{"list":"other","total":69,"rows":[{"id":"2210.03629","title":"ReAct: Synergizing Reasoning and Acting in Language Models","created":"2022-10-06","cited_by_count":8695},{"id":"2302.04761","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","created":"2023-02-09","cited_by_count":4182},{"id":"2307.15818","title":"RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Control","created":"2023-07-28","cited_by_count":3080},{"id":"2406.09246","title":"OpenVLA: An Open-Source Vision-Language-Action Model","created":"2024-06-13","cited_by_count":2887},{"id":"2204.01691","title":"Do As I Can, Not As I Say: Grounding Language in Robotic Affordances","created":"2022-04-04","cited_by_count":2348},{"id":"2308.11432","title":"A Survey on Large Language Model based Autonomous Agents","created":"2023-08-22","cited_by_count":2242},{"id":"2305.16291","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","created":"2023-05-25","cited_by_count":2191},{"id":"2303.03378","title":"PaLM-E: An Embodied Multimodal Language Model","created":"2023-03-06","cited_by_count":2071},{"id":"2307.13854","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","created":"2023-07-25","cited_by_count":2006},{"id":"2307.16789","title":"ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIs","created":"2023-07-31","cited_by_count":1947},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443},{"id":"2309.07864","title":"The Rise and Potential of Large Language Model Based Agents: A Survey","created":"2023-09-14","cited_by_count":1439},{"id":"2406.12045","title":"$\\tau$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains","created":"2024-06-17","cited_by_count":1402},{"id":"2305.15334","title":"Gorilla: Large Language Model Connected with Massive APIs","created":"2023-05-24","cited_by_count":1332},{"id":"2306.06070","title":"Mind2Web: Towards a Generalist Agent for the Web","created":"2023-06-09","cited_by_count":1242},{"id":"2209.07753","title":"Code as Policies: Language Model Programs for Embodied Control","created":"2022-09-16","cited_by_count":1210},{"id":"2404.07972","title":"OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments","created":"2024-04-11","cited_by_count":1195},{"id":"2303.17580","title":"HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Face","created":"2023-03-30","cited_by_count":1190},{"id":"2207.05608","title":"Inner Monologue: Embodied Reasoning through Planning with Language Models","created":"2022-07-12","cited_by_count":1081},{"id":"2307.05973","title":"VoxPoser: Composable 3D Value Maps for Robotic Manipulation with Language Models","created":"2023-07-12","cited_by_count":750},{"id":"2209.11302","title":"ProgPrompt: Generating Situated Robot Task Plans using Large Language Models","created":"2022-09-22","cited_by_count":611},{"id":"2306.05499","title":"Prompt Injection attack against LLM-integrated Applications","created":"2023-06-08","cited_by_count":605},{"id":"2309.15817","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","created":"2023-09-25","cited_by_count":548},{"id":"2403.02691","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","created":"2024-03-05","cited_by_count":538},{"id":"2405.14573","title":"AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents","created":"2024-05-23","cited_by_count":468},{"id":"2401.13919","title":"WebVoyager: Building an End-to-End Web Agent with Large Multimodal Models","created":"2024-01-25","cited_by_count":438},{"id":"2403.07718","title":"WorkArena: How Capable Are Web Agents at Solving Common Knowledge Work Tasks?","created":"2024-03-12","cited_by_count":363},{"id":"2306.17582","title":"ChatGPT for Robotics: Design Principles and Model Abilities","created":"2023-02-20","cited_by_count":299},{"id":"2401.16158","title":"Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception","created":"2024-01-29","cited_by_count":293},{"id":"2305.15021","title":"EmbodiedGPT: Vision-Language Pre-Training via Embodied Chain of Thought","created":"2023-05-24","cited_by_count":279},{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223},{"id":"2409.08264","title":"Windows Agent Arena: Evaluating Multi-Modal OS Agents at Scale","created":"2024-09-12","cited_by_count":223},{"id":"2303.16434","title":"TaskMatrix.AI: Completing Tasks by Connecting Foundation Models with Millions of APIs","created":"2023-03-29","cited_by_count":184},{"id":"2412.05467","title":"The BrowserGym Ecosystem for Web Agent Research","created":"2024-12-06","cited_by_count":161},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127},{"id":"2412.16682","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","created":"2024-12-21","cited_by_count":99},{"id":"2407.05291","title":"WorkArena++: Towards Compositional Planning and Reasoning-based Common Knowledge Work Tasks","created":"2024-07-07","cited_by_count":90},{"id":"2406.18915","title":"Manipulate-Anything: Automating Real-World Robots using Vision-Language Models","created":"2024-06-27","cited_by_count":83},{"id":"2510.02373","title":"A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory","created":"2025-09-29","cited_by_count":67},{"id":"2602.15654","title":"Zombie Agents: Persistent Control of Self-Evolving LLM Agents via Self-Reinforcing Injections","created":"2026-02-17","cited_by_count":48},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35},{"id":"2603.10387","title":"Don't Let the Claw Grip Your Hand: A Security Analysis and Defense Framework for OpenClaw","created":"2026-03-11","cited_by_count":29},{"id":"2110.03506","title":"Run Time Assurance for Safety-Critical Systems: An Introduction to Safety Filtering Approaches for Complex Control Systems","created":"2021-10-07","cited_by_count":27},{"id":"2312.14950","title":"TypeFly: Flying Drones with Large Language Model","created":"2023-12-08","cited_by_count":23},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23},{"id":"2603.12644","title":"Uncovering Security Threats and Architecting Defenses in Autonomous Agents: A Case Study of OpenClaw","created":"2026-03-13","cited_by_count":20},{"id":"2603.15125","title":"From Storage to Steering: Memory Control Flow Attacks on LLM Agents","created":"2026-03-16","cited_by_count":19},{"id":"2601.09923","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","created":"2026-01-14","cited_by_count":17},{"id":"2603.11853","title":"OpenClaw PRISM: A Zero-Fork, Defense-in-Depth Runtime Security Layer for Tool-Augmented LLM Agents","created":"2026-03-12","cited_by_count":11},{"id":"2606.22388","title":"PlanBench-XL: Evaluating Long-Horizon Planning of LLM Tool-Use Agents in Large-Scale Tool Ecosystems","created":"2026-06-21","cited_by_count":11},{"id":"2510.21739","title":"Next-Generation LLM for UAV: From Natural Language to Autonomous Flight","created":"2025-10-02","cited_by_count":10},{"id":"2602.07398","title":"AgentSys: Secure and Dynamic LLM Agents Through Explicit Hierarchical Memory Management","created":"2026-02-07","cited_by_count":10},{"id":"2302.12150","title":"A Survey of Secure Computation Using Trusted Execution Environments","created":"2023-02-23","cited_by_count":8},{"id":"2508.00935","title":"Measuring Harmfulness of Computer-Using Agents","created":"2025-07-31","cited_by_count":8},{"id":"2302.10588","title":"STPA for Learning-Enabled Systems: A Survey and A New Practice","created":"2023-02-21","cited_by_count":7},{"id":"2302.02885","title":"Run Time Assurance for Autonomous Spacecraft Inspection","created":"2023-02-06","cited_by_count":5},{"id":"2412.08428","title":"SwarmGPT: Combining Large Language Models with Safe Motion Planning for Drone Swarm Choreography","created":"2024-12-11","cited_by_count":5},{"id":"2207.05643","title":"SafeDrones: Real-Time Reliability Evaluation of UAVs using Executable Digital Dependable Identities","created":"2022-07-12","cited_by_count":4},{"id":"2602.19534","title":"Large Language Model-Assisted UAV Operations and Communications: A Multifaceted Survey and Tutorial","created":"2026-02-23","cited_by_count":4},{"id":"2603.07191","title":"Governance Architecture for Autonomous Agent Systems: Threats, Framework, and Engineering Practice","created":"2026-03-07","cited_by_count":2},{"id":"2606.15008","title":"Security Engineering of OpenClaw: Analyzing Attack Surface Expansion and Trust-Boundary Violations","created":"2026-06-12","cited_by_count":2},{"id":"2312.02542","title":"Fortress: Securing IoT Peripherals with Trusted Execution Environments","created":"2023-12-05","cited_by_count":1},{"id":"2403.05448","title":"On Practicality of Using ARM TrustZone Trusted Execution Environment for Securing Programmable Logic Controllers","created":"2024-03-08","cited_by_count":1},{"id":"2406.00006","title":"A Prompt-driven Task Planning Method for Multi-drones based on Large Language Model","created":"2024-05-14","cited_by_count":1},{"id":"2512.06500","title":"PDRIMA: A Policy-Driven Runtime Integrity Measurement and Attestation Approach for ARM TrustZone-based TEE","created":"2025-12-06","cited_by_count":1},{"id":"2603.21231","title":"When Convenience Becomes Risk: A Semantic View of Under-Specification in Host-Acting Agents","created":"2026-03-22","cited_by_count":1},{"id":"2605.06393","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","created":"2026-05-07","cited_by_count":1},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1},{"id":"2606.22289","title":"Control-Aware Manipulation of ArduPilot via Legitimate MAVLink Commands: Simulation and Hardware Validation","created":"2026-06-21","cited_by_count":1}],"next_cursor":null}