{"total":24,"rows":[{"id":"2605.26497","title":"Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agents","created":"2026-05-26","cited_by_count":15,"area":"agents"},{"id":"2605.03378","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","created":"2026-05-05","cited_by_count":14,"area":"agents"},{"id":"2603.30016","title":"Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks","created":"2026-03-31","cited_by_count":9,"area":"agents"},{"id":"2605.24309","title":"Reframing LLM Agent Security as an Agent-Human Interaction Problem","created":"2026-05-23","cited_by_count":9,"area":"agents"},{"id":"2606.03024","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","created":"2026-06-02","cited_by_count":6,"area":"agents"},{"id":"2605.13044","title":"No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills","created":"2026-05-13","cited_by_count":5,"area":"agents"},{"id":"2606.30755","title":"Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens","created":"2026-06-29","cited_by_count":5,"area":"agents"},{"id":"2607.18485","title":"Trusted Credentials, Untrusted Behavior: Benchmarking LLM-Agent Security in High-Performance Computing","created":"2026-07-20","cited_by_count":3,"area":"agents"},{"id":"2606.02240","title":"AgentRedBench: Dynamic Redteaming and Integration-Aware Defense for LLM Agents over SaaS Integrations","created":"2026-06-01","cited_by_count":2,"area":"agents"},{"id":"2606.13385","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2605.06393","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2608.04053","title":"AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2606.14816","title":"A Security Analysis of Long-Horizon Agentic AI Systems: Threats, Evaluation, and Framework Development","created":"2026-06-12","cited_by_count":0,"area":"agents"},{"id":"2606.29142","title":"Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems","created":"2026-06-28","cited_by_count":0,"area":"agents"},{"id":"2607.25890","title":"Distributing Security Controls Through Harness Engineering","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2608.14876","title":"Workspace Topology as an Attack Vector in Agentic Coding Assistants","created":"2026-08-14","cited_by_count":0,"area":"agents"},{"id":"2608.18034","title":"Deep Academic Survey: Stateful Agentic Closed-Loop Paradigm for Academic Survey Automation","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2609.10892","title":"DriftNet: A Dual-Head Trajectory Transformer for Detecting and Localizing Prompt Injection in LLM Agents","created":"2026-09-09","cited_by_count":0,"area":"agents"},{"id":"2609.22949","title":"Beyond Single-Model Injection: A Threat Model and Defense Architecture for Prompt Injection in Multi-Agent Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.25173","title":"Attack Success Rate Is Not a Number: On Measurement Validity in Agentic AI Security Evaluation","created":"2026-09-21","cited_by_count":0,"area":"agents"},{"id":"2609.28585","title":"Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2610.02569","title":"Pincer: Resource Authorization for Agents using a Digital Twin","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.06401","title":"RAISED: Self-Distillation for Robustness to Prompt Injection in LLM Agents","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}