{"total":22,"rows":[{"id":"2605.12015","title":"SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces","created":"2026-05-12","cited_by_count":19,"area":"agents"},{"id":"2604.24026","title":"From Skill Text to Skill Structure: The Scheduling-Structural-Logical Representation for Agent Skills","created":"2026-04-27","cited_by_count":16,"area":"agents"},{"id":"2606.15242","title":"Benign in Isolation, Harmful in Composition: Security Risks in Agent Skill Ecosystems","created":"2026-06-13","cited_by_count":13,"area":"agents"},{"id":"2606.07943","title":"Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents","created":"2026-06-06","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2606.02540","title":"SkillHarm: Lifecycle-Aware Skill-Based Attacks via Automated Construction","created":"2026-06-01","cited_by_count":6,"area":"agents"},{"id":"2607.10113","title":"Dynamic Agent Skills: A Lifecycle Survey and Taxonomy of Evolving Skill Libraries","created":"2026-07-11","cited_by_count":6,"area":"agents"},{"id":"2605.05868","title":"SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills","created":"2026-05-07","cited_by_count":5,"area":"agents"},{"id":"2606.11671","title":"Runtime Skill Audit: Targeted Runtime Probing for Agent Skill Security","created":"2026-06-10","cited_by_count":3,"area":"agents"},{"id":"2607.01136","title":"Skills Are Not Islands: Measuring Dependency and Risk in Agent Skill Supply Chains","created":"2026-07-01","cited_by_count":3,"area":"agents"},{"id":"2605.11047","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","created":"2026-05-11","cited_by_count":2,"area":"agents"},{"id":"2608.12273","title":"Convergent Detour Hijacking: Task-Preserving Resource Amplification in Skill-Based LLM Agents","created":"2026-08-12","cited_by_count":2,"area":"agents"},{"id":"2607.03220","title":"CONTRA: Red-Teaming Configurations of Personalizable Agents","created":"2026-07-03","cited_by_count":1,"area":"agents"},{"id":"2608.00104","title":"Skillsets on the Chain: A Blockchain-based Zero-Trust Framework for Agentic AI Networking","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.06862","title":"SynChain: Inducing Computer-Use Agent Systems to Construct Their Own Attack Chains","created":"2026-08-07","cited_by_count":0,"area":"agents"},{"id":"2608.08264","title":"OBLIVION: Workflow-Level Operational Skill Unlearning for Deployed Agents","created":"2026-08-08","cited_by_count":0,"area":"agents"},{"id":"2608.29596","title":"Towards a Systems Foundation for Agentic Skills: Architecture, Lifecycle, and Security","created":"2026-08-30","cited_by_count":0,"area":"agents"},{"id":"2609.02564","title":"A Finger on the Scale: Covert Policy Steering through Agentic Skills","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.13353","title":"SkillAtlas: An Attack Trace Library for Agent Skills","created":"2026-09-11","cited_by_count":0,"area":"agents"},{"id":"2609.39607","title":"Pretext: Defeating Malicious Skill Detection Frameworks for AI Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.01349","title":"PACE: Provenance-Aware Capability Enforcement for Tool-Using LLM Agents","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.18262","title":"Encrypted Skills Can Become New Security Exploits If AI Agents Know How to Decipher","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}