{"total":25,"rows":[{"id":"2603.00195","title":"Formal Analysis and Supply Chain Security for Agentic AI Skills","created":"2026-02-27","cited_by_count":25,"area":"agents"},{"id":"2605.27690","title":"TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling","created":"2026-05-26","cited_by_count":8,"area":"agents"},{"id":"2605.30883","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","created":"2026-05-29","cited_by_count":7,"area":"agents"},{"id":"2606.05647","title":"Coding with \"Enemy\": Can Human Developers Detect AI Agent Sabotage?","created":"2026-06-04","cited_by_count":4,"area":"agents"},{"id":"2607.20982","title":"GuardianAgentBench: Where Agents Fail and How to Guard Them","created":"2026-07-23","cited_by_count":4,"area":"agents"},{"id":"2604.10286","title":"STARS: Skill-Triggered Audit for Request-Conditioned Invocation Safety in Agent Systems","created":"2026-04-11","cited_by_count":3,"area":"agents"},{"id":"2605.22643","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","created":"2026-05-21","cited_by_count":3,"area":"agents"},{"id":"2603.12564","title":"Sell Me This Stock: Unsafe Recommendation Drift in LLM Agents","created":"2026-03-13","cited_by_count":2,"area":"agents"},{"id":"2605.17453","title":"Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2604.12162","title":"AlphaEval: Evaluating Agents in Production","created":"2026-04-14","cited_by_count":1,"area":"agents"},{"id":"2609.32691","title":"Silent Failures in Agentic Security Evaluation: A Validated Harness for Tool-Call Mediation Under Indirect Prompt Injection","created":"2026-09-26","cited_by_count":1,"area":"agents"},{"id":"2610.00400","title":"Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2606.06708","title":"Signal-Driven Observation for Long-Horizon Web Agents","created":"2026-06-04","cited_by_count":0,"area":"agents"},{"id":"2606.13994","title":"Hidden in Plain Sight: Benchmarking Agent Safety Against Decomposition Attacks with DECOMPBENCH","created":"2026-06-12","cited_by_count":0,"area":"agents"},{"id":"2606.23927","title":"RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems","created":"2026-06-22","cited_by_count":0,"area":"agents"},{"id":"2607.25297","title":"Hybrid Analysis for Secure MCP Tool Use in LLM Agents","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2608.25711","title":"Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2609.16305","title":"BLINDSPOT: A Benchmark for Safety and Refusal Calibration in Long-Horizon Tool-Using Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.32616","title":"\"You're Right, Let Me Fix It\": How LLM Agents Damage Correct Work When Falsely Accused","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.32635","title":"Trust the Brand, Lose Control: How Identity Hijacks LLM Agent Orchestration","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.34518","title":"SEAD: A State-Based Perspective on Attack and Defense in Tool-Using Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.34686","title":"Jailbreak Context Lingers: Divergent Safety Routing and Its Cross-Task Predictability in Tool Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.36576","title":"Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.01349","title":"PACE: Provenance-Aware Capability Enforcement for Tool-Using LLM Agents","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.13886","title":"X-AgentRed: Red-Teaming Personal Agents in Evolving Multi-Service Ecosystems","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}