2606.00448","title":"When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems","created":"2026-05-30","cited_by_count":17,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2606.15242","title":"Benign in Isolation, Harmful in Composition: Security Risks in Agent Skill Ecosystems","created":"2026-06-13","cited_by_count":13,"area":"agents"},{"id":"2605.13940","title":"AgentTrap: Measuring Runtime Trust Failures in Third-Party Agent Skills","created":"2026-05-13","cited_by_count":12,"area":"agents"},{"id":"2604.15415","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","created":"2026-04-16","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2607.02357","title":"Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware","created":"2026-07-02","cited_by_count":10,"area":"agents"},{"id":"2604.22888","title":"RouteGuard: Internal-Signal Detection of Skill Poisoning in LLM Agents","created":"2026-04-24","cited_by_count":7,"area":"agents"},{"id":"2605.11770","title":"Behavioral Integrity Verification for AI Agent Skills","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2606.07943","title":"Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents","created":"2026-06-06","cited_by_count":7,"area":"agents"},{"id":"2603.28807","title":"SafeClaw-R: Towards Safe and Secure Multi-Agent Personal Assistants","created":"2026-03-28","cited_by_count":6,"area":"agents"},{"id":"2605.14460","title":"Exploiting LLM Agent Supply Chains via Payload-less Skills","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2606.03024","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","created":"2026-06-02","cited_by_count":6,"area":"agents"},{"id":"2607.10113","title":"Dynamic Agent Skills: A Lifecycle Survey and Taxonomy of Evolving Skill Libraries","created":"2026-07-11","cited_by_count":6,"area":"agents"},{"id":"2605.09594","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","created":"2026-05-10","cited_by_count":5,"area":"agents"},{"id":"2605.13044","title":"No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills","created":"2026-05-13","cited_by_count":5,"area":"agents"},{"id":"2604.03870","title":"Your Agent is More Brittle Than You Think: Uncovering Indirect Injection Vulnerabilities in Agentic LLMs","created":"2026-04-04","cited_by_count":4,"area":"agents"},{"id":"2607.01136","title":"Skills Are Not Islands: Measuring Dependency and Risk in Agent Skill Supply Chains","created":"2026-07-01","cited_by_count":3,"area":"agents"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2603.28428","title":"Synergy: A Next-Generation General-Purpose Agent for Open Agentic Web","created":"2026-03-30","cited_by_count":2,"area":"agents"},{"id":"2605.11891","title":"Proteus: A Self-Evolving Red Team for Agent Skill Ecosystems","created":"2026-05-12","cited_by_count":2,"area":"agents"},{"id":"2608.05204","title":"SkillTrace: Multi-Trace Provenance Auditing for LLM-Agent Skill Reuse","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.08131","title":"Compositional Threat Analysis of Latent Compromise in LLM Agent Systems: The Order 66 Scenario","created":"2026-08-08","cited_by_count":1,"area":"agents"},{"id":"2610.01564","title":"Chaining Skills to Hijack LLM Agents","created":"2026-10-01","cited_by_count":1,"area":"agents"},{"id":"2606.06752","title":"Pomona: Continuous Code Quality Improvement via Small, Agentic Pull Requests at Bloomberg","created":"2026-06-04","cited_by_count":0,"area":"agents"},{"id":"2607.24964","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","created":"2026-07-27","cited_by_count":0,"area":"agents"},{"id":"2608.00104","title":"Skillsets on the Chain: A Blockchain-based Zero-Trust Framework for Agentic AI Networking","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.03485","title":"SkillSentry: Adaptive Honey Worlds for Dynamic Safety Testing of Agent Skills","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2609.14079","title":"SkillSecurer: Detecting and Patching Prompt-Injection Vulnerabilities in AI Agent Skills","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.28693","title":"Progressive Skill Discovery as Access Control for Tool-Using LLM Agents: Structural Governance through Role-Scoped Capability Delivery","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.36879","title":"SKILLLITE: Evidence-Guided Malicious Skill Auditing with Compact LLMs","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.39065","title":"Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2609.39450","title":"ActionGuard: Tool Call Authorization under Poisoned Skills","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2609.39607","title":"Pretext: Defeating Malicious Skill Detection Frameworks for AI Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.03014","title":"Beyond Predefined Sinks: Security-Aware Dependency Analysis for LLM Agents","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.17727","title":"SkillScreen: High-Recall Screening of Malicious Agent Skills with Decision Models","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}