{"total":42,"rows":[{"id":"2606.00448","title":"When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems","created":"2026-05-30","cited_by_count":17,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2607.02357","title":"Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware","created":"2026-07-02","cited_by_count":10,"area":"agents"},{"id":"2606.07943","title":"Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents","created":"2026-06-06","cited_by_count":7,"area":"agents"},{"id":"2605.14460","title":"Exploiting LLM Agent Supply Chains via Payload-less Skills","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2605.14859","title":"Do Coding Agents Understand Least-Privilege Authorization?","created":"2026-05-14","cited_by_count":6,"area":"agents"},{"id":"2606.02540","title":"SkillHarm: Lifecycle-Aware Skill-Based Attacks via Automated Construction","created":"2026-06-01","cited_by_count":6,"area":"agents"},{"id":"2606.03024","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","created":"2026-06-02","cited_by_count":6,"area":"agents"},{"id":"2606.19191","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","created":"2026-06-17","cited_by_count":6,"area":"agents"},{"id":"2607.10113","title":"Dynamic Agent Skills: A Lifecycle Survey and Taxonomy of Evolving Skill Libraries","created":"2026-07-11","cited_by_count":6,"area":"agents"},{"id":"2607.13987","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","created":"2026-07-15","cited_by_count":5,"area":"agents"},{"id":"2608.09732","title":"ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners","created":"2026-08-10","cited_by_count":4,"area":"agents"},{"id":"2604.06284","title":"ClawLess: A Security Model of AI Agents","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2605.28201","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2605.22321","title":"ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents","created":"2026-05-21","cited_by_count":2,"area":"agents"},{"id":"2608.05563","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","created":"2026-08-06","cited_by_count":2,"area":"agents"},{"id":"2608.12273","title":"Convergent Detour Hijacking: Task-Preserving Resource Amplification in Skill-Based LLM Agents","created":"2026-08-12","cited_by_count":2,"area":"agents"},{"id":"2606.14517","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","created":"2026-06-12","cited_by_count":1,"area":"agents"},{"id":"2607.15143","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","created":"2026-07-16","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.30429","title":"EvoSkill Injection: Red-Teaming Autonomous Skill Generation and Evolution in Self-Evolving Agents","created":"2026-08-31","cited_by_count":1,"area":"agents"},{"id":"2610.07645","title":"SkillPoison: Progressive Skill Poisoning via Successful Experiences","created":"2026-10-06","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2607.12340","title":"Skills That Don't Exist: A Large-Scale Study of Hallucinated Skill Recommendation in LLM Agents","created":"2026-07-14","cited_by_count":0,"area":"agents"},{"id":"2607.23624","title":"Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?","created":"2026-07-26","cited_by_count":0,"area":"agents"},{"id":"2607.24964","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","created":"2026-07-27","cited_by_count":0,"area":"agents"},{"id":"2608.09577","title":"ElasticBack: Stealthy Conditional Backdoor in LLM-Agent Skills via Coupled Trigger-Rule Optimization","created":"2026-08-10","cited_by_count":0,"area":"agents"},{"id":"2608.12977","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.21929","title":"SkillBloat: Token Amplification Attacks via Skill Injection in LLM Coding Agents","created":"2026-08-22","cited_by_count":0,"area":"agents"},{"id":"2608.30686","title":"Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.03884","title":"A Blind Trust, the Bloody Thrust: When Attacker-Controlled Hook Updates Steer AI Agent Harnesses towards Malicious Behaviors","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.17817","title":"Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.30383","title":"Stealth Apart, Harm Together: Skill Cascading Attacks on Skill-Based Agent Systems","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.35889","title":"SINGED: Correct Outputs Do Not Certify Safe Execution in LLM Agents","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.35912","title":"MMSkillRisk: Can Agents Stay Safe When Multimodal Skills Become Traps?","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.39352","title":"Hiding in Plain Sight: Decoupling Pretext from Actuation for Skill Poisoning in LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2609.39607","title":"Pretext: Defeating Malicious Skill Detection Frameworks for AI Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.18262","title":"Encrypted Skills Can Become New Security Exploits If AI Agents Know How to Decipher","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}