{"total":31,"rows":[{"id":"2606.29537","title":"OSWorld 2.0: Benchmarking Computer Use Agents on Long-Horizon Real-World Tasks","created":"2026-06-28","cited_by_count":40,"area":"agents"},{"id":"2605.14271","title":"Auditing Agent Harness Safety","created":"2026-05-14","cited_by_count":11,"area":"agents"},{"id":"2605.27690","title":"TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling","created":"2026-05-26","cited_by_count":8,"area":"agents"},{"id":"2605.29801","title":"AgentDoG 1.5: A Lightweight and Scalable Alignment Framework for AI Agent Safety and Security","created":"2026-05-28","cited_by_count":8,"area":"agents"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2608.09885","title":"SHE: Trajectory-driven Safety Harness Evolution for LLM Agents","created":"2026-08-10","cited_by_count":6,"area":"agents"},{"id":"2608.24777","title":"StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing","created":"2026-08-25","cited_by_count":6,"area":"agents"},{"id":"2608.06909","title":"Long-Horizon Agent Trajectory Attribution: A Unified Benchmark and Fine-Grained Annotation Framework","created":"2026-08-07","cited_by_count":4,"area":"agents"},{"id":"2607.20121","title":"OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills","created":"2026-07-22","cited_by_count":3,"area":"agents"},{"id":"2607.27294","title":"AgentS4D: Benchmarking Runtime Risks across the Execution Lifecycle of LLM-Based Workspace Agents","created":"2026-07-29","cited_by_count":3,"area":"agents"},{"id":"2608.23670","title":"Automata from Agent Traces: Failure and Next-Step Prediction","created":"2026-08-24","cited_by_count":3,"area":"agents"},{"id":"2606.04051","title":"RUBAS: Rubric-Based Reinforcement Learning for Agent Safety","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2607.11698","title":"Agent Hacks Agent: Autoresearch for Production-Agent Red-Teaming","created":"2026-07-13","cited_by_count":2,"area":"agents"},{"id":"2607.13081","title":"SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification","created":"2026-07-13","cited_by_count":2,"area":"agents"},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2605.11053","title":"Content-Aware Attack Detection in LLM Agent Tool-Call Traffic: An Empirical Study of Features, Architectures, and Evaluation Protocols","created":"2026-05-11","cited_by_count":1,"area":"agents"},{"id":"2606.08200","title":"Online Agent-as-a-Judge: Situation-Generating Evaluation for Interactive Agents","created":"2026-06-06","cited_by_count":1,"area":"agents"},{"id":"2607.28037","title":"ClawTrack: Towards Trace-Level Evaluation and Improvement of Real-World Autonomous Agents","created":"2026-07-30","cited_by_count":1,"area":"agents"},{"id":"2608.24275","title":"RePolicy: Reinforcement Learning for Safety-Policy Invocation in Agent Safeguards","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2609.06783","title":"AURA-Eval: Evaluation Framework for Acting Under Risk Awareness in LLM Agent Trajectories","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.06835","title":"Skynet: Workflow-Level Anomaly Detection for Agentic AI via Semantic and Structural Modeling","created":"2026-09-06","cited_by_count":0,"area":"agents"},{"id":"2609.10892","title":"DriftNet: A Dual-Head Trajectory Transformer for Detecting and Localizing Prompt Injection in LLM Agents","created":"2026-09-09","cited_by_count":0,"area":"agents"},{"id":"2609.15134","title":"HazardAuditor: From Executable Threats to Safer Computer-Use Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.32616","title":"\"You're Right, Let Me Fix It\": How LLM Agents Damage Correct Work When Falsely Accused","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.32635","title":"Trust the Brand, Lose Control: How Identity Hijacks LLM Agent Orchestration","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.33039","title":"Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal States","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.33676","title":"Auditing Agent Actions through Query-Conditioned Attribution","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2610.02925","title":"Positive-Unlabeled Learning for Agent Safety False Alarm Auditing","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.11773","title":"Safe Actions Alone Do Not Ensure Safe Agents: Identifying Unfulfilled Obligations with Guard Models","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.19679","title":"MCAIR: Monitoring and Correcting Agent Unfaithfulness via Internal Representations","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}