{"list":"other","total":55,"rows":[{"id":"2108.07258","title":"On the Opportunities and Risks of Foundation Models","created":"2021-08-16","cited_by_count":4033},{"id":"1606.06565","title":"Concrete Problems in AI Safety","created":"2016-06-21","cited_by_count":1642},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443},{"id":"2308.03688","title":"AgentBench: Evaluating LLMs as Agents","created":"2023-08-07","cited_by_count":1267},{"id":"2112.04359","title":"Ethical and social risks of harm from Language Models","created":"2021-12-08","cited_by_count":966},{"id":"2404.13501","title":"A Survey on the Memory Mechanism of Large Language Model based Agents","created":"2024-04-21","cited_by_count":634},{"id":"2305.14627","title":"Enabling Large Language Models to Generate Text with Citations","created":"2023-05-24","cited_by_count":595},{"id":"2305.06983","title":"Active Retrieval Augmented Generation","created":"2023-05-11","cited_by_count":516},{"id":"2407.12784","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","created":"2024-07-17","cited_by_count":429},{"id":"2001.00973","title":"Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditing","created":"2020-01-03","cited_by_count":384},{"id":"2412.14093","title":"Alignment faking in large language models","created":"2024-12-18","cited_by_count":360},{"id":"2401.13178","title":"AgentBoard: An Analytical Evaluation Board of Multi-turn LLM Agents","created":"2024-01-24","cited_by_count":339},{"id":"2503.18813","title":"Defeating Prompt Injections by Design","created":"2025-03-24","cited_by_count":297},{"id":"2307.01850","title":"Self-Consuming Generative Models Go MAD","created":"2023-07-04","cited_by_count":250},{"id":"2406.10162","title":"Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Models","created":"2024-06-14","cited_by_count":178},{"id":"2409.12941","title":"Fact, Fetch, and Reason: A Unified Evaluation of Retrieval-Augmented Generation","created":"2024-09-19","cited_by_count":162},{"id":"2510.05179","title":"Agentic Misalignment: How LLMs Could Be Insider Threats","created":"2025-10-05","cited_by_count":158},{"id":"2404.01413","title":"Is Model Collapse Inevitable? Breaking the Curse of Recursion by Accumulating Real and Synthetic Data","created":"2024-04-01","cited_by_count":151},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151},{"id":"2311.07590","title":"Large Language Models can Strategically Deceive their Users when Put Under Pressure","created":"2023-11-09","cited_by_count":146},{"id":"2210.05791","title":"Sociotechnical Harms of Algorithmic Systems: Scoping a Taxonomy for Harm Reduction","created":"2022-10-11","cited_by_count":138},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126},{"id":"2105.14111","title":"Goal Misgeneralization in Deep Reinforcement Learning","created":"2021-05-28","cited_by_count":123},{"id":"2403.04957","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","created":"2024-03-07","cited_by_count":119},{"id":"2102.09692","title":"To Trust or to Think: Cognitive Forcing Functions Can Reduce Overreliance on AI in AI-assisted Decision-making","created":"2021-02-19","cited_by_count":118},{"id":"2212.06823","title":"Explanations Can Reduce Overreliance on AI Systems During Decision-Making","created":"2022-12-13","cited_by_count":111},{"id":"2507.02825","title":"Establishing Best Practices for Building Rigorous Agentic Benchmarks","created":"2025-07-03","cited_by_count":102},{"id":"2502.13172","title":"Unveiling Privacy Risks in LLM Agent Memory","created":"2025-02-17","cited_by_count":101},{"id":"2505.16067","title":"How Memory Management Impacts LLM Agents: An Empirical Study of Experience-Following Behavior","created":"2025-05-21","cited_by_count":101},{"id":"2210.11584","title":"Towards Human-centered Explainable AI: A Survey of User Studies for Model Explanations","created":"2022-10-20","cited_by_count":85},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83},{"id":"2311.16822","title":"Large Language Models Suffer From Their Own Output: An Analysis of the Self-Consuming Training Loop","created":"2023-11-28","cited_by_count":79},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56},{"id":"2401.07612","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","created":"2024-01-15","cited_by_count":54},{"id":"2406.17626","title":"CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference","created":"2024-06-25","cited_by_count":51},{"id":"2601.05504","title":"Memory Poisoning Attack and Defense on Memory Based LLM-Agents","created":"2026-01-09","cited_by_count":44},{"id":"2304.14749","title":"Understanding accountability in algorithmic supply chains","created":"2023-04-28","cited_by_count":40},{"id":"2407.09499","title":"Self-Consuming Generative Models with Curated Data Provably Optimize Human Preferences","created":"2024-06-12","cited_by_count":39},{"id":"2502.08554","title":"Fostering Appropriate Reliance on Large Language Models: The Role of Explanations, Sources, and Inconsistencies","created":"2025-02-12","cited_by_count":39},{"id":"2409.11242","title":"Measuring and Enhancing Trustworthiness of LLMs in RAG through Grounded Attributions and Learning to Refuse","created":"2024-09-17","cited_by_count":34},{"id":"2407.18369","title":"AI Safety in Generative AI Large Language Models: A Survey","created":"2024-07-06","cited_by_count":33},{"id":"2505.22655","title":"Position: Uncertainty Quantification Needs Reassessment for Large-language Model Agents","created":"2025-05-28","cited_by_count":32},{"id":"2102.04201","title":"Reviewable Automated Decision-Making: A Framework for Accountable Algorithmic Systems","created":"2021-01-26","cited_by_count":31},{"id":"2402.00898","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","created":"2024-01-31","cited_by_count":30},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30},{"id":"2407.01294","title":"A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms","created":"2024-07-01","cited_by_count":19},{"id":"2412.15584","title":"To Rely or Not to Rely? Evaluating Interventions for Appropriate Reliance on Large Language Models","created":"2024-12-20","cited_by_count":18},{"id":"2302.09270","title":"Towards Safer Generative Language Models: A Survey on Safety Risks, Evaluations, and Improvements","created":"2023-02-18","cited_by_count":14},{"id":"2502.09288","title":"AI Safety for Everyone","created":"2025-02-13","cited_by_count":14},{"id":"2503.11705","title":"The BIG Argument for AI Safety Cases","created":"2025-03-12","cited_by_count":12},{"id":"2402.07632","title":"Understanding the Effects of Miscalibrated AI Confidence on User Trust, Reliance, and Decision Efficacy","created":"2024-02-12","cited_by_count":6},{"id":"2505.22073","title":"A Closer Look at the Existing Risks of Generative AI: Mapping the Who, What, and How of Real-World Incidents","created":"2025-05-28","cited_by_count":4},{"id":"2602.16136","title":"Retrieval Collapses When AI Pollutes the Web","created":"2026-02-18","cited_by_count":4}],"next_cursor":null}