{"total":21,"rows":[{"id":"2604.05172","title":"ClawsBench: Evaluating Capability and Safety of LLM Productivity Agents in Simulated Workspaces","created":"2026-04-06","cited_by_count":33,"area":"agents"},{"id":"2603.11619","title":"Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats","created":"2026-03-12","cited_by_count":29,"area":"agents"},{"id":"2604.01438","title":"ClawSafety: \"Safe\" LLMs, Unsafe Agents","created":"2026-04-01","cited_by_count":17,"area":"agents"},{"id":"2604.13072","title":"LiveClawBench: Benchmarking LLM Agents on Complex, Real-World Assistant Tasks","created":"2026-03-20","cited_by_count":10,"area":"agents"},{"id":"2603.19974","title":"Trojan's Whisper: Stealthy Manipulation of OpenClaw through Injected Bootstrapped Guidance","created":"2026-03-20","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2605.17986","title":"LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt Injection","created":"2026-05-18","cited_by_count":3,"area":"agents"},{"id":"2603.28551","title":"\"What Did It Actually Do?\": Understanding Risk Awareness and Traceability for Computer-Use Agents","created":"2026-03-30","cited_by_count":2,"area":"agents"},{"id":"2605.22321","title":"ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents","created":"2026-05-21","cited_by_count":2,"area":"agents"},{"id":"2606.18356","title":"SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Using LLM Agents","created":"2026-06-16","cited_by_count":2,"area":"agents"},{"id":"2607.05189","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","created":"2026-07-06","cited_by_count":2,"area":"agents"},{"id":"2608.17597","title":"HarnessRisk: A Lifecycle-Oriented Benchmark for Agent Harness Safety","created":"2026-08-18","cited_by_count":2,"area":"agents"},{"id":"2605.06731","title":"When Routine Chats Turn Toxic: Unintended Long-Term State Poisoning in Personalized Agents","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2605.07110","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2608.06862","title":"SynChain: Inducing Computer-Use Agent Systems to Construct Their Own Attack Chains","created":"2026-08-07","cited_by_count":0,"area":"agents"},{"id":"2609.03884","title":"A Blind Trust, the Bloody Thrust: When Attacker-Controlled Hook Updates Steer AI Agent Harnesses towards Malicious Behaviors","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.29647","title":"AgentKernel: The Trust-Native Agentic Operating System","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2610.01349","title":"PACE: Provenance-Aware Capability Enforcement for Tool-Using LLM Agents","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.02569","title":"Pincer: Resource Authorization for Agents using a Digital Twin","created":"2026-10-01","cited_by_count":0,"area":"agents"}],"next_cursor":null}