{"total":13,"rows":[{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2605.10779","title":"LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments","created":"2026-05-11","cited_by_count":5,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2605.17453","title":"Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2607.05743","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2607.09756","title":"LLM-Centric Agentic AI for UAV Swarms: Architecture, Enabling Technologies, and Open Problems","created":"2026-07-05","cited_by_count":0,"area":"agents"},{"id":"2607.18243","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","created":"2026-04-28","cited_by_count":0,"area":"agents"},{"id":"2607.23624","title":"Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?","created":"2026-07-26","cited_by_count":0,"area":"agents"},{"id":"2609.15293","title":"Why LLM Agents Collapse Without Oversight: The Enforcement Gap as the Mechanism Behind Emergence World Failures","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.17648","title":"Trust propagation and structural containment in Multi-agent LLM pipelines","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.25173","title":"Attack Success Rate Is Not a Number: On Measurement Validity in Agentic AI Security Evaluation","created":"2026-09-21","cited_by_count":0,"area":"agents"}],"next_cursor":null}