{"total":20,"rows":[{"id":"2604.04989","title":"SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement","created":"2026-04-05","cited_by_count":30,"area":"agents"},{"id":"2606.07131","title":"MalSkillBench: A Runtime-Verified Benchmark of Malicious Agent Skills","created":"2026-06-05","cited_by_count":19,"area":"agents"},{"id":"2605.14271","title":"Auditing Agent Harness Safety","created":"2026-05-14","cited_by_count":11,"area":"agents"},{"id":"2604.15367","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","created":"2026-04-15","cited_by_count":8,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2605.24659","title":"IterInject: Indirect Prompt Injection Against LLM Agents via Feedback-Guided Iterative Optimization","created":"2026-05-23","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2606.01166","title":"BraveGuard: From Open-World Threats to Safer Computer-Use Agents","created":"2026-05-31","cited_by_count":4,"area":"agents"},{"id":"2604.24920","title":"SUDP: Secret-Use Delegation Protocol for Agentic Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2607.05189","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","created":"2026-07-06","cited_by_count":2,"area":"agents"},{"id":"2604.24657","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","created":"2026-04-27","cited_by_count":1,"area":"agents"},{"id":"2605.06731","title":"When Routine Chats Turn Toxic: Unintended Long-Term State Poisoning in Personalized Agents","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.02302","title":"SeClaw: Spec-Driven Security Task Synthesis for Evaluating Autonomous Agents","created":"2026-06-01","cited_by_count":1,"area":"agents"},{"id":"2607.25297","title":"Hybrid Analysis for Secure MCP Tool Use in LLM Agents","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2607.28629","title":"OpenClaw and Ollama in Agentic AI: Toward Fully Autonomous and Scalable AI Agent Systems","created":"2026-04-16","cited_by_count":0,"area":"agents"},{"id":"2608.12104","title":"No One to Blame: A Framework of Constitutive AI Unaccountability","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2609.03884","title":"A Blind Trust, the Bloody Thrust: When Attacker-Controlled Hook Updates Steer AI Agent Harnesses towards Malicious Behaviors","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.27155","title":"The Like Trap: Multi-Stage Poisoning against Agents in Similarity-based Recommendation Systems","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}