[
  {
    "URL": "https://arxiv.org/abs/2306.01242v2",
    "archive": "arXiv",
    "archive_location": "2306.01242",
    "author": [
      {
        "literal": "Zhizheng Zhang"
      },
      {
        "literal": "Xiaoyi Zhang"
      },
      {
        "literal": "Wenxuan Xie"
      },
      {
        "literal": "Yan Lu"
      }
    ],
    "citation-key": "arxiv_2306_01242",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "631a39d2929c68bb93a7f95af22c17d2ab208668fd97d9082fe0601a73d123dd",
        "submitted_at": "2023-06-02T02:42:58Z",
        "updated_at": "2023-12-04T13:36:59Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2306.01242v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2306.01242",
      "catalog_id": "arxiv:2306.01242",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2023-06-02",
      "identifiers": {
        "arxiv": "2306.01242"
      },
      "record_updated_at": "2023-12-04"
    },
    "genre": "preprint",
    "id": "arxiv:2306.01242",
    "issued": {
      "date-parts": [
        [
          2023,
          6,
          2
        ]
      ]
    },
    "note": "First published: 2023-06-02; Recorded arXiv version: v2; Recorded version updated: 2023-12-04T13:36:59Z.",
    "title": "Responsible Task Automation: Empowering Large Language Models as Responsible Task Automators",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2402.10196v1",
    "archive": "arXiv",
    "archive_location": "2402.10196",
    "author": [
      {
        "literal": "Lingbo Mo"
      },
      {
        "literal": "Zeyi Liao"
      },
      {
        "literal": "Boyuan Zheng"
      },
      {
        "literal": "Yu Su"
      },
      {
        "literal": "Chaowei Xiao"
      },
      {
        "literal": "Huan Sun"
      }
    ],
    "citation-key": "arxiv_2402_10196",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "b6d81a6b9de6fa32c8f5749d029d0819ddf3b310ae00a4872877ee72580e8879",
        "submitted_at": "2024-02-15T18:51:32Z",
        "updated_at": "2024-02-15T18:51:32Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2402.10196v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2402.10196",
      "catalog_id": "arxiv:2402.10196",
      "catalog_kind": "survey",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2024-02-15",
      "identifiers": {
        "arxiv": "2402.10196"
      },
      "record_updated_at": "2024-02-15"
    },
    "genre": "preprint",
    "id": "arxiv:2402.10196",
    "issued": {
      "date-parts": [
        [
          2024,
          2,
          15
        ]
      ]
    },
    "note": "First published: 2024-02-15; Recorded arXiv version: v1; Recorded version updated: 2024-02-15T18:51:32Z.",
    "title": "A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2402.16965v1",
    "archive": "arXiv",
    "archive_location": "2402.16965",
    "author": [
      {
        "literal": "Fangzhou Wu"
      },
      {
        "literal": "Shutong Wu"
      },
      {
        "literal": "Yulong Cao"
      },
      {
        "literal": "Chaowei Xiao"
      }
    ],
    "citation-key": "arxiv_2402_16965",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "2cf1458c8c4134b2195394a8acba4919f9b3a5a7c79b1bea017ac4558123f69c",
        "submitted_at": "2024-02-26T19:01:54Z",
        "updated_at": "2024-02-26T19:01:54Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2402.16965v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2402.16965",
      "catalog_id": "arxiv:2402.16965",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-02-26",
      "identifiers": {
        "arxiv": "2402.16965"
      },
      "record_updated_at": "2024-02-26"
    },
    "genre": "preprint",
    "id": "arxiv:2402.16965",
    "issued": {
      "date-parts": [
        [
          2024,
          2,
          26
        ]
      ]
    },
    "note": "First published: 2024-02-26; Recorded arXiv version: v1; Recorded version updated: 2024-02-26T19:01:54Z.",
    "title": "WIPI: A New Web Threat for LLM-Driven Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2406.09187v3",
    "archive": "arXiv",
    "archive_location": "2406.09187",
    "author": [
      {
        "literal": "Zhen Xiang"
      },
      {
        "literal": "Linzhi Zheng"
      },
      {
        "literal": "Yanjie Li"
      },
      {
        "literal": "Junyuan Hong"
      },
      {
        "literal": "Qinbin Li"
      },
      {
        "literal": "Han Xie"
      },
      {
        "literal": "Jiawei Zhang"
      },
      {
        "literal": "Zidi Xiong"
      },
      {
        "literal": "Chulin Xie"
      },
      {
        "literal": "Carl Yang"
      },
      {
        "literal": "Dawn Song"
      },
      {
        "literal": "Bo Li"
      }
    ],
    "citation-key": "arxiv_2406_09187",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "50a8ea492d3f1c2ff2bd00ebfb18e19077bacc96b44c751d985bfe0f7bef0247",
        "submitted_at": "2024-06-13T14:49:26Z",
        "updated_at": "2025-05-29T03:09:05Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2406.09187v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2406.09187",
      "catalog_id": "arxiv:2406.09187",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2024-06-13",
      "identifiers": {
        "arxiv": "2406.09187"
      },
      "record_updated_at": "2025-05-29"
    },
    "genre": "preprint",
    "id": "arxiv:2406.09187",
    "issued": {
      "date-parts": [
        [
          2024,
          6,
          13
        ]
      ]
    },
    "note": "First published: 2024-06-13; Recorded arXiv version: v3; Recorded version updated: 2025-05-29T03:09:05Z.",
    "title": "GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2406.12814v3",
    "archive": "arXiv",
    "archive_location": "2406.12814",
    "author": [
      {
        "literal": "Chen Henry Wu"
      },
      {
        "literal": "Rishi Shah"
      },
      {
        "literal": "Jing Yu Koh"
      },
      {
        "literal": "Ruslan Salakhutdinov"
      },
      {
        "literal": "Daniel Fried"
      },
      {
        "literal": "Aditi Raghunathan"
      }
    ],
    "citation-key": "arxiv_2406_12814",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7cc1c1ac93f8e328d33accf7cdaa1d65487c4f7abec15234b9e596a501947550",
        "submitted_at": "2024-06-18T17:32:48Z",
        "updated_at": "2025-02-04T20:02:17Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2406.12814v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2406.12814",
      "catalog_id": "arxiv:2406.12814",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "citation_edition": "record",
      "first_published_at": "2024-06-18",
      "identifiers": {
        "arxiv": "2406.12814"
      },
      "publication": {
        "authors": [
          "Chen Wu",
          "Rishi Shah",
          "Jing Yu Koh",
          "Russ Salakhutdinov",
          "Daniel Fried",
          "Aditi Raghunathan"
        ],
        "date_basis": "Explicit publisher citation_publication_date: 2025-05-01. Preserve supplied precision; do not substitute conference event dates.",
        "date_parts": [
          2025,
          5,
          1
        ],
        "doi": null,
        "event_dates": null,
        "evidence_urls": [
          "https://proceedings.iclr.cc/paper_files/paper/2025/hash/460a1d8eac34125dad453b28d6d64446-Abstract-Conference.html"
        ],
        "identity_basis": "Same work: normalized title, ordered author correspondence and the specific contribution in the complete publisher abstract were reviewed against the retained arXiv identity. The normalized publisher abstract matches the retained arXiv abstract SHA-256.",
        "issue": null,
        "notes": "Publisher proceedings edition; retained separately from the arXiv snapshot. Publisher spelling, initials, name annotations or author lists differ from the retained preprint.",
        "pages": "28362-28383",
        "pdf_url": "https://proceedings.iclr.cc/paper_files/paper/2025/file/460a1d8eac34125dad453b28d6d64446-Paper-Conference.pdf",
        "publisher": null,
        "series": null,
        "title": "Dissecting Adversarial Robustness of Multimodal LM Agents",
        "type": "conference-paper",
        "url": "https://proceedings.iclr.cc/paper_files/paper/2025/hash/460a1d8eac34125dad453b28d6d64446-Abstract-Conference.html",
        "venue": "International Conference on Learning Representations",
        "volume": "2025"
      },
      "record_updated_at": "2025-02-04"
    },
    "genre": "preprint",
    "id": "arxiv:2406.12814",
    "issued": {
      "date-parts": [
        [
          2024,
          6,
          18
        ]
      ]
    },
    "note": "First published: 2024-06-18; Recorded arXiv version: v3; Recorded version updated: 2025-02-04T20:02:17Z.",
    "title": "Dissecting Adversarial Robustness of Multimodal LM Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2407.09295v3",
    "archive": "arXiv",
    "archive_location": "2407.09295",
    "author": [
      {
        "literal": "Yulong Yang"
      },
      {
        "literal": "Xinshan Yang"
      },
      {
        "literal": "Shuaidong Li"
      },
      {
        "literal": "Chenhao Lin"
      },
      {
        "literal": "Zhengyu Zhao"
      },
      {
        "literal": "Chao Shen"
      },
      {
        "literal": "Tianwei Zhang"
      }
    ],
    "citation-key": "arxiv_2407_09295",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "88576325385d3c361f0666311eae8858ea0d4a0098d73221f789550bebf1e5db",
        "submitted_at": "2024-07-12T14:30:05Z",
        "updated_at": "2025-03-16T07:13:53Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2407.09295v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2407.09295",
      "catalog_id": "arxiv:2407.09295",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-07-12",
      "identifiers": {
        "arxiv": "2407.09295"
      },
      "record_updated_at": "2025-03-16"
    },
    "genre": "preprint",
    "id": "arxiv:2407.09295",
    "issued": {
      "date-parts": [
        [
          2024,
          7,
          12
        ]
      ]
    },
    "note": "First published: 2024-07-12; Recorded arXiv version: v3; Recorded version updated: 2025-03-16T07:13:53Z.",
    "title": "Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2408.02544v3",
    "archive": "arXiv",
    "archive_location": "2408.02544",
    "author": [
      {
        "literal": "Xinbei Ma"
      },
      {
        "literal": "Yiting Wang"
      },
      {
        "literal": "Yao Yao"
      },
      {
        "literal": "Tongxin Yuan"
      },
      {
        "literal": "Aston Zhang"
      },
      {
        "literal": "Zhuosheng Zhang"
      },
      {
        "literal": "Hai Zhao"
      }
    ],
    "citation-key": "arxiv_2408_02544",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "d66c0c2102dd2734d5334faeb12b4971d50a2d2e50a6671ede2fa78a84a0c03f",
        "submitted_at": "2024-08-05T15:16:22Z",
        "updated_at": "2025-09-05T09:21:10Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2408.02544v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2408.02544",
      "catalog_id": "arxiv:2408.02544",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-08-05",
      "identifiers": {
        "arxiv": "2408.02544"
      },
      "record_updated_at": "2025-09-05"
    },
    "genre": "preprint",
    "id": "arxiv:2408.02544",
    "issued": {
      "date-parts": [
        [
          2024,
          8,
          5
        ]
      ]
    },
    "note": "First published: 2024-08-05; Recorded arXiv version: v3; Recorded version updated: 2025-09-05T09:21:10Z.",
    "title": "Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2409.11295v5",
    "archive": "arXiv",
    "archive_location": "2409.11295",
    "author": [
      {
        "literal": "Zeyi Liao"
      },
      {
        "literal": "Lingbo Mo"
      },
      {
        "literal": "Chejian Xu"
      },
      {
        "literal": "Mintong Kang"
      },
      {
        "literal": "Jiawei Zhang"
      },
      {
        "literal": "Chaowei Xiao"
      },
      {
        "literal": "Yuan Tian"
      },
      {
        "literal": "Bo Li"
      },
      {
        "literal": "Huan Sun"
      }
    ],
    "citation-key": "arxiv_2409_11295",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "897cdbb6aa52478b260ecba830e0a13527c2614454f7c766c9f5c8c9bdbfd4e3",
        "submitted_at": "2024-09-17T15:49:44Z",
        "updated_at": "2025-03-12T20:54:00Z",
        "version": 5,
        "versioned_url": "https://arxiv.org/abs/2409.11295v5"
      },
      "canonical_source_url": "https://arxiv.org/abs/2409.11295",
      "catalog_id": "arxiv:2409.11295",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-09-17",
      "identifiers": {
        "arxiv": "2409.11295"
      },
      "record_updated_at": "2025-03-12"
    },
    "genre": "preprint",
    "id": "arxiv:2409.11295",
    "issued": {
      "date-parts": [
        [
          2024,
          9,
          17
        ]
      ]
    },
    "note": "First published: 2024-09-17; Recorded arXiv version: v5; Recorded version updated: 2025-03-12T20:54:00Z.",
    "title": "EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage",
    "type": "article",
    "version": "5"
  },
  {
    "URL": "https://arxiv.org/abs/2410.06703v7",
    "archive": "arXiv",
    "archive_location": "2410.06703",
    "author": [
      {
        "literal": "Ido Levy"
      },
      {
        "literal": "Ben Wiesel"
      },
      {
        "literal": "Sami Marreed"
      },
      {
        "literal": "Alon Oved"
      },
      {
        "literal": "Avi Yaeli"
      },
      {
        "literal": "Nir Mashkif"
      },
      {
        "literal": "Segev Shlomov"
      }
    ],
    "citation-key": "arxiv_2410_06703",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "ba2b599c2b3f09974ee41d329545b69773a3b408b6db0124c5b1073d5fe8f1cf",
        "submitted_at": "2024-10-09T09:13:38Z",
        "updated_at": "2026-06-04T09:59:28Z",
        "version": 7,
        "versioned_url": "https://arxiv.org/abs/2410.06703v7"
      },
      "canonical_source_url": "https://arxiv.org/abs/2410.06703",
      "catalog_id": "arxiv:2410.06703",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-10-09",
      "identifiers": {
        "arxiv": "2410.06703"
      },
      "record_updated_at": "2026-06-04"
    },
    "genre": "preprint",
    "id": "arxiv:2410.06703",
    "issued": {
      "date-parts": [
        [
          2024,
          10,
          9
        ]
      ]
    },
    "note": "First published: 2024-10-09; Recorded arXiv version: v7; Recorded version updated: 2026-06-04T09:59:28Z.",
    "title": "ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents",
    "type": "article",
    "version": "7"
  },
  {
    "URL": "https://arxiv.org/abs/2410.09006v2",
    "archive": "arXiv",
    "archive_location": "2410.09006",
    "author": [
      {
        "literal": "Zhuohao Jerry Zhang"
      },
      {
        "literal": "Eldon Schoop"
      },
      {
        "literal": "Jeffrey Nichols"
      },
      {
        "literal": "Anuj Mahajan"
      },
      {
        "literal": "Amanda Swearngin"
      }
    ],
    "citation-key": "arxiv_2410_09006",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "ff649a0792864bd40b7bf2f825f6a8a815eb60cc795ed4dc0c6b55a942477758",
        "submitted_at": "2024-10-11T17:24:00Z",
        "updated_at": "2025-03-22T18:01:37Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2410.09006v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2410.09006",
      "catalog_id": "arxiv:2410.09006",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-10-11",
      "identifiers": {
        "arxiv": "2410.09006"
      },
      "record_updated_at": "2025-03-22"
    },
    "genre": "preprint",
    "id": "arxiv:2410.09006",
    "issued": {
      "date-parts": [
        [
          2024,
          10,
          11
        ]
      ]
    },
    "note": "First published: 2024-10-11; Recorded arXiv version: v2; Recorded version updated: 2025-03-22T18:01:37Z.",
    "title": "From Interaction to Impact: Towards Safer AI Agents Through Understanding and Evaluating Mobile UI Operation Impacts",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2410.13886v2",
    "archive": "arXiv",
    "archive_location": "2410.13886",
    "author": [
      {
        "literal": "Priyanshu Kumar"
      },
      {
        "literal": "Elaine Lau"
      },
      {
        "literal": "Saranya Vijayakumar"
      },
      {
        "literal": "Tu Trinh"
      },
      {
        "literal": "Scale Red Team"
      },
      {
        "literal": "Elaine Chang"
      },
      {
        "literal": "Vaughn Robinson"
      },
      {
        "literal": "Sean Hendryx"
      },
      {
        "literal": "Shuyan Zhou"
      },
      {
        "literal": "Matt Fredrikson"
      },
      {
        "literal": "Summer Yue"
      },
      {
        "literal": "Zifan Wang"
      }
    ],
    "citation-key": "arxiv_2410_13886",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "4922d9362b23bc0e41d47dacf590c6e9bd6e88cfa6418cf3517814131295270c",
        "submitted_at": "2024-10-11T06:54:12Z",
        "updated_at": "2024-10-21T18:06:58Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2410.13886v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2410.13886",
      "catalog_id": "arxiv:2410.13886",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-10-11",
      "identifiers": {
        "arxiv": "2410.13886"
      },
      "record_updated_at": "2024-10-21"
    },
    "genre": "preprint",
    "id": "arxiv:2410.13886",
    "issued": {
      "date-parts": [
        [
          2024,
          10,
          11
        ]
      ]
    },
    "note": "First published: 2024-10-11; Recorded arXiv version: v2; Recorded version updated: 2024-10-21T18:06:58Z.",
    "title": "Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2410.17401v4",
    "archive": "arXiv",
    "archive_location": "2410.17401",
    "author": [
      {
        "literal": "Chejian Xu"
      },
      {
        "literal": "Mintong Kang"
      },
      {
        "literal": "Jiawei Zhang"
      },
      {
        "literal": "Zeyi Liao"
      },
      {
        "literal": "Lingbo Mo"
      },
      {
        "literal": "Mengqi Yuan"
      },
      {
        "literal": "Huan Sun"
      },
      {
        "literal": "Bo Li"
      }
    ],
    "citation-key": "arxiv_2410_17401",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "226a4acbbaab42c8cbc44a897651d8c745119426ea1223f1b849558af32fab02",
        "submitted_at": "2024-10-22T20:18:26Z",
        "updated_at": "2025-05-31T18:34:01Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2410.17401v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2410.17401",
      "catalog_id": "arxiv:2410.17401",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-10-22",
      "identifiers": {
        "arxiv": "2410.17401"
      },
      "record_updated_at": "2025-05-31"
    },
    "genre": "preprint",
    "id": "arxiv:2410.17401",
    "issued": {
      "date-parts": [
        [
          2024,
          10,
          22
        ]
      ]
    },
    "note": "First published: 2024-10-22; Recorded arXiv version: v4; Recorded version updated: 2025-05-31T18:34:01Z.",
    "title": "AdvAgent: Controllable Blackbox Red-teaming on Web Agents",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2410.17520v3",
    "archive": "arXiv",
    "archive_location": "2410.17520",
    "author": [
      {
        "literal": "Juyong Lee"
      },
      {
        "literal": "Dongyoon Hahm"
      },
      {
        "literal": "June Suk Choi"
      },
      {
        "literal": "W. Bradley Knox"
      },
      {
        "literal": "Kimin Lee"
      }
    ],
    "citation-key": "arxiv_2410_17520",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "362cbf7ea267ddc4a64505aa95c4f16a9f3631f95319ce10eef9981e2c85937b",
        "submitted_at": "2024-10-23T02:51:43Z",
        "updated_at": "2026-01-27T01:51:55Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2410.17520v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2410.17520",
      "catalog_id": "arxiv:2410.17520",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2024-10-23",
      "identifiers": {
        "arxiv": "2410.17520"
      },
      "record_updated_at": "2026-01-27"
    },
    "genre": "preprint",
    "id": "arxiv:2410.17520",
    "issued": {
      "date-parts": [
        [
          2024,
          10,
          23
        ]
      ]
    },
    "note": "First published: 2024-10-23; Recorded arXiv version: v3; Recorded version updated: 2026-01-27T01:51:55Z.",
    "title": "MobileSafetyBench: Evaluating Safety of Autonomous Agents in Mobile Device Control",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2410.23252v3",
    "archive": "arXiv",
    "archive_location": "2410.23252",
    "author": [
      {
        "literal": "Haoyi Qiu"
      },
      {
        "literal": "Alexander R. Fabbri"
      },
      {
        "literal": "Divyansh Agarwal"
      },
      {
        "literal": "Kung-Hsiang Huang"
      },
      {
        "literal": "Sarah Tan"
      },
      {
        "literal": "Nanyun Peng"
      },
      {
        "literal": "Chien-Sheng Wu"
      }
    ],
    "citation-key": "arxiv_2410_23252",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "26fac89c78ab03fcbaf25bbfe93ebce090dec9adbf5c6dd5440641f154cffac9",
        "submitted_at": "2024-10-30T17:35:44Z",
        "updated_at": "2025-03-08T23:37:49Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2410.23252v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2410.23252",
      "catalog_id": "arxiv:2410.23252",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "citation_edition": "record",
      "first_published_at": "2024-10-30",
      "identifiers": {
        "arxiv": "2410.23252"
      },
      "publication": {
        "authors": [
          "Haoyi Qiu",
          "Alexander Richard Fabbri",
          "Divyansh Agarwal",
          "Kung-Hsiang Huang",
          "Sarah Tan",
          "Nanyun Peng",
          "Chien-Sheng Wu"
        ],
        "date_basis": "Explicit publisher citation_publication_date: 2025/4. Preserve supplied precision; do not substitute conference event dates.",
        "date_parts": [
          2025,
          4
        ],
        "doi": "10.18653/v1/2025.findings-naacl.222",
        "event_dates": null,
        "evidence_urls": [
          "https://aclanthology.org/2025.findings-naacl.222/"
        ],
        "identity_basis": "Same work: normalized title, ordered author correspondence and the specific contribution in the complete publisher abstract were reviewed against the retained arXiv identity.",
        "issue": null,
        "notes": "Publisher proceedings edition; retained separately from the arXiv snapshot. Publisher spelling, initials, name annotations or author lists differ from the retained preprint.",
        "pages": "3978-4005",
        "pdf_url": "https://aclanthology.org/2025.findings-naacl.222.pdf",
        "publisher": "Association for Computational Linguistics",
        "series": null,
        "title": "Evaluating Cultural and Social Awareness of LLM Web Agents",
        "type": "conference-paper",
        "url": "https://aclanthology.org/2025.findings-naacl.222/",
        "venue": "Findings of the Association for Computational Linguistics: NAACL 2025",
        "volume": null
      },
      "record_updated_at": "2025-03-08"
    },
    "genre": "preprint",
    "id": "arxiv:2410.23252",
    "issued": {
      "date-parts": [
        [
          2024,
          10,
          30
        ]
      ]
    },
    "note": "First published: 2024-10-30; Recorded arXiv version: v3; Recorded version updated: 2025-03-08T23:37:49Z.",
    "title": "Evaluating Cultural and Social Awareness of LLM Web Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2411.02391v2",
    "archive": "arXiv",
    "archive_location": "2411.02391",
    "author": [
      {
        "literal": "Yanzhe Zhang"
      },
      {
        "literal": "Tao Yu"
      },
      {
        "literal": "Diyi Yang"
      }
    ],
    "citation-key": "arxiv_2411_02391",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "085c64595365cc6439c8c5fa8a479259a3d59b7e9740e0f9d43e48d00e1439c0",
        "submitted_at": "2024-11-04T18:56:42Z",
        "updated_at": "2025-05-24T16:15:46Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2411.02391v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2411.02391",
      "catalog_id": "arxiv:2411.02391",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "citation_edition": "record",
      "first_published_at": "2024-11-04",
      "identifiers": {
        "arxiv": "2411.02391"
      },
      "publication": {
        "authors": [
          "Yanzhe Zhang",
          "Tao Yu",
          "Diyi Yang"
        ],
        "date_basis": "Explicit publisher citation_publication_date: 2025/7. Preserve supplied precision; do not substitute conference event dates.",
        "date_parts": [
          2025,
          7
        ],
        "doi": "10.18653/v1/2025.acl-long.411",
        "event_dates": null,
        "evidence_urls": [
          "https://aclanthology.org/2025.acl-long.411/"
        ],
        "identity_basis": "Same work: normalized title, ordered author correspondence and the specific contribution in the complete publisher abstract were reviewed against the retained arXiv identity.",
        "issue": null,
        "notes": "Publisher proceedings edition; retained separately from the arXiv snapshot.",
        "pages": "8387-8401",
        "pdf_url": "https://aclanthology.org/2025.acl-long.411.pdf",
        "publisher": "Association for Computational Linguistics",
        "series": null,
        "title": "Attacking Vision-Language Computer Agents via Pop-ups",
        "type": "conference-paper",
        "url": "https://aclanthology.org/2025.acl-long.411/",
        "venue": "Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)",
        "volume": null
      },
      "record_updated_at": "2025-05-24"
    },
    "genre": "preprint",
    "id": "arxiv:2411.02391",
    "issued": {
      "date-parts": [
        [
          2024,
          11,
          4
        ]
      ]
    },
    "note": "First published: 2024-11-04; Recorded arXiv version: v2; Recorded version updated: 2025-05-24T16:15:46Z.",
    "title": "Attacking Vision-Language Computer Agents via Pop-ups",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2502.13053v3",
    "archive": "arXiv",
    "archive_location": "2502.13053",
    "author": [
      {
        "literal": "Yurun Chen"
      },
      {
        "literal": "Xavier Hu"
      },
      {
        "literal": "Keting Yin"
      },
      {
        "literal": "Juncheng Li"
      },
      {
        "literal": "Shengyu Zhang"
      }
    ],
    "citation-key": "arxiv_2502_13053",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5af8d3a8b4db150bab0630f6040a0f3bced612f68b11d31985053f1f25c0f6f6",
        "submitted_at": "2025-02-18T17:01:28Z",
        "updated_at": "2025-08-06T07:04:43Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2502.13053v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2502.13053",
      "catalog_id": "arxiv:2502.13053",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-02-18",
      "identifiers": {
        "arxiv": "2502.13053"
      },
      "record_updated_at": "2025-08-06"
    },
    "genre": "preprint",
    "id": "arxiv:2502.13053",
    "issued": {
      "date-parts": [
        [
          2025,
          2,
          18
        ]
      ]
    },
    "note": "First published: 2025-02-18; Recorded arXiv version: v3; Recorded version updated: 2025-08-06T07:04:43Z.",
    "title": "Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2502.20383v3",
    "archive": "arXiv",
    "archive_location": "2502.20383",
    "author": [
      {
        "literal": "Jeffrey Yang Fan Chiang"
      },
      {
        "literal": "Seungjae Lee"
      },
      {
        "literal": "Jia-Bin Huang"
      },
      {
        "literal": "Furong Huang"
      },
      {
        "literal": "Yizheng Chen"
      }
    ],
    "citation-key": "arxiv_2502_20383",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "27eacc2668411e2b7f79423940aa12293fa57aa81390c64587d3074c141dcb4f",
        "submitted_at": "2025-02-27T18:56:26Z",
        "updated_at": "2025-09-21T22:29:53Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2502.20383v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2502.20383",
      "catalog_id": "arxiv:2502.20383",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-02-27",
      "identifiers": {
        "arxiv": "2502.20383"
      },
      "record_updated_at": "2025-09-21"
    },
    "genre": "preprint",
    "id": "arxiv:2502.20383",
    "issued": {
      "date-parts": [
        [
          2025,
          2,
          27
        ]
      ]
    },
    "note": "First published: 2025-02-27; Recorded arXiv version: v3; Recorded version updated: 2025-09-21T22:29:53Z.",
    "title": "Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2503.04957v1",
    "archive": "arXiv",
    "archive_location": "2503.04957",
    "author": [
      {
        "literal": "Ada Defne Tur"
      },
      {
        "literal": "Nicholas Meade"
      },
      {
        "literal": "Xing Han Lù"
      },
      {
        "literal": "Alejandra Zambrano"
      },
      {
        "literal": "Arkil Patel"
      },
      {
        "literal": "Esin Durmus"
      },
      {
        "literal": "Spandana Gella"
      },
      {
        "literal": "Karolina Stańczak"
      },
      {
        "literal": "Siva Reddy"
      }
    ],
    "citation-key": "arxiv_2503_04957",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e4588022dd47624058db8a16d7f7763c591241298e94594b56bfeb4ab2e01737",
        "submitted_at": "2025-03-06T20:43:14Z",
        "updated_at": "2025-03-06T20:43:14Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2503.04957v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.04957",
      "catalog_id": "arxiv:2503.04957",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-06",
      "identifiers": {
        "arxiv": "2503.04957"
      },
      "record_updated_at": "2025-03-06"
    },
    "genre": "preprint",
    "id": "arxiv:2503.04957",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          6
        ]
      ]
    },
    "note": "First published: 2025-03-06; Recorded arXiv version: v1; Recorded version updated: 2025-03-06T20:43:14Z.",
    "title": "SafeArena: Evaluating the Safety of Autonomous Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2503.09241v1",
    "archive": "arXiv",
    "archive_location": "2503.09241",
    "author": [
      {
        "literal": "Pei Yang"
      },
      {
        "literal": "Hai Ci"
      },
      {
        "literal": "Mike Zheng Shou"
      }
    ],
    "citation-key": "arxiv_2503_09241",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7d4423ee1e7047a6228f5b29684618fc4108af0694484a7ceddf6c3b53fbb06c",
        "submitted_at": "2025-03-12T10:38:15Z",
        "updated_at": "2025-03-12T10:38:15Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2503.09241v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.09241",
      "catalog_id": "arxiv:2503.09241",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-12",
      "identifiers": {
        "arxiv": "2503.09241"
      },
      "record_updated_at": "2025-03-12"
    },
    "genre": "preprint",
    "id": "arxiv:2503.09241",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          12
        ]
      ]
    },
    "note": "First published: 2025-03-12; Recorded arXiv version: v1; Recorded version updated: 2025-03-12T10:38:15Z.",
    "title": "In-Context Defense in Computer Agents: An Empirical Study",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2503.09780v3",
    "archive": "arXiv",
    "archive_location": "2503.09780",
    "author": [
      {
        "literal": "Arman Zharmagambetov"
      },
      {
        "literal": "Chuan Guo"
      },
      {
        "literal": "Ivan Evtimov"
      },
      {
        "literal": "Maya Pavlova"
      },
      {
        "literal": "Ruslan Salakhutdinov"
      },
      {
        "literal": "Kamalika Chaudhuri"
      }
    ],
    "citation-key": "arxiv_2503_09780",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "bbb0726446c9679781b8e5930da0d3f406989a4b47759ce3440c9ad56d5839d8",
        "submitted_at": "2025-03-12T19:30:31Z",
        "updated_at": "2025-10-01T23:55:58Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2503.09780v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.09780",
      "catalog_id": "arxiv:2503.09780",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-12",
      "identifiers": {
        "arxiv": "2503.09780"
      },
      "record_updated_at": "2025-10-01"
    },
    "genre": "preprint",
    "id": "arxiv:2503.09780",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          12
        ]
      ]
    },
    "note": "First published: 2025-03-12; Recorded arXiv version: v3; Recorded version updated: 2025-10-01T23:55:58Z.",
    "title": "AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2503.15515v1",
    "archive": "arXiv",
    "archive_location": "2503.15515",
    "author": [
      {
        "literal": "Piero A. Bonatti"
      },
      {
        "literal": "John Domingue"
      },
      {
        "literal": "Anna Lisa Gentile"
      },
      {
        "literal": "Andreas Harth"
      },
      {
        "literal": "Olaf Hartig"
      },
      {
        "literal": "Aidan Hogan"
      },
      {
        "literal": "Katja Hose"
      },
      {
        "literal": "Ernesto Jimenez-Ruiz"
      },
      {
        "literal": "Deborah L. McGuinness"
      },
      {
        "literal": "Chang Sun"
      },
      {
        "literal": "Ruben Verborgh"
      },
      {
        "literal": "Jesse Wright"
      }
    ],
    "citation-key": "arxiv_2503_15515",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "4c778da33baa88916fbcb3e02a33f760dccea8b193d25087df9b56cd42c3c248",
        "submitted_at": "2025-01-31T12:26:27Z",
        "updated_at": "2025-01-31T12:26:27Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2503.15515v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.15515",
      "catalog_id": "arxiv:2503.15515",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-01-31",
      "identifiers": {
        "arxiv": "2503.15515"
      },
      "record_updated_at": "2025-01-31"
    },
    "genre": "preprint",
    "id": "arxiv:2503.15515",
    "issued": {
      "date-parts": [
        [
          2025,
          1,
          31
        ]
      ]
    },
    "note": "First published: 2025-01-31; Recorded arXiv version: v1; Recorded version updated: 2025-01-31T12:26:27Z.",
    "title": "Towards Computer-Using Personal Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2503.16465v3",
    "archive": "arXiv",
    "archive_location": "2503.16465",
    "author": [
      {
        "literal": "Pengzhou Cheng"
      },
      {
        "literal": "Zheng Wu"
      },
      {
        "literal": "Zongru Wu"
      },
      {
        "literal": "Aston Zhang"
      },
      {
        "literal": "Zhuosheng Zhang"
      },
      {
        "literal": "Gongshen Liu"
      }
    ],
    "citation-key": "arxiv_2503_16465",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "aa6201528b13c6a1aae8dcd745f4f5d995e79982ef7c54a1962e2f9035233293",
        "submitted_at": "2025-02-26T12:31:16Z",
        "updated_at": "2025-07-14T15:56:44Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2503.16465v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.16465",
      "catalog_id": "arxiv:2503.16465",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-02-26",
      "identifiers": {
        "arxiv": "2503.16465"
      },
      "record_updated_at": "2025-07-14"
    },
    "genre": "preprint",
    "id": "arxiv:2503.16465",
    "issued": {
      "date-parts": [
        [
          2025,
          2,
          26
        ]
      ]
    },
    "note": "First published: 2025-02-26; Recorded arXiv version: v3; Recorded version updated: 2025-07-14T15:56:44Z.",
    "title": "OS-Kairos: Adaptive Interaction for MLLM-Powered GUI Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2503.18492v2",
    "archive": "arXiv",
    "archive_location": "2503.18492",
    "author": [
      {
        "literal": "Jungjae Lee"
      },
      {
        "literal": "Dongjae Lee"
      },
      {
        "literal": "Chihun Choi"
      },
      {
        "literal": "Youngmin Im"
      },
      {
        "literal": "Jaeyoung Wi"
      },
      {
        "literal": "Kihong Heo"
      },
      {
        "literal": "Sangeun Oh"
      },
      {
        "literal": "Sunjae Lee"
      },
      {
        "literal": "Insik Shin"
      }
    ],
    "citation-key": "arxiv_2503_18492",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "10e7a9a4471555c6e4001cd10c1e4b375b503adfe6ea48d5808d1d7721dfc162",
        "submitted_at": "2025-03-24T09:46:05Z",
        "updated_at": "2025-09-11T04:15:45Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2503.18492v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.18492",
      "catalog_id": "arxiv:2503.18492",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-24",
      "identifiers": {
        "arxiv": "2503.18492"
      },
      "record_updated_at": "2025-09-11"
    },
    "genre": "preprint",
    "id": "arxiv:2503.18492",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          24
        ]
      ]
    },
    "note": "First published: 2025-03-24; Recorded arXiv version: v2; Recorded version updated: 2025-09-11T04:15:45Z.",
    "title": "VeriSafe Agent: Safeguarding Mobile GUI Agent via Logic-based Action Verification",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2503.20279v3",
    "archive": "arXiv",
    "archive_location": "2503.20279",
    "author": [
      {
        "literal": "Sejin Lee"
      },
      {
        "literal": "Jian Kim"
      },
      {
        "literal": "Haon Park"
      },
      {
        "literal": "Ashkan Yousefpour"
      },
      {
        "literal": "Sangyoon Yu"
      },
      {
        "literal": "Min Song"
      }
    ],
    "citation-key": "arxiv_2503_20279",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5e90cbc547703a2673cfb30bbe9079496ce4c076b51f39e0557f5db9048947c8",
        "submitted_at": "2025-03-26T07:08:15Z",
        "updated_at": "2025-06-08T05:39:56Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2503.20279v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.20279",
      "catalog_id": "arxiv:2503.20279",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-26",
      "identifiers": {
        "arxiv": "2503.20279"
      },
      "record_updated_at": "2025-06-08"
    },
    "genre": "preprint",
    "id": "arxiv:2503.20279",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          26
        ]
      ]
    },
    "note": "First published: 2025-03-26; Recorded arXiv version: v3; Recorded version updated: 2025-06-08T05:39:56Z.",
    "title": "sudo rm -rf agentic_security",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2503.22738v2",
    "archive": "arXiv",
    "archive_location": "2503.22738",
    "author": [
      {
        "literal": "Zhaorun Chen"
      },
      {
        "literal": "Mintong Kang"
      },
      {
        "literal": "Bo Li"
      }
    ],
    "citation-key": "arxiv_2503_22738",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "362fe117797181225641b71b23df95d82c2f90ebf2bbfa1bebea56427e502091",
        "submitted_at": "2025-03-26T17:58:40Z",
        "updated_at": "2025-11-27T22:01:17Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2503.22738v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.22738",
      "catalog_id": "arxiv:2503.22738",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-26",
      "identifiers": {
        "arxiv": "2503.22738"
      },
      "record_updated_at": "2025-11-27"
    },
    "genre": "preprint",
    "id": "arxiv:2503.22738",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          26
        ]
      ]
    },
    "note": "First published: 2025-03-26; Recorded arXiv version: v2; Recorded version updated: 2025-11-27T22:01:17Z.",
    "title": "ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2503.23350v4",
    "archive": "arXiv",
    "archive_location": "2503.23350",
    "author": [
      {
        "literal": "Liangbo Ning"
      },
      {
        "literal": "Ziran Liang"
      },
      {
        "literal": "Zhuohang Jiang"
      },
      {
        "literal": "Haohao Qu"
      },
      {
        "literal": "Yujuan Ding"
      },
      {
        "literal": "Wenqi Fan"
      },
      {
        "literal": "Xiao-yong Wei"
      },
      {
        "literal": "Shanru Lin"
      },
      {
        "literal": "Hui Liu"
      },
      {
        "literal": "Philip S. Yu"
      },
      {
        "literal": "Qing Li"
      }
    ],
    "citation-key": "arxiv_2503_23350",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "4b214bd8e5a34c0e8ca16a3be4fcf638a59a17ca524276dbef3c6b75f08398bb",
        "submitted_at": "2025-03-30T08:15:44Z",
        "updated_at": "2025-08-05T11:47:41Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2503.23350v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.23350",
      "catalog_id": "arxiv:2503.23350",
      "catalog_kind": "survey",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-30",
      "identifiers": {
        "arxiv": "2503.23350"
      },
      "record_updated_at": "2025-08-05"
    },
    "genre": "preprint",
    "id": "arxiv:2503.23350",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          30
        ]
      ]
    },
    "note": "First published: 2025-03-30; Recorded arXiv version: v4; Recorded version updated: 2025-08-05T11:47:41Z.",
    "title": "A Survey of WebAgents: Towards Next-Generation AI Agents for Web Automation with Large Foundation Models",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2503.23434v2",
    "archive": "arXiv",
    "archive_location": "2503.23434",
    "author": [
      {
        "literal": "Yucheng Shi"
      },
      {
        "literal": "Wenhao Yu"
      },
      {
        "literal": "Jingyuan Huang"
      },
      {
        "literal": "Wenlin Yao"
      },
      {
        "literal": "Wenhu Chen"
      },
      {
        "literal": "Ninghao Liu"
      }
    ],
    "citation-key": "arxiv_2503_23434",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5a6811c6d0c3b30d4e6af2f7b0beef8aa8f1ad99ceb325182305e571fe5c398f",
        "submitted_at": "2025-03-30T13:26:00Z",
        "updated_at": "2026-02-24T05:24:23Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2503.23434v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2503.23434",
      "catalog_id": "arxiv:2503.23434",
      "catalog_kind": "survey",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-03-30",
      "identifiers": {
        "arxiv": "2503.23434"
      },
      "record_updated_at": "2026-02-24"
    },
    "genre": "preprint",
    "id": "arxiv:2503.23434",
    "issued": {
      "date-parts": [
        [
          2025,
          3,
          30
        ]
      ]
    },
    "note": "First published: 2025-03-30; Recorded arXiv version: v2; Recorded version updated: 2026-02-24T05:24:23Z.",
    "title": "Towards Trustworthy GUI Agents: A Survey",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2504.04716v1",
    "archive": "arXiv",
    "archive_location": "2504.04716",
    "author": [
      {
        "literal": "Haoren Zhao"
      },
      {
        "literal": "Tianyi Chen"
      },
      {
        "literal": "Zhen Wang"
      }
    ],
    "citation-key": "arxiv_2504_04716",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "ededfa864150f1b7b4ba53b265b5cbaa60bcf42690a8e22f5c13f915b6cd0108",
        "submitted_at": "2025-04-07T03:58:45Z",
        "updated_at": "2025-04-07T03:58:45Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2504.04716v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2504.04716",
      "catalog_id": "arxiv:2504.04716",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-04-07",
      "identifiers": {
        "arxiv": "2504.04716"
      },
      "record_updated_at": "2025-04-07"
    },
    "genre": "preprint",
    "id": "arxiv:2504.04716",
    "issued": {
      "date-parts": [
        [
          2025,
          4,
          7
        ]
      ]
    },
    "note": "First published: 2025-04-07; Recorded arXiv version: v1; Recorded version updated: 2025-04-07T03:58:45Z.",
    "title": "On the Robustness of GUI Grounding Models Against Image Attacks",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2504.11281v1",
    "archive": "arXiv",
    "archive_location": "2504.11281",
    "author": [
      {
        "literal": "Chaoran Chen"
      },
      {
        "literal": "Zhiping Zhang"
      },
      {
        "literal": "Bingcan Guo"
      },
      {
        "literal": "Shang Ma"
      },
      {
        "literal": "Ibrahim Khalilov"
      },
      {
        "literal": "Simret A Gebreegziabher"
      },
      {
        "literal": "Yanfang Ye"
      },
      {
        "literal": "Ziang Xiao"
      },
      {
        "literal": "Yaxing Yao"
      },
      {
        "literal": "Tianshi Li"
      },
      {
        "literal": "Toby Jia-Jun Li"
      }
    ],
    "citation-key": "arxiv_2504_11281",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "48acf3279b854d45ec076e630e5a84601879fc9ff894c5d368adb59d03bd3de6",
        "submitted_at": "2025-04-15T15:21:09Z",
        "updated_at": "2025-04-15T15:21:09Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2504.11281v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2504.11281",
      "catalog_id": "arxiv:2504.11281",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-04-15",
      "identifiers": {
        "arxiv": "2504.11281"
      },
      "record_updated_at": "2025-04-15"
    },
    "genre": "preprint",
    "id": "arxiv:2504.11281",
    "issued": {
      "date-parts": [
        [
          2025,
          4,
          15
        ]
      ]
    },
    "note": "First published: 2025-04-15; Recorded arXiv version: v1; Recorded version updated: 2025-04-15T15:21:09Z.",
    "title": "The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2504.14064v3",
    "archive": "arXiv",
    "archive_location": "2504.14064",
    "author": [
      {
        "literal": "Leo Boisvert"
      },
      {
        "literal": "Mihir Bansal"
      },
      {
        "literal": "Chandra Kiran Reddy Evuru"
      },
      {
        "literal": "Gabriel Huang"
      },
      {
        "literal": "Abhay Puri"
      },
      {
        "literal": "Avinandan Bose"
      },
      {
        "literal": "Maryam Fazel"
      },
      {
        "literal": "Quentin Cappart"
      },
      {
        "literal": "Jason Stanley"
      },
      {
        "literal": "Alexandre Lacoste"
      },
      {
        "literal": "Alexandre Drouin"
      },
      {
        "literal": "Krishnamurthy Dvijotham"
      }
    ],
    "citation-key": "arxiv_2504_14064",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "c5bdf5fefa1ee31126d99de08236991df559896212f60e0b3058fcd8cc8a134b",
        "submitted_at": "2025-04-18T20:36:10Z",
        "updated_at": "2025-10-07T13:10:30Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2504.14064v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2504.14064",
      "catalog_id": "arxiv:2504.14064",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-04-18",
      "identifiers": {
        "arxiv": "2504.14064"
      },
      "record_updated_at": "2025-10-07"
    },
    "genre": "preprint",
    "id": "arxiv:2504.14064",
    "issued": {
      "date-parts": [
        [
          2025,
          4,
          18
        ]
      ]
    },
    "note": "First published: 2025-04-18; Recorded arXiv version: v3; Recorded version updated: 2025-10-07T13:10:30Z.",
    "title": "DoomArena: A framework for Testing AI Agents Against Evolving Security Threats",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2504.17934v2",
    "archive": "arXiv",
    "archive_location": "2504.17934",
    "author": [
      {
        "literal": "Chaoran Chen"
      },
      {
        "literal": "Zhiping Zhang"
      },
      {
        "literal": "Ibrahim Khalilov"
      },
      {
        "literal": "Bingcan Guo"
      },
      {
        "literal": "Simret A Gebreegziabher"
      },
      {
        "literal": "Yanfang Ye"
      },
      {
        "literal": "Ziang Xiao"
      },
      {
        "literal": "Yaxing Yao"
      },
      {
        "literal": "Tianshi Li"
      },
      {
        "literal": "Toby Jia-Jun Li"
      }
    ],
    "citation-key": "arxiv_2504_17934",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "d2a55e347bc10e5571464924d9301ff2c32d5e9f1f990ca91725ec8c9f6da594",
        "submitted_at": "2025-04-24T20:51:20Z",
        "updated_at": "2025-06-05T12:40:53Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2504.17934v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2504.17934",
      "catalog_id": "arxiv:2504.17934",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-04-24",
      "identifiers": {
        "arxiv": "2504.17934"
      },
      "record_updated_at": "2025-06-05"
    },
    "genre": "preprint",
    "id": "arxiv:2504.17934",
    "issued": {
      "date-parts": [
        [
          2025,
          4,
          24
        ]
      ]
    },
    "note": "First published: 2025-04-24; Recorded arXiv version: v2; Recorded version updated: 2025-06-05T12:40:53Z.",
    "title": "Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2504.18575v3",
    "archive": "arXiv",
    "archive_location": "2504.18575",
    "author": [
      {
        "literal": "Ivan Evtimov"
      },
      {
        "literal": "Arman Zharmagambetov"
      },
      {
        "literal": "Aaron Grattafiori"
      },
      {
        "literal": "Chuan Guo"
      },
      {
        "literal": "Kamalika Chaudhuri"
      }
    ],
    "citation-key": "arxiv_2504_18575",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3a104d9076797555795766749f6b4eeec9428d0efb9340f7e55cffecd5d727b0",
        "submitted_at": "2025-04-22T17:51:03Z",
        "updated_at": "2025-05-16T22:42:29Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2504.18575v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2504.18575",
      "catalog_id": "arxiv:2504.18575",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-04-22",
      "identifiers": {
        "arxiv": "2504.18575"
      },
      "record_updated_at": "2025-05-16"
    },
    "genre": "preprint",
    "id": "arxiv:2504.18575",
    "issued": {
      "date-parts": [
        [
          2025,
          4,
          22
        ]
      ]
    },
    "note": "First published: 2025-04-22; Recorded arXiv version: v3; Recorded version updated: 2025-05-16T22:42:29Z.",
    "title": "WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2505.09875v2",
    "archive": "arXiv",
    "archive_location": "2505.09875",
    "author": [
      {
        "literal": "Shuning Zhang"
      },
      {
        "literal": "Jingruo Chen"
      },
      {
        "literal": "Zhiqi Gao"
      },
      {
        "literal": "Jiajing Gao"
      },
      {
        "literal": "Xin Yi"
      },
      {
        "literal": "Hewu Li"
      }
    ],
    "citation-key": "arxiv_2505_09875",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "63f4a505645fec16eac6b59923a6c1979c53376f19c6a4ea53c9a5d32a45e3d4",
        "submitted_at": "2025-05-15T00:42:51Z",
        "updated_at": "2025-05-16T07:01:20Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2505.09875v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.09875",
      "catalog_id": "arxiv:2505.09875",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-15",
      "identifiers": {
        "arxiv": "2505.09875"
      },
      "record_updated_at": "2025-05-16"
    },
    "genre": "preprint",
    "id": "arxiv:2505.09875",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          15
        ]
      ]
    },
    "note": "First published: 2025-05-15; Recorded arXiv version: v2; Recorded version updated: 2025-05-16T07:01:20Z.",
    "title": "Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsing",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2505.10924v4",
    "archive": "arXiv",
    "archive_location": "2505.10924",
    "author": [
      {
        "literal": "Ada Chen"
      },
      {
        "literal": "Yongjiang Wu"
      },
      {
        "literal": "Junyuan Zhang"
      },
      {
        "literal": "Jingyu Xiao"
      },
      {
        "literal": "Shu Yang"
      },
      {
        "literal": "Jen-tse Huang"
      },
      {
        "literal": "Kun Wang"
      },
      {
        "literal": "Wenxuan Wang"
      },
      {
        "literal": "Shuai Wang"
      }
    ],
    "citation-key": "arxiv_2505_10924",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e8a0890cd57809ff5e3bede6dc2b851b42fad9307a5bfa0ddd744cc2ac70d0c2",
        "submitted_at": "2025-05-16T06:56:42Z",
        "updated_at": "2026-04-29T05:56:22Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2505.10924v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.10924",
      "catalog_id": "arxiv:2505.10924",
      "catalog_kind": "survey",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-16",
      "identifiers": {
        "arxiv": "2505.10924"
      },
      "record_updated_at": "2026-04-29"
    },
    "genre": "preprint",
    "id": "arxiv:2505.10924",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          16
        ]
      ]
    },
    "note": "First published: 2025-05-16; Recorded arXiv version: v4; Recorded version updated: 2026-04-29T05:56:22Z.",
    "title": "A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2505.12842v4",
    "archive": "arXiv",
    "archive_location": "2505.12842",
    "author": [
      {
        "literal": "Zheng Wu"
      },
      {
        "literal": "Pengzhou Cheng"
      },
      {
        "literal": "Zongru Wu"
      },
      {
        "literal": "Lingzhong Dong"
      },
      {
        "literal": "Zhuosheng Zhang"
      }
    ],
    "citation-key": "arxiv_2505_12842",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "ce9570eb6a52feb220cdd2eb4c7f37a2ea63082febe48888a2654c974138a82d",
        "submitted_at": "2025-05-19T08:29:05Z",
        "updated_at": "2025-11-22T15:07:27Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2505.12842v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.12842",
      "catalog_id": "arxiv:2505.12842",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-19",
      "identifiers": {
        "arxiv": "2505.12842"
      },
      "record_updated_at": "2025-11-22"
    },
    "genre": "preprint",
    "id": "arxiv:2505.12842",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          19
        ]
      ]
    },
    "note": "First published: 2025-05-19; Recorded arXiv version: v4; Recorded version updated: 2025-11-22T15:07:27Z.",
    "title": "GEM: Gaussian Embedding Modeling for Out-of-Distribution Detection in GUI Agents",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2505.12981v2",
    "archive": "arXiv",
    "archive_location": "2505.12981",
    "author": [
      {
        "literal": "Liangxuan Wu"
      },
      {
        "literal": "Chao Wang"
      },
      {
        "literal": "Tianming Liu"
      },
      {
        "literal": "Yanjie Zhao"
      },
      {
        "literal": "Haoyu Wang"
      }
    ],
    "citation-key": "arxiv_2505_12981",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "9657a66aebe46151ed56bf76131ffe45f52459c1cf0e000907113776c91259d9",
        "submitted_at": "2025-05-19T11:17:46Z",
        "updated_at": "2025-05-20T07:02:05Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2505.12981v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.12981",
      "catalog_id": "arxiv:2505.12981",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-19",
      "identifiers": {
        "arxiv": "2505.12981"
      },
      "record_updated_at": "2025-05-20"
    },
    "genre": "preprint",
    "id": "arxiv:2505.12981",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          19
        ]
      ]
    },
    "note": "First published: 2025-05-19; Recorded arXiv version: v2; Recorded version updated: 2025-05-20T07:02:05Z.",
    "title": "From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2505.13076v1",
    "archive": "arXiv",
    "archive_location": "2505.13076",
    "author": [
      {
        "literal": "Mykyta Mudryi"
      },
      {
        "literal": "Markiyan Chaklosh"
      },
      {
        "literal": "Grzegorz Wójcik"
      }
    ],
    "citation-key": "arxiv_2505_13076",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "709ee511ffa39e805fcc58abe066cf2cec6c1707a4a9c64d9cfd107bef7544af",
        "submitted_at": "2025-05-19T13:10:29Z",
        "updated_at": "2025-05-19T13:10:29Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2505.13076v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.13076",
      "catalog_id": "arxiv:2505.13076",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-19",
      "identifiers": {
        "arxiv": "2505.13076"
      },
      "record_updated_at": "2025-05-19"
    },
    "genre": "preprint",
    "id": "arxiv:2505.13076",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          19
        ]
      ]
    },
    "note": "First published: 2025-05-19; Recorded arXiv version: v1; Recorded version updated: 2025-05-19T13:10:29Z.",
    "title": "The Hidden Dangers of Browsing AI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2505.14289v2",
    "archive": "arXiv",
    "archive_location": "2505.14289",
    "author": [
      {
        "literal": "Yijie Lu"
      },
      {
        "literal": "Manman Zhao"
      },
      {
        "literal": "Tianjie Ju"
      },
      {
        "literal": "Zihe Yan"
      },
      {
        "literal": "Xinbei Ma"
      },
      {
        "literal": "Yuan Guo"
      },
      {
        "literal": "Daizong Ding"
      },
      {
        "literal": "Gongshen Liu"
      },
      {
        "literal": "Zhuosheng Zhang"
      }
    ],
    "citation-key": "arxiv_2505_14289",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "2c256d8b0d774efdeee896860f8c504c0d1593215508fdf0881d3fd3cdc3968c",
        "submitted_at": "2025-05-20T12:41:05Z",
        "updated_at": "2026-06-05T10:24:33Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2505.14289v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.14289",
      "catalog_id": "arxiv:2505.14289",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-20",
      "identifiers": {
        "arxiv": "2505.14289"
      },
      "record_updated_at": "2026-06-05"
    },
    "genre": "preprint",
    "id": "arxiv:2505.14289",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          20
        ]
      ]
    },
    "note": "First published: 2025-05-20; Recorded arXiv version: v2; Recorded version updated: 2026-06-05T10:24:33Z.",
    "title": "EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2505.14418v3",
    "archive": "arXiv",
    "archive_location": "2505.14418",
    "author": [
      {
        "literal": "Pengzhou Cheng"
      },
      {
        "literal": "Haowen Hu"
      },
      {
        "literal": "Zheng Wu"
      },
      {
        "literal": "Zongru Wu"
      },
      {
        "literal": "Tianjie Ju"
      },
      {
        "literal": "Zhuosheng Zhang"
      },
      {
        "literal": "Gongshen Liu"
      }
    ],
    "citation-key": "arxiv_2505_14418",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "815345ed44d70f40ce9784c212d269ffaaa476e5c2ea5cdbbaaeb98d22eba3cb",
        "submitted_at": "2025-05-20T14:29:18Z",
        "updated_at": "2026-06-15T06:42:51Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2505.14418v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.14418",
      "catalog_id": "arxiv:2505.14418",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-20",
      "identifiers": {
        "arxiv": "2505.14418"
      },
      "record_updated_at": "2026-06-15"
    },
    "genre": "preprint",
    "id": "arxiv:2505.14418",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          20
        ]
      ]
    },
    "note": "First published: 2025-05-20; Recorded arXiv version: v3; Recorded version updated: 2026-06-15T06:42:51Z.",
    "title": "Hidden Ghost Hand: Unveiling Backdoor Vulnerabilities in MLLM-Powered Mobile GUI Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2505.21499v1",
    "archive": "arXiv",
    "archive_location": "2505.21499",
    "author": [
      {
        "literal": "Haowei Wang"
      },
      {
        "literal": "Junjie Wang"
      },
      {
        "literal": "Xiaojun Jia"
      },
      {
        "literal": "Rupeng Zhang"
      },
      {
        "literal": "Mingyang Li"
      },
      {
        "literal": "Zhe Liu"
      },
      {
        "literal": "Yang Liu"
      },
      {
        "literal": "Qing Wang"
      }
    ],
    "citation-key": "arxiv_2505_21499",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f8aade17e67471c87f259d49aef43b3caf764b6ac14f99e1a4114f4a25dda3d6",
        "submitted_at": "2025-05-27T17:59:05Z",
        "updated_at": "2025-05-27T17:59:05Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2505.21499v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.21499",
      "catalog_id": "arxiv:2505.21499",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-27",
      "identifiers": {
        "arxiv": "2505.21499"
      },
      "record_updated_at": "2025-05-27"
    },
    "genre": "preprint",
    "id": "arxiv:2505.21499",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          27
        ]
      ]
    },
    "note": "First published: 2025-05-27; Recorded arXiv version: v1; Recorded version updated: 2025-05-27T17:59:05Z.",
    "title": "AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2505.21936v5",
    "archive": "arXiv",
    "archive_location": "2505.21936",
    "author": [
      {
        "literal": "Zeyi Liao"
      },
      {
        "literal": "Jaylen Jones"
      },
      {
        "literal": "Linxi Jiang"
      },
      {
        "literal": "Yuting Ning"
      },
      {
        "literal": "Eric Fosler-Lussier"
      },
      {
        "literal": "Yu Su"
      },
      {
        "literal": "Zhiqiang Lin"
      },
      {
        "literal": "Huan Sun"
      }
    ],
    "citation-key": "arxiv_2505_21936",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7fe3bdb1357a375de0b1700a6eda7d5987f358bd47fddf3405c27272a3453f2f",
        "submitted_at": "2025-05-28T03:42:09Z",
        "updated_at": "2026-03-01T07:50:09Z",
        "version": 5,
        "versioned_url": "https://arxiv.org/abs/2505.21936v5"
      },
      "canonical_source_url": "https://arxiv.org/abs/2505.21936",
      "catalog_id": "arxiv:2505.21936",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-28",
      "identifiers": {
        "arxiv": "2505.21936"
      },
      "record_updated_at": "2026-03-01"
    },
    "genre": "preprint",
    "id": "arxiv:2505.21936",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          28
        ]
      ]
    },
    "note": "First published: 2025-05-28; Recorded arXiv version: v5; Recorded version updated: 2026-03-01T07:50:09Z.",
    "title": "RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments",
    "type": "article",
    "version": "5"
  },
  {
    "URL": "https://arxiv.org/abs/2506.00618v3",
    "archive": "arXiv",
    "archive_location": "2506.00618",
    "author": [
      {
        "literal": "Jingyi Yang"
      },
      {
        "literal": "Shuai Shao"
      },
      {
        "literal": "Dongrui Liu"
      },
      {
        "literal": "Jing Shao"
      }
    ],
    "citation-key": "arxiv_2506_00618",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "bb94fdba775cb0fb54b312fdff9fa71afd3aefa56b812ff31ceccad33eb5f800",
        "submitted_at": "2025-05-31T16:04:59Z",
        "updated_at": "2025-06-20T01:24:06Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2506.00618v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.00618",
      "catalog_id": "arxiv:2506.00618",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-05-31",
      "identifiers": {
        "arxiv": "2506.00618"
      },
      "record_updated_at": "2025-06-20"
    },
    "genre": "preprint",
    "id": "arxiv:2506.00618",
    "issued": {
      "date-parts": [
        [
          2025,
          5,
          31
        ]
      ]
    },
    "note": "First published: 2025-05-31; Recorded arXiv version: v3; Recorded version updated: 2025-06-20T01:24:06Z.",
    "title": "RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2506.01616v1",
    "archive": "arXiv",
    "archive_location": "2506.01616",
    "author": [
      {
        "literal": "Xiao Yang"
      },
      {
        "literal": "Jiawei Chen"
      },
      {
        "literal": "Jun Luo"
      },
      {
        "literal": "Zhengwei Fang"
      },
      {
        "literal": "Yinpeng Dong"
      },
      {
        "literal": "Hang Su"
      },
      {
        "literal": "Jun Zhu"
      }
    ],
    "citation-key": "arxiv_2506_01616",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "1ec2467703bc5d0f97ef8d207289ed56f6d12b811688d20b7833eac06038757b",
        "submitted_at": "2025-06-02T12:56:27Z",
        "updated_at": "2025-06-02T12:56:27Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2506.01616v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.01616",
      "catalog_id": "arxiv:2506.01616",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-06-02",
      "identifiers": {
        "arxiv": "2506.01616"
      },
      "record_updated_at": "2025-06-02"
    },
    "genre": "preprint",
    "id": "arxiv:2506.01616",
    "issued": {
      "date-parts": [
        [
          2025,
          6,
          2
        ]
      ]
    },
    "note": "First published: 2025-06-02; Recorded arXiv version: v1; Recorded version updated: 2025-06-02T12:56:27Z.",
    "title": "MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2506.02456v2",
    "archive": "arXiv",
    "archive_location": "2506.02456",
    "author": [
      {
        "literal": "Tri Cao"
      },
      {
        "literal": "Bennett Lim"
      },
      {
        "literal": "Yue Liu"
      },
      {
        "literal": "Yuan Sui"
      },
      {
        "literal": "Yuexin Li"
      },
      {
        "literal": "Shumin Deng"
      },
      {
        "literal": "Lin Lu"
      },
      {
        "literal": "Nay Oo"
      },
      {
        "literal": "Shuicheng Yan"
      },
      {
        "literal": "Bryan Hooi"
      }
    ],
    "citation-key": "arxiv_2506_02456",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3cd988217d1e3371bec827b472abf46c205ac407b5b60b7b581d7105f86e8bc5",
        "submitted_at": "2025-06-03T05:21:50Z",
        "updated_at": "2026-03-01T16:12:40Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2506.02456v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.02456",
      "catalog_id": "arxiv:2506.02456",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-06-03",
      "identifiers": {
        "arxiv": "2506.02456"
      },
      "record_updated_at": "2026-03-01"
    },
    "genre": "preprint",
    "id": "arxiv:2506.02456",
    "issued": {
      "date-parts": [
        [
          2025,
          6,
          3
        ]
      ]
    },
    "note": "First published: 2025-06-03; Recorded arXiv version: v2; Recorded version updated: 2026-03-01T16:12:40Z.",
    "title": "VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2506.02539v3",
    "archive": "arXiv",
    "archive_location": "2506.02539",
    "author": [
      {
        "literal": "Thong Q. Nguyen"
      },
      {
        "literal": "Shubhang Desai"
      },
      {
        "literal": "Raja Hasnain Anwar"
      },
      {
        "literal": "Firoz Shaik"
      },
      {
        "literal": "Vishwas Suryanarayanan"
      },
      {
        "literal": "Vishal Chowdhary"
      }
    ],
    "citation-key": "arxiv_2506_02539",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "401ca18cadbf38045fa20985354988571b69e2280b1a090aff0e128cdf3c70e0",
        "submitted_at": "2025-06-03T07:25:49Z",
        "updated_at": "2025-08-07T21:48:01Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2506.02539v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.02539",
      "catalog_id": "arxiv:2506.02539",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-06-03",
      "identifiers": {
        "arxiv": "2506.02539"
      },
      "record_updated_at": "2025-08-07"
    },
    "genre": "preprint",
    "id": "arxiv:2506.02539",
    "issued": {
      "date-parts": [
        [
          2025,
          6,
          3
        ]
      ]
    },
    "note": "First published: 2025-06-03; Recorded arXiv version: v3; Recorded version updated: 2025-08-07T21:48:01Z.",
    "title": "VerificAgent: Domain-Specific Memory Verification for Scalable Oversight of Aligned Computer-Use Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2506.04135v4",
    "archive": "arXiv",
    "archive_location": "2506.04135",
    "author": [
      {
        "literal": "Pei Yang"
      },
      {
        "literal": "Hai Ci"
      },
      {
        "literal": "Mike Zheng Shou"
      }
    ],
    "citation-key": "arxiv_2506_04135",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "8a4c980694819dc5eb4ff322e6a703cccfe0b1e45efb60f22b120592d03edf36",
        "submitted_at": "2025-06-04T16:26:56Z",
        "updated_at": "2025-10-18T12:11:31Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2506.04135v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.04135",
      "catalog_id": "arxiv:2506.04135",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-06-04",
      "identifiers": {
        "arxiv": "2506.04135"
      },
      "record_updated_at": "2025-10-18"
    },
    "genre": "preprint",
    "id": "arxiv:2506.04135",
    "issued": {
      "date-parts": [
        [
          2025,
          6,
          4
        ]
      ]
    },
    "note": "First published: 2025-06-04; Recorded arXiv version: v4; Recorded version updated: 2025-10-18T12:11:31Z.",
    "title": "macOSWorld: A Multilingual Interactive Benchmark for GUI Agents",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2506.13205v6",
    "archive": "arXiv",
    "archive_location": "2506.13205",
    "author": [
      {
        "literal": "Xuan Wang"
      },
      {
        "literal": "Siyuan Liang"
      },
      {
        "literal": "Zhe Liu"
      },
      {
        "literal": "Yi Yu"
      },
      {
        "literal": "Aishan Liu"
      },
      {
        "literal": "Yuliang Lu"
      },
      {
        "literal": "Xitong Gao"
      },
      {
        "literal": "Ee-Chien Chang"
      }
    ],
    "citation-key": "arxiv_2506_13205",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "390304ce515886fa15fb8cd74d8b2df161a75b9adc0f4d2fad1f65976c6a6ce7",
        "submitted_at": "2025-06-16T08:09:32Z",
        "updated_at": "2025-09-05T14:19:03Z",
        "version": 6,
        "versioned_url": "https://arxiv.org/abs/2506.13205v6"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.13205",
      "catalog_id": "arxiv:2506.13205",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-06-16",
      "identifiers": {
        "arxiv": "2506.13205"
      },
      "record_updated_at": "2025-09-05"
    },
    "genre": "preprint",
    "id": "arxiv:2506.13205",
    "issued": {
      "date-parts": [
        [
          2025,
          6,
          16
        ]
      ]
    },
    "note": "First published: 2025-06-16; Recorded arXiv version: v6; Recorded version updated: 2025-09-05T14:19:03Z.",
    "title": "Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents",
    "type": "article",
    "version": "6"
  },
  {
    "URL": "https://arxiv.org/abs/2506.14866v2",
    "archive": "arXiv",
    "archive_location": "2506.14866",
    "author": [
      {
        "literal": "Thomas Kuntz"
      },
      {
        "literal": "Agatha Duzan"
      },
      {
        "literal": "Hao Zhao"
      },
      {
        "literal": "Francesco Croce"
      },
      {
        "literal": "Zico Kolter"
      },
      {
        "literal": "Nicolas Flammarion"
      },
      {
        "literal": "Maksym Andriushchenko"
      }
    ],
    "citation-key": "arxiv_2506_14866",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f551b861012fc4eddbf010a619bc65e77b524b05958761b738a88bcae377e9a9",
        "submitted_at": "2025-06-17T17:59:31Z",
        "updated_at": "2025-10-29T10:34:04Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2506.14866v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.14866",
      "catalog_id": "arxiv:2506.14866",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-06-17",
      "identifiers": {
        "arxiv": "2506.14866"
      },
      "record_updated_at": "2025-10-29"
    },
    "genre": "preprint",
    "id": "arxiv:2506.14866",
    "issued": {
      "date-parts": [
        [
          2025,
          6,
          17
        ]
      ]
    },
    "note": "First published: 2025-06-17; Recorded arXiv version: v2; Recorded version updated: 2025-10-29T10:34:04Z.",
    "title": "OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2506.17318v1",
    "archive": "arXiv",
    "archive_location": "2506.17318",
    "author": [
      {
        "literal": "Atharv Singh Patlan"
      },
      {
        "literal": "Ashwin Hebbar"
      },
      {
        "literal": "Pramod Viswanath"
      },
      {
        "literal": "Prateek Mittal"
      }
    ],
    "citation-key": "arxiv_2506_17318",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "2d346389013d465f578417a7fca80ee527f5e7b582e93eb73dae148f11479971",
        "submitted_at": "2025-06-18T14:29:02Z",
        "updated_at": "2025-06-18T14:29:02Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2506.17318v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2506.17318",
      "catalog_id": "arxiv:2506.17318",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-06-18",
      "identifiers": {
        "arxiv": "2506.17318"
      },
      "record_updated_at": "2025-06-18"
    },
    "genre": "preprint",
    "id": "arxiv:2506.17318",
    "issued": {
      "date-parts": [
        [
          2025,
          6,
          18
        ]
      ]
    },
    "note": "First published: 2025-06-18; Recorded arXiv version: v1; Recorded version updated: 2025-06-18T14:29:02Z.",
    "title": "Context manipulation attacks : Web agents are susceptible to corrupted memory",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2507.00841v1",
    "archive": "arXiv",
    "archive_location": "2507.00841",
    "author": [
      {
        "literal": "Siyuan Liang"
      },
      {
        "literal": "Tianmeng Fang"
      },
      {
        "literal": "Zhe Liu"
      },
      {
        "literal": "Aishan Liu"
      },
      {
        "literal": "Yan Xiao"
      },
      {
        "literal": "Jinyuan He"
      },
      {
        "literal": "Ee-Chien Chang"
      },
      {
        "literal": "Xiaochun Cao"
      }
    ],
    "citation-key": "arxiv_2507_00841",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "78dd523ad6123fe1ee5164685a3853719c9a4442adac8661050f147ff6a9f619",
        "submitted_at": "2025-07-01T15:10:00Z",
        "updated_at": "2025-07-01T15:10:00Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2507.00841v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.00841",
      "catalog_id": "arxiv:2507.00841",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-01",
      "identifiers": {
        "arxiv": "2507.00841"
      },
      "record_updated_at": "2025-07-01"
    },
    "genre": "preprint",
    "id": "arxiv:2507.00841",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          1
        ]
      ]
    },
    "note": "First published: 2025-07-01; Recorded arXiv version: v1; Recorded version updated: 2025-07-01T15:10:00Z.",
    "title": "SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2507.04227v2",
    "archive": "arXiv",
    "archive_location": "2507.04227",
    "author": [
      {
        "literal": "Guohong Liu"
      },
      {
        "literal": "Jialei Ye"
      },
      {
        "literal": "Jiacheng Liu"
      },
      {
        "literal": "Yuanchun Li"
      },
      {
        "literal": "Wei Liu"
      },
      {
        "literal": "Pengzhi Gao"
      },
      {
        "literal": "Jian Luan"
      },
      {
        "literal": "Yunxin Liu"
      }
    ],
    "citation-key": "arxiv_2507_04227",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "85ebf8b3b5916e66e4b4221c73bb29519156c41e8d1695bcc46d275dd50cf58d",
        "submitted_at": "2025-07-06T03:31:36Z",
        "updated_at": "2026-04-14T14:47:25Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2507.04227v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.04227",
      "catalog_id": "arxiv:2507.04227",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-06",
      "identifiers": {
        "arxiv": "2507.04227"
      },
      "record_updated_at": "2026-04-14"
    },
    "genre": "preprint",
    "id": "arxiv:2507.04227",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          6
        ]
      ]
    },
    "note": "First published: 2025-07-06; Recorded arXiv version: v2; Recorded version updated: 2026-04-14T14:47:25Z.",
    "title": "Mobile GUI Agents under Real-world Threats: Are We There Yet?",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2507.05445v1",
    "archive": "arXiv",
    "archive_location": "2507.05445",
    "author": [
      {
        "literal": "Daniel Jones"
      },
      {
        "literal": "Giorgio Severi"
      },
      {
        "literal": "Martin Pouliot"
      },
      {
        "literal": "Gary Lopez"
      },
      {
        "literal": "Joris de Gruyter"
      },
      {
        "literal": "Santiago Zanella-Beguelin"
      },
      {
        "literal": "Justin Song"
      },
      {
        "literal": "Blake Bullwinkel"
      },
      {
        "literal": "Pamela Cortez"
      },
      {
        "literal": "Amanda Minnich"
      }
    ],
    "citation-key": "arxiv_2507_05445",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3ad2f299303076e3474cf247cf25d20ba63b1f1aa8601ab74243c00896bb56e4",
        "submitted_at": "2025-07-07T19:50:21Z",
        "updated_at": "2025-07-07T19:50:21Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2507.05445v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.05445",
      "catalog_id": "arxiv:2507.05445",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-07",
      "identifiers": {
        "arxiv": "2507.05445"
      },
      "record_updated_at": "2025-07-07"
    },
    "genre": "preprint",
    "id": "arxiv:2507.05445",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          7
        ]
      ]
    },
    "note": "First published: 2025-07-07; Recorded arXiv version: v1; Recorded version updated: 2025-07-07T19:50:21Z.",
    "title": "A Systematization of Security Vulnerabilities in Computer Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2507.06134v2",
    "archive": "arXiv",
    "archive_location": "2507.06134",
    "author": [
      {
        "literal": "Sanidhya Vijayvargiya"
      },
      {
        "literal": "Aditya Bharat Soni"
      },
      {
        "literal": "Xuhui Zhou"
      },
      {
        "literal": "Zora Zhiruo Wang"
      },
      {
        "literal": "Nouha Dziri"
      },
      {
        "literal": "Graham Neubig"
      },
      {
        "literal": "Maarten Sap"
      }
    ],
    "citation-key": "arxiv_2507_06134",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "db56d120a7f04f9181a107bcd75c61a3eb3ac36939e2a0517d622332c70f3eac",
        "submitted_at": "2025-07-08T16:18:54Z",
        "updated_at": "2026-02-16T22:34:53Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2507.06134v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.06134",
      "catalog_id": "arxiv:2507.06134",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-08",
      "identifiers": {
        "arxiv": "2507.06134"
      },
      "record_updated_at": "2026-02-16"
    },
    "genre": "preprint",
    "id": "arxiv:2507.06134",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          8
        ]
      ]
    },
    "note": "First published: 2025-07-08; Recorded arXiv version: v2; Recorded version updated: 2026-02-16T22:34:53Z.",
    "title": "OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2507.06899v2",
    "archive": "arXiv",
    "archive_location": "2507.06899",
    "author": [
      {
        "literal": "Ziang Ye"
      },
      {
        "literal": "Yang Zhang"
      },
      {
        "literal": "Wentao Shi"
      },
      {
        "literal": "Xiaoyu You"
      },
      {
        "literal": "Fuli Feng"
      },
      {
        "literal": "Tat-Seng Chua"
      }
    ],
    "citation-key": "arxiv_2507_06899",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "010a3a54ba37417c97e52434211375447418dd2e7ce1da6c339532534f0a920e",
        "submitted_at": "2025-07-09T14:36:00Z",
        "updated_at": "2025-09-24T14:33:17Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2507.06899v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.06899",
      "catalog_id": "arxiv:2507.06899",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-09",
      "identifiers": {
        "arxiv": "2507.06899"
      },
      "record_updated_at": "2025-09-24"
    },
    "genre": "preprint",
    "id": "arxiv:2507.06899",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          9
        ]
      ]
    },
    "note": "First published: 2025-07-09; Recorded arXiv version: v2; Recorded version updated: 2025-09-24T14:33:17Z.",
    "title": "VisualTrap: A Stealthy Backdoor Attack on GUI Agents via Visual Grounding Manipulation",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2507.10610v3",
    "archive": "arXiv",
    "archive_location": "2507.10610",
    "author": [
      {
        "literal": "Zihe Yan"
      },
      {
        "literal": "Jiaping Gui"
      },
      {
        "literal": "Zhuosheng Zhang"
      },
      {
        "literal": "Gongshen Liu"
      }
    ],
    "citation-key": "arxiv_2507_10610",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5db0008a053357b6dba38b55f29642ddbcbf38761c64684fd1725183ff8e56d3",
        "submitted_at": "2025-07-13T08:36:09Z",
        "updated_at": "2026-04-07T11:46:55Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2507.10610v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.10610",
      "catalog_id": "arxiv:2507.10610",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-13",
      "identifiers": {
        "arxiv": "2507.10610"
      },
      "record_updated_at": "2026-04-07"
    },
    "genre": "preprint",
    "id": "arxiv:2507.10610",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          13
        ]
      ]
    },
    "note": "First published: 2025-07-13; Recorded arXiv version: v3; Recorded version updated: 2026-04-07T11:46:55Z.",
    "title": "LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2507.12844v2",
    "archive": "arXiv",
    "archive_location": "2507.12844",
    "author": [
      {
        "literal": "Joel Nitu"
      },
      {
        "literal": "Heidrun Mühle"
      },
      {
        "literal": "Andreas Stöckl"
      }
    ],
    "citation-key": "arxiv_2507_12844",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "9fe2d9d877a0666d46a065bd8b673c282c879ef0a2620e3b267793a91858b519",
        "submitted_at": "2025-07-17T07:10:27Z",
        "updated_at": "2025-11-12T13:34:24Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2507.12844v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.12844",
      "catalog_id": "arxiv:2507.12844",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-17",
      "identifiers": {
        "arxiv": "2507.12844"
      },
      "record_updated_at": "2025-11-12"
    },
    "genre": "preprint",
    "id": "arxiv:2507.12844",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          17
        ]
      ]
    },
    "note": "First published: 2025-07-17; Recorded arXiv version: v2; Recorded version updated: 2025-11-12T13:34:24Z.",
    "title": "Machine-Readable Ads: Accessibility and Trust Patterns for AI Web Agents interacting with Online Advertisements",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2507.14293v1",
    "archive": "arXiv",
    "archive_location": "2507.14293",
    "author": [
      {
        "literal": "Boyuan Zheng"
      },
      {
        "literal": "Zeyi Liao"
      },
      {
        "literal": "Scott Salisbury"
      },
      {
        "literal": "Zeyuan Liu"
      },
      {
        "literal": "Michael Lin"
      },
      {
        "literal": "Qinyuan Zheng"
      },
      {
        "literal": "Zifan Wang"
      },
      {
        "literal": "Xiang Deng"
      },
      {
        "literal": "Dawn Song"
      },
      {
        "literal": "Huan Sun"
      },
      {
        "literal": "Yu Su"
      }
    ],
    "citation-key": "arxiv_2507_14293",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a8f082fd40174e01f40e97d64f7aa3d90e5f76e831df8f93afdc21aa2e35bfd5",
        "submitted_at": "2025-07-18T18:06:27Z",
        "updated_at": "2025-07-18T18:06:27Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2507.14293v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.14293",
      "catalog_id": "arxiv:2507.14293",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-18",
      "identifiers": {
        "arxiv": "2507.14293"
      },
      "record_updated_at": "2025-07-18"
    },
    "genre": "preprint",
    "id": "arxiv:2507.14293",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          18
        ]
      ]
    },
    "note": "First published: 2025-07-18; Recorded arXiv version: v1; Recorded version updated: 2025-07-18T18:06:27Z.",
    "title": "WebGuard: Building a Generalizable Guardrail for Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2507.14799v1",
    "archive": "arXiv",
    "archive_location": "2507.14799",
    "author": [
      {
        "literal": "Sam Johnson"
      },
      {
        "literal": "Viet Pham"
      },
      {
        "literal": "Thai Le"
      }
    ],
    "citation-key": "arxiv_2507_14799",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "79963ac401384f0c23ecc65d58e616daacc93103456ceb39241dcd6d71c6591c",
        "submitted_at": "2025-07-20T03:10:13Z",
        "updated_at": "2025-07-20T03:10:13Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2507.14799v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.14799",
      "catalog_id": "arxiv:2507.14799",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-20",
      "identifiers": {
        "arxiv": "2507.14799"
      },
      "record_updated_at": "2025-07-20"
    },
    "genre": "preprint",
    "id": "arxiv:2507.14799",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          20
        ]
      ]
    },
    "note": "First published: 2025-07-20; Recorded arXiv version: v1; Recorded version updated: 2025-07-20T03:10:13Z.",
    "title": "Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2507.22358v1",
    "archive": "arXiv",
    "archive_location": "2507.22358",
    "author": [
      {
        "literal": "Hussein Mozannar"
      },
      {
        "literal": "Gagan Bansal"
      },
      {
        "literal": "Cheng Tan"
      },
      {
        "literal": "Adam Fourney"
      },
      {
        "literal": "Victor Dibia"
      },
      {
        "literal": "Jingya Chen"
      },
      {
        "literal": "Jack Gerrits"
      },
      {
        "literal": "Tyler Payne"
      },
      {
        "literal": "Matheus Kunzler Maldaner"
      },
      {
        "literal": "Madeleine Grunde-McLaughlin"
      },
      {
        "literal": "Eric Zhu"
      },
      {
        "literal": "Griffin Bassman"
      },
      {
        "literal": "Jacob Alber"
      },
      {
        "literal": "Peter Chang"
      },
      {
        "literal": "Ricky Loynd"
      },
      {
        "literal": "Friederike Niedtner"
      },
      {
        "literal": "Ece Kamar"
      },
      {
        "literal": "Maya Murad"
      },
      {
        "literal": "Rafah Hosn"
      },
      {
        "literal": "Saleema Amershi"
      }
    ],
    "citation-key": "arxiv_2507_22358",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "c9416ede89036d640412496b5f0def218b69271c5f2449689d4e4afacb43c556",
        "submitted_at": "2025-07-30T03:49:14Z",
        "updated_at": "2025-07-30T03:49:14Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2507.22358v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2507.22358",
      "catalog_id": "arxiv:2507.22358",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-07-30",
      "identifiers": {
        "arxiv": "2507.22358"
      },
      "record_updated_at": "2025-07-30"
    },
    "genre": "preprint",
    "id": "arxiv:2507.22358",
    "issued": {
      "date-parts": [
        [
          2025,
          7,
          30
        ]
      ]
    },
    "note": "First published: 2025-07-30; Recorded arXiv version: v1; Recorded version updated: 2025-07-30T03:49:14Z.",
    "title": "Magentic-UI: Towards Human-in-the-loop Agentic Systems",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2508.09057v2",
    "archive": "arXiv",
    "archive_location": "2508.09057",
    "author": [
      {
        "literal": "Zeyu Huang"
      },
      {
        "literal": "Juyuan Wang"
      },
      {
        "literal": "Longfeng Chen"
      },
      {
        "literal": "Boyi Xiao"
      },
      {
        "literal": "Leng Cai"
      },
      {
        "literal": "Yawen Zeng"
      },
      {
        "literal": "Jin Xu"
      }
    ],
    "citation-key": "arxiv_2508_09057",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "d4efa329c3b106219c9b25f675be0c561743085ac999d2964458a5f22ff6e62f",
        "submitted_at": "2025-08-12T16:18:30Z",
        "updated_at": "2025-08-14T16:36:45Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2508.09057v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2508.09057",
      "catalog_id": "arxiv:2508.09057",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-08-12",
      "identifiers": {
        "arxiv": "2508.09057"
      },
      "record_updated_at": "2025-08-14"
    },
    "genre": "preprint",
    "id": "arxiv:2508.09057",
    "issued": {
      "date-parts": [
        [
          2025,
          8,
          12
        ]
      ]
    },
    "note": "First published: 2025-08-12; Recorded arXiv version: v2; Recorded version updated: 2025-08-14T16:36:45Z.",
    "title": "MVISU-Bench: Benchmarking Mobile Agents for Real-World Tasks by Multi-App, Vague, Interactive, Single-App and Unethical Instructions",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2508.15832v2",
    "archive": "arXiv",
    "archive_location": "2508.15832",
    "author": [
      {
        "literal": "Xianren Zhang"
      },
      {
        "literal": "Shreyas Prasad"
      },
      {
        "literal": "Di Wang"
      },
      {
        "literal": "Qiuhai Zeng"
      },
      {
        "literal": "Suhang Wang"
      },
      {
        "literal": "Wenbo Yan"
      },
      {
        "literal": "Mat Hans"
      }
    ],
    "citation-key": "arxiv_2508_15832",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "6c8336a707723227a9d651a3e9347e45907f28ed7421b577761ed57f7d70593d",
        "submitted_at": "2025-08-18T21:58:43Z",
        "updated_at": "2026-04-21T00:38:54Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2508.15832v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2508.15832",
      "catalog_id": "arxiv:2508.15832",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-08-18",
      "identifiers": {
        "arxiv": "2508.15832"
      },
      "record_updated_at": "2026-04-21"
    },
    "genre": "preprint",
    "id": "arxiv:2508.15832",
    "issued": {
      "date-parts": [
        [
          2025,
          8,
          18
        ]
      ]
    },
    "note": "First published: 2025-08-18; Recorded arXiv version: v2; Recorded version updated: 2026-04-21T00:38:54Z.",
    "title": "A Functionality-Grounded Benchmark for Evaluating Web Agents in E-commerce Domains",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2508.19493v2",
    "archive": "arXiv",
    "archive_location": "2508.19493",
    "author": [
      {
        "literal": "Zhixin Lin"
      },
      {
        "literal": "Jungang Li"
      },
      {
        "literal": "Shidong Pan"
      },
      {
        "literal": "Yibo Shi"
      },
      {
        "literal": "Yue Yao"
      },
      {
        "literal": "Dongliang Xu"
      }
    ],
    "citation-key": "arxiv_2508_19493",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "815c8c1fa5993d2ef58798abd43a2b8945c476c27c777d30c1cbfacadd87af84",
        "submitted_at": "2025-08-27T00:41:28Z",
        "updated_at": "2025-09-03T07:48:34Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2508.19493v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2508.19493",
      "catalog_id": "arxiv:2508.19493",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-08-27",
      "identifiers": {
        "arxiv": "2508.19493"
      },
      "record_updated_at": "2025-09-03"
    },
    "genre": "preprint",
    "id": "arxiv:2508.19493",
    "issued": {
      "date-parts": [
        [
          2025,
          8,
          27
        ]
      ]
    },
    "note": "First published: 2025-08-27; Recorded arXiv version: v2; Recorded version updated: 2025-09-03T07:48:34Z.",
    "title": "Mind the Third Eye! Benchmarking Privacy Awareness in MLLM-powered Smartphone Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2509.01619v1",
    "archive": "arXiv",
    "archive_location": "2509.01619",
    "author": [
      {
        "literal": "Abhinav Kumar"
      },
      {
        "literal": "Jaechul Roh"
      },
      {
        "literal": "Ali Naseh"
      },
      {
        "literal": "Amir Houmansadr"
      },
      {
        "literal": "Eugene Bagdasarian"
      }
    ],
    "citation-key": "arxiv_2509_01619",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "0f6ff68c59cede9cf59c039416a87ea39b926e3a3179b9f81af9354767befb93",
        "submitted_at": "2025-09-01T16:56:16Z",
        "updated_at": "2025-09-01T16:56:16Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2509.01619v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.01619",
      "catalog_id": "arxiv:2509.01619",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2025-09-01",
      "identifiers": {
        "arxiv": "2509.01619"
      },
      "record_updated_at": "2025-09-01"
    },
    "genre": "preprint",
    "id": "arxiv:2509.01619",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          1
        ]
      ]
    },
    "note": "First published: 2025-09-01; Recorded arXiv version: v1; Recorded version updated: 2025-09-01T16:56:16Z.",
    "title": "Throttling Web Agents Using Reasoning Gates",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2509.07553v3",
    "archive": "arXiv",
    "archive_location": "2509.07553",
    "author": [
      {
        "literal": "Zheng Wu"
      },
      {
        "literal": "Heyuan Huang"
      },
      {
        "literal": "Xingyu Lou"
      },
      {
        "literal": "Xiangmou Qu"
      },
      {
        "literal": "Pengzhou Cheng"
      },
      {
        "literal": "Zongru Wu"
      },
      {
        "literal": "Weiwen Liu"
      },
      {
        "literal": "Weinan Zhang"
      },
      {
        "literal": "Jun Wang"
      },
      {
        "literal": "Zhaoxiang Wang"
      },
      {
        "literal": "Zhuosheng Zhang"
      }
    ],
    "citation-key": "arxiv_2509_07553",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3bd6b323a376d7606b8c5ec0615b992f47a388cbd3604191241f6a0a9b2cce6e",
        "submitted_at": "2025-09-09T09:46:01Z",
        "updated_at": "2026-04-03T02:36:28Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2509.07553v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.07553",
      "catalog_id": "arxiv:2509.07553",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-09",
      "identifiers": {
        "arxiv": "2509.07553"
      },
      "record_updated_at": "2026-04-03"
    },
    "genre": "preprint",
    "id": "arxiv:2509.07553",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          9
        ]
      ]
    },
    "note": "First published: 2025-09-09; Recorded arXiv version: v3; Recorded version updated: 2026-04-03T02:36:28Z.",
    "title": "VeriOS: Query-Driven Proactive Human-Agent-GUI Interaction for Trustworthy OS Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2509.07764v1",
    "archive": "arXiv",
    "archive_location": "2509.07764",
    "author": [
      {
        "literal": "Haitao Hu"
      },
      {
        "literal": "Peng Chen"
      },
      {
        "literal": "Yanpeng Zhao"
      },
      {
        "literal": "Yuqi Chen"
      }
    ],
    "citation-key": "arxiv_2509_07764",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "ae582aceb31075c460a9e4a6dce9978574c3e0ada731b26c13738a4a4fafcc32",
        "submitted_at": "2025-09-09T13:59:00Z",
        "updated_at": "2025-09-09T13:59:00Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2509.07764v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.07764",
      "catalog_id": "arxiv:2509.07764",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-09",
      "identifiers": {
        "arxiv": "2509.07764"
      },
      "record_updated_at": "2025-09-09"
    },
    "genre": "preprint",
    "id": "arxiv:2509.07764",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          9
        ]
      ]
    },
    "note": "First published: 2025-09-09; Recorded arXiv version: v1; Recorded version updated: 2025-09-09T13:59:00Z.",
    "title": "AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2509.10723v1",
    "archive": "arXiv",
    "archive_location": "2509.10723",
    "author": [
      {
        "literal": "Jingyu Tang"
      },
      {
        "literal": "Chaoran Chen"
      },
      {
        "literal": "Jiawen Li"
      },
      {
        "literal": "Zhiping Zhang"
      },
      {
        "literal": "Bingcan Guo"
      },
      {
        "literal": "Ibrahim Khalilov"
      },
      {
        "literal": "Simret Araya Gebreegziabher"
      },
      {
        "literal": "Bingsheng Yao"
      },
      {
        "literal": "Dakuo Wang"
      },
      {
        "literal": "Yanfang Ye"
      },
      {
        "literal": "Tianshi Li"
      },
      {
        "literal": "Ziang Xiao"
      },
      {
        "literal": "Yaxing Yao"
      },
      {
        "literal": "Toby Jia-Jun Li"
      }
    ],
    "citation-key": "arxiv_2509_10723",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "247ed053a4c8f62106d9f8e9af0801d94265ed712f4ae9f095fd8aaccbe33c59",
        "submitted_at": "2025-09-12T22:26:31Z",
        "updated_at": "2025-09-12T22:26:31Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2509.10723v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.10723",
      "catalog_id": "arxiv:2509.10723",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-12",
      "identifiers": {
        "arxiv": "2509.10723"
      },
      "record_updated_at": "2025-09-12"
    },
    "genre": "preprint",
    "id": "arxiv:2509.10723",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          12
        ]
      ]
    },
    "note": "First published: 2025-09-12; Recorded arXiv version: v1; Recorded version updated: 2025-09-12T22:26:31Z.",
    "title": "Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2509.11250v3",
    "archive": "arXiv",
    "archive_location": "2509.11250",
    "author": [
      {
        "literal": "Yitong Zhang"
      },
      {
        "literal": "Ximo Li"
      },
      {
        "literal": "Liyi Cai"
      },
      {
        "literal": "Jia Li"
      }
    ],
    "citation-key": "arxiv_2509_11250",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "9ab96edd8e52b3a490455b46878c92c23d15c0f9e105e71dbd6848e058da42ec",
        "submitted_at": "2025-09-14T12:47:54Z",
        "updated_at": "2026-08-24T12:04:58Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2509.11250v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.11250",
      "catalog_id": "arxiv:2509.11250",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-14",
      "identifiers": {
        "arxiv": "2509.11250"
      },
      "record_updated_at": "2026-08-24"
    },
    "genre": "preprint",
    "id": "arxiv:2509.11250",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          14
        ]
      ]
    },
    "note": "First published: 2025-09-14; Recorded arXiv version: v3; Recorded version updated: 2026-08-24T12:04:58Z.",
    "title": "Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2509.11939v1",
    "archive": "arXiv",
    "archive_location": "2509.11939",
    "author": [
      {
        "literal": "Shuning Zhang"
      },
      {
        "literal": "Yutong Jiang"
      },
      {
        "literal": "Rongjun Ma"
      },
      {
        "literal": "Yuting Yang"
      },
      {
        "literal": "Mingyao Xu"
      },
      {
        "literal": "Zhixin Huang"
      },
      {
        "literal": "Xin Yi"
      },
      {
        "literal": "Hewu Li"
      }
    ],
    "citation-key": "arxiv_2509_11939",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f37ebc10535f96d17d28990e608a1f2eb6cc004f40d58b3288c4a81d781160ea",
        "submitted_at": "2025-09-15T13:58:52Z",
        "updated_at": "2025-09-15T13:58:52Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2509.11939v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.11939",
      "catalog_id": "arxiv:2509.11939",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-15",
      "identifiers": {
        "arxiv": "2509.11939"
      },
      "record_updated_at": "2025-09-15"
    },
    "genre": "preprint",
    "id": "arxiv:2509.11939",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          15
        ]
      ]
    },
    "note": "First published: 2025-09-15; Recorded arXiv version: v1; Recorded version updated: 2025-09-15T13:58:52Z.",
    "title": "PrivWeb: Unobtrusive and Content-aware Privacy Protection For Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2509.13704v1",
    "archive": "arXiv",
    "archive_location": "2509.13704",
    "author": [
      {
        "literal": "Liangtao Lin"
      },
      {
        "literal": "Zhaomeng Zhu"
      },
      {
        "literal": "Tianwei Zhang"
      },
      {
        "literal": "Yonggang Wen"
      }
    ],
    "citation-key": "arxiv_2509_13704",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "2c1a4019df77278943829e16b155771abb1c8ca30726044cf5969227e0437f5f",
        "submitted_at": "2025-09-17T05:14:11Z",
        "updated_at": "2025-09-17T05:14:11Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2509.13704v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.13704",
      "catalog_id": "arxiv:2509.13704",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-17",
      "identifiers": {
        "arxiv": "2509.13704"
      },
      "record_updated_at": "2025-09-17"
    },
    "genre": "preprint",
    "id": "arxiv:2509.13704",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          17
        ]
      ]
    },
    "note": "First published: 2025-09-17; Recorded arXiv version: v1; Recorded version updated: 2025-09-17T05:14:11Z.",
    "title": "InfraMind: A Novel Exploration-based GUI Agentic Framework for Mission-critical Industrial Management",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2509.21782v2",
    "archive": "arXiv",
    "archive_location": "2509.21782",
    "author": [
      {
        "literal": "Junliang Liu"
      },
      {
        "literal": "Jingyu Xiao"
      },
      {
        "literal": "Wenxin Tang"
      },
      {
        "literal": "Zhixian Wang"
      },
      {
        "literal": "Zipeng Xie"
      },
      {
        "literal": "Wenxuan Wang"
      },
      {
        "literal": "Minrui Zhang"
      },
      {
        "literal": "Shuanghe Yu"
      }
    ],
    "citation-key": "arxiv_2509_21782",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "8fed6f081e0330c54a304c79e8a4183865aae48f0e944545029d3de9852f8028",
        "submitted_at": "2025-09-26T02:38:14Z",
        "updated_at": "2026-03-04T16:31:39Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2509.21782v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.21782",
      "catalog_id": "arxiv:2509.21782",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-26",
      "identifiers": {
        "arxiv": "2509.21782"
      },
      "record_updated_at": "2026-03-04"
    },
    "genre": "preprint",
    "id": "arxiv:2509.21782",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          26
        ]
      ]
    },
    "note": "First published: 2025-09-26; Recorded arXiv version: v2; Recorded version updated: 2026-03-04T16:31:39Z.",
    "title": "Benchmarking MLLM-based Web Understanding: Reasoning, Robustness and Safety",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2509.22256v4",
    "archive": "arXiv",
    "archive_location": "2509.22256",
    "author": [
      {
        "literal": "Haochen Gong"
      },
      {
        "literal": "Chenxiao Li"
      },
      {
        "literal": "Rui Chang"
      },
      {
        "literal": "Wenbo Shen"
      }
    ],
    "citation-key": "arxiv_2509_22256",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "922c1d9b60db7c17b9019a320a4cfc2dd4eac325fd946f024ca82d43785f5eba",
        "submitted_at": "2025-09-26T12:19:27Z",
        "updated_at": "2026-01-14T06:07:30Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2509.22256v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2509.22256",
      "catalog_id": "arxiv:2509.22256",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-09-26",
      "identifiers": {
        "arxiv": "2509.22256"
      },
      "record_updated_at": "2026-01-14"
    },
    "genre": "preprint",
    "id": "arxiv:2509.22256",
    "issued": {
      "date-parts": [
        [
          2025,
          9,
          26
        ]
      ]
    },
    "note": "First published: 2025-09-26; Recorded arXiv version: v4; Recorded version updated: 2026-01-14T06:07:30Z.",
    "title": "Secure and Efficient Access Control for Computer-Use Agents via Context Space",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2510.01354v2",
    "archive": "arXiv",
    "archive_location": "2510.01354",
    "author": [
      {
        "literal": "Yinuo Liu"
      },
      {
        "literal": "Xilong Wang"
      },
      {
        "literal": "Ruohan Xu"
      },
      {
        "literal": "Yuqi Jia"
      },
      {
        "literal": "Neil Zhenqiang Gong"
      }
    ],
    "citation-key": "arxiv_2510_01354",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e997e87268cfe66869bf19fdc8445e5487c980736a63cbe76f779bd1f142c396",
        "submitted_at": "2025-10-01T18:34:06Z",
        "updated_at": "2026-09-23T16:44:27Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2510.01354v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.01354",
      "catalog_id": "arxiv:2510.01354",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-01",
      "identifiers": {
        "arxiv": "2510.01354"
      },
      "record_updated_at": "2026-09-23"
    },
    "genre": "preprint",
    "id": "arxiv:2510.01354",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          1
        ]
      ]
    },
    "note": "First published: 2025-10-01; Recorded arXiv version: v2; Recorded version updated: 2026-09-23T16:44:27Z.",
    "title": "WAInjectBench: Benchmarking Prompt Injection Detections for Web Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2510.01670v1",
    "archive": "arXiv",
    "archive_location": "2510.01670",
    "author": [
      {
        "literal": "Erfan Shayegani"
      },
      {
        "literal": "Keegan Hines"
      },
      {
        "literal": "Yue Dong"
      },
      {
        "literal": "Nael Abu-Ghazaleh"
      },
      {
        "literal": "Roman Lutz"
      },
      {
        "literal": "Spencer Whitehead"
      },
      {
        "literal": "Vidhisha Balachandran"
      },
      {
        "literal": "Besmira Nushi"
      },
      {
        "literal": "Vibhav Vineet"
      }
    ],
    "citation-key": "arxiv_2510_01670",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a6426fa5eeb3dfafef30e47dd46a6a43dff3e24bf0ff485b7d10ab9efe133f94",
        "submitted_at": "2025-10-02T04:52:15Z",
        "updated_at": "2025-10-02T04:52:15Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2510.01670v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.01670",
      "catalog_id": "arxiv:2510.01670",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-02",
      "identifiers": {
        "arxiv": "2510.01670"
      },
      "record_updated_at": "2025-10-02"
    },
    "genre": "preprint",
    "id": "arxiv:2510.01670",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          2
        ]
      ]
    },
    "note": "First published: 2025-10-02; Recorded arXiv version: v1; Recorded version updated: 2025-10-02T04:52:15Z.",
    "title": "Just Do It!? Computer-Use Agents Exhibit Blind Goal-Directedness",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2510.07809v4",
    "archive": "arXiv",
    "archive_location": "2510.07809",
    "author": [
      {
        "literal": "Renhua Ding"
      },
      {
        "literal": "Xiao Yang"
      },
      {
        "literal": "Zhengwei Fang"
      },
      {
        "literal": "Jun Luo"
      },
      {
        "literal": "Kun He"
      },
      {
        "literal": "Jun Zhu"
      }
    ],
    "citation-key": "arxiv_2510_07809",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e80999148931b7485d51ef87887d06240f813747a9739282ed0daf53a912f9f6",
        "submitted_at": "2025-10-09T05:34:57Z",
        "updated_at": "2026-04-09T01:41:48Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2510.07809v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.07809",
      "catalog_id": "arxiv:2510.07809",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-09",
      "identifiers": {
        "arxiv": "2510.07809"
      },
      "record_updated_at": "2026-04-09"
    },
    "genre": "preprint",
    "id": "arxiv:2510.07809",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          9
        ]
      ]
    },
    "note": "First published: 2025-10-09; Recorded arXiv version: v4; Recorded version updated: 2026-04-09T01:41:48Z.",
    "title": "Invisible to Humans, Triggered by Agents: Stealthy Jailbreak Attacks on Mobile Vision-Language Agents",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2510.10073v2",
    "archive": "arXiv",
    "archive_location": "2510.10073",
    "author": [
      {
        "literal": "Zonghao Ying"
      },
      {
        "literal": "Yangguang Shao"
      },
      {
        "literal": "Jianle Gan"
      },
      {
        "literal": "Gan Xu"
      },
      {
        "literal": "Wenxin Zhang"
      },
      {
        "literal": "Quanchen Zou"
      },
      {
        "literal": "Junzheng Shi"
      },
      {
        "literal": "Zhenfei Yin"
      },
      {
        "literal": "Mingchuan Zhang"
      },
      {
        "literal": "Aishan Liu"
      },
      {
        "literal": "Xianglong Liu"
      }
    ],
    "citation-key": "arxiv_2510_10073",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "43c9f7c91539df587a4f08888820731aef5bb3fca2cfb9e742443330aaf1c35f",
        "submitted_at": "2025-10-11T07:18:12Z",
        "updated_at": "2026-04-14T02:53:37Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2510.10073v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.10073",
      "catalog_id": "arxiv:2510.10073",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-11",
      "identifiers": {
        "arxiv": "2510.10073"
      },
      "record_updated_at": "2026-04-14"
    },
    "genre": "preprint",
    "id": "arxiv:2510.10073",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          11
        ]
      ]
    },
    "note": "First published: 2025-10-11; Recorded arXiv version: v2; Recorded version updated: 2026-04-14T02:53:37Z.",
    "title": "SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2510.11035v2",
    "archive": "arXiv",
    "archive_location": "2510.11035",
    "author": [
      {
        "literal": "Longjie Guo"
      },
      {
        "literal": "Chenjie Yuan"
      },
      {
        "literal": "Mingyuan Zhong"
      },
      {
        "literal": "Robert Wolfe"
      },
      {
        "literal": "Ruican Zhong"
      },
      {
        "literal": "Yue Xu"
      },
      {
        "literal": "Bingbing Wen"
      },
      {
        "literal": "Hua Shen"
      },
      {
        "literal": "Lucy Lu Wang"
      },
      {
        "literal": "Alexis Hiniker"
      }
    ],
    "citation-key": "arxiv_2510_11035",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e6152a61f81c435e76a432bc10086827c0cf0d2f44026bac03d6b80ebae8ca77",
        "submitted_at": "2025-10-13T06:12:03Z",
        "updated_at": "2026-02-23T08:31:13Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2510.11035v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.11035",
      "catalog_id": "arxiv:2510.11035",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-13",
      "identifiers": {
        "arxiv": "2510.11035"
      },
      "record_updated_at": "2026-02-23"
    },
    "genre": "preprint",
    "id": "arxiv:2510.11035",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          13
        ]
      ]
    },
    "note": "First published: 2025-10-13; Recorded arXiv version: v2; Recorded version updated: 2026-02-23T08:31:13Z.",
    "title": "SusBench: An Online Benchmark for Evaluating Dark Pattern Susceptibility of Computer-Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2510.12200v1",
    "archive": "arXiv",
    "archive_location": "2510.12200",
    "author": [
      {
        "literal": "Xiaoxue Ren"
      },
      {
        "literal": "Penghao Jiang"
      },
      {
        "literal": "Kaixin Li"
      },
      {
        "literal": "Zhiyong Huang"
      },
      {
        "literal": "Xiaoning Du"
      },
      {
        "literal": "Jiaojiao Jiang"
      },
      {
        "literal": "Zhenchang Xing"
      },
      {
        "literal": "Jiamou Sun"
      },
      {
        "literal": "Terry Yue Zhuo"
      }
    ],
    "citation-key": "arxiv_2510_12200",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e92db1e568c3c512aa00e2363bbdc9869cf834d638c331b45d4753d29a282004",
        "submitted_at": "2025-10-14T06:52:15Z",
        "updated_at": "2025-10-14T06:52:15Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2510.12200v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.12200",
      "catalog_id": "arxiv:2510.12200",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-14",
      "identifiers": {
        "arxiv": "2510.12200"
      },
      "record_updated_at": "2025-10-14"
    },
    "genre": "preprint",
    "id": "arxiv:2510.12200",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          14
        ]
      ]
    },
    "note": "First published: 2025-10-14; Recorded arXiv version: v1; Recorded version updated: 2025-10-14T06:52:15Z.",
    "title": "HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2510.13543v1",
    "archive": "arXiv",
    "archive_location": "2510.13543",
    "author": [
      {
        "literal": "Avihay Cohen"
      }
    ],
    "citation-key": "arxiv_2510_13543",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "bedde658a28c57551c27563fa22cb037839dddd4e5eabe1c66afa27523d0d406",
        "submitted_at": "2025-10-15T13:39:13Z",
        "updated_at": "2025-10-15T13:39:13Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2510.13543v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.13543",
      "catalog_id": "arxiv:2510.13543",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-15",
      "identifiers": {
        "arxiv": "2510.13543"
      },
      "record_updated_at": "2025-10-15"
    },
    "genre": "preprint",
    "id": "arxiv:2510.13543",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          15
        ]
      ]
    },
    "note": "First published: 2025-10-15; Recorded arXiv version: v1; Recorded version updated: 2025-10-15T13:39:13Z.",
    "title": "In-Browser LLM-Guided Fuzzing for Real-Time Prompt Injection Testing in Agentic AI Browsers",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2510.15455v1",
    "archive": "arXiv",
    "archive_location": "2510.15455",
    "author": [
      {
        "literal": "Gucongcong Fan"
      },
      {
        "literal": "Chaoyue Niu"
      },
      {
        "literal": "Chengfei Lyu"
      },
      {
        "literal": "Fan Wu"
      },
      {
        "literal": "Guihai Chen"
      }
    ],
    "citation-key": "arxiv_2510_15455",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "8584797a1c12158b20da04c30e3a0f577c63f02f9e906a051579959de2cae480",
        "submitted_at": "2025-10-17T09:11:05Z",
        "updated_at": "2025-10-17T09:11:05Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2510.15455v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.15455",
      "catalog_id": "arxiv:2510.15455",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-17",
      "identifiers": {
        "arxiv": "2510.15455"
      },
      "record_updated_at": "2025-10-17"
    },
    "genre": "preprint",
    "id": "arxiv:2510.15455",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          17
        ]
      ]
    },
    "note": "First published: 2025-10-17; Recorded arXiv version: v1; Recorded version updated: 2025-10-17T09:11:05Z.",
    "title": "CORE: Reducing UI Exposure in Mobile Agents via Collaboration Between Cloud and Local LLMs",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2510.18113v1",
    "archive": "arXiv",
    "archive_location": "2510.18113",
    "author": [
      {
        "literal": "Devin Ersoy"
      },
      {
        "literal": "Brandon Lee"
      },
      {
        "literal": "Ananth Shreekumar"
      },
      {
        "literal": "Arjun Arunasalam"
      },
      {
        "literal": "Muhammad Ibrahim"
      },
      {
        "literal": "Antonio Bianchi"
      },
      {
        "literal": "Z. Berkay Celik"
      }
    ],
    "citation-key": "arxiv_2510_18113",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "db3c25ba55221ca3d7c45ce4243a4a37b56a698909c0ea3eaaabdcd37388a1ec",
        "submitted_at": "2025-10-20T21:26:26Z",
        "updated_at": "2025-10-20T21:26:26Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2510.18113v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.18113",
      "catalog_id": "arxiv:2510.18113",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-20",
      "identifiers": {
        "arxiv": "2510.18113"
      },
      "record_updated_at": "2025-10-20"
    },
    "genre": "preprint",
    "id": "arxiv:2510.18113",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          20
        ]
      ]
    },
    "note": "First published: 2025-10-20; Recorded arXiv version: v1; Recorded version updated: 2025-10-20T21:26:26Z.",
    "title": "Investigating the Impact of Dark Patterns on LLM-Based Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2510.24411v3",
    "archive": "arXiv",
    "archive_location": "2510.24411",
    "author": [
      {
        "literal": "Qiushi Sun"
      },
      {
        "literal": "Mukai Li"
      },
      {
        "literal": "Zhoumianze Liu"
      },
      {
        "literal": "Zhihui Xie"
      },
      {
        "literal": "Fangzhi Xu"
      },
      {
        "literal": "Zhangyue Yin"
      },
      {
        "literal": "Kanzhi Cheng"
      },
      {
        "literal": "Zehao Li"
      },
      {
        "literal": "Zichen Ding"
      },
      {
        "literal": "Qi Liu"
      },
      {
        "literal": "Zhiyong Wu"
      },
      {
        "literal": "Zhuosheng Zhang"
      },
      {
        "literal": "Ben Kao"
      },
      {
        "literal": "Lingpeng Kong"
      }
    ],
    "citation-key": "arxiv_2510_24411",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7e3fde732c9e760437f2c60d585f7ba0d2ed13bbe9e051838844a21174159099",
        "submitted_at": "2025-10-28T13:22:39Z",
        "updated_at": "2026-07-26T01:16:06Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2510.24411v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.24411",
      "catalog_id": "arxiv:2510.24411",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-28",
      "identifiers": {
        "arxiv": "2510.24411"
      },
      "record_updated_at": "2026-07-26"
    },
    "genre": "preprint",
    "id": "arxiv:2510.24411",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          28
        ]
      ]
    },
    "note": "First published: 2025-10-28; Recorded arXiv version: v3; Recorded version updated: 2026-07-26T01:16:06Z.",
    "title": "OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2510.27140v3",
    "archive": "arXiv",
    "archive_location": "2510.27140",
    "author": [
      {
        "literal": "Chenghao Du"
      },
      {
        "literal": "Quanfeng Huang"
      },
      {
        "literal": "Tingxuan Tang"
      },
      {
        "literal": "Zihao Wang"
      },
      {
        "literal": "Adwait Nadkarni"
      },
      {
        "literal": "Yue Xiao"
      }
    ],
    "citation-key": "arxiv_2510_27140",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "61b611712fff54af25aae660f2353fa6c3aaa764b0767831ebf2278c120d9dea",
        "submitted_at": "2025-10-31T03:35:59Z",
        "updated_at": "2026-07-07T02:18:26Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2510.27140v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2510.27140",
      "catalog_id": "arxiv:2510.27140",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-10-31",
      "identifiers": {
        "arxiv": "2510.27140"
      },
      "record_updated_at": "2026-07-07"
    },
    "genre": "preprint",
    "id": "arxiv:2510.27140",
    "issued": {
      "date-parts": [
        [
          2025,
          10,
          31
        ]
      ]
    },
    "note": "First published: 2025-10-31; Recorded arXiv version: v3; Recorded version updated: 2026-07-07T02:18:26Z.",
    "title": "Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2511.13248v1",
    "archive": "arXiv",
    "archive_location": "2511.13248",
    "author": [
      {
        "literal": "Fuyao Zhang"
      },
      {
        "literal": "Jiaming Zhang"
      },
      {
        "literal": "Che Wang"
      },
      {
        "literal": "Xiongtao Sun"
      },
      {
        "literal": "Yurong Hao"
      },
      {
        "literal": "Guowei Guan"
      },
      {
        "literal": "Wenjie Li"
      },
      {
        "literal": "Longtao Huang"
      },
      {
        "literal": "Wei Yang Bryan Lim"
      }
    ],
    "citation-key": "arxiv_2511_13248",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "d918a5754fe907fc273639f3277a3566d649c08da244714d0d7737456bede230",
        "submitted_at": "2025-11-17T11:08:45Z",
        "updated_at": "2025-11-17T11:08:45Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2511.13248v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2511.13248",
      "catalog_id": "arxiv:2511.13248",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-11-17",
      "identifiers": {
        "arxiv": "2511.13248"
      },
      "record_updated_at": "2025-11-17"
    },
    "genre": "preprint",
    "id": "arxiv:2511.13248",
    "issued": {
      "date-parts": [
        [
          2025,
          11,
          17
        ]
      ]
    },
    "note": "First published: 2025-11-17; Recorded arXiv version: v1; Recorded version updated: 2025-11-17T11:08:45Z.",
    "title": "DualTAP: A Dual-Task Adversarial Protector for Mobile MLLM Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2511.19477v1",
    "archive": "arXiv",
    "archive_location": "2511.19477",
    "author": [
      {
        "literal": "Aram Vardanyan"
      }
    ],
    "citation-key": "arxiv_2511_19477",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "17debfa3b59e5a2fcae950c2659e5851ae101cc58181e0cc4e0320befe9b4cb1",
        "submitted_at": "2025-11-22T12:18:35Z",
        "updated_at": "2025-11-22T12:18:35Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2511.19477v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2511.19477",
      "catalog_id": "arxiv:2511.19477",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-11-22",
      "identifiers": {
        "arxiv": "2511.19477"
      },
      "record_updated_at": "2025-11-22"
    },
    "genre": "preprint",
    "id": "arxiv:2511.19477",
    "issued": {
      "date-parts": [
        [
          2025,
          11,
          22
        ]
      ]
    },
    "note": "First published: 2025-11-22; Recorded arXiv version: v1; Recorded version updated: 2025-11-22T12:18:35Z.",
    "title": "Building Browser Agents: Architecture, Security, and Practical Solutions",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2512.07725v1",
    "archive": "arXiv",
    "archive_location": "2512.07725",
    "author": [
      {
        "literal": "Alisha Ukani"
      },
      {
        "literal": "Hamed Haddadi"
      },
      {
        "literal": "Ali Shahin Shamsabadi"
      },
      {
        "literal": "Peter Snyder"
      }
    ],
    "citation-key": "arxiv_2512_07725",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "2576701bbdc4fd8f1f571ed691b06185d1e16bf4955a5c99b10200d796ba6525",
        "submitted_at": "2025-12-08T17:16:12Z",
        "updated_at": "2025-12-08T17:16:12Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2512.07725v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2512.07725",
      "catalog_id": "arxiv:2512.07725",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-12-08",
      "identifiers": {
        "arxiv": "2512.07725"
      },
      "record_updated_at": "2025-12-08"
    },
    "genre": "preprint",
    "id": "arxiv:2512.07725",
    "issued": {
      "date-parts": [
        [
          2025,
          12,
          8
        ]
      ]
    },
    "note": "First published: 2025-12-08; Recorded arXiv version: v1; Recorded version updated: 2025-12-08T17:16:12Z.",
    "title": "Privacy Practices of Browser Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2512.12594v2",
    "archive": "arXiv",
    "archive_location": "2512.12594",
    "author": [
      {
        "literal": "Luoxi Meng"
      },
      {
        "literal": "Henry Feng"
      },
      {
        "literal": "Ilia Shumailov"
      },
      {
        "literal": "Earlence Fernandes"
      }
    ],
    "citation-key": "arxiv_2512_12594",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "fa6b4d9fa34610ec6fa8c0ac8b075127365aad57a20d814a2e838a223cf8bd56",
        "submitted_at": "2025-12-14T08:25:31Z",
        "updated_at": "2026-03-04T01:49:57Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2512.12594v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2512.12594",
      "catalog_id": "arxiv:2512.12594",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-12-14",
      "identifiers": {
        "arxiv": "2512.12594"
      },
      "record_updated_at": "2026-03-04"
    },
    "genre": "preprint",
    "id": "arxiv:2512.12594",
    "issued": {
      "date-parts": [
        [
          2025,
          12,
          14
        ]
      ]
    },
    "note": "First published: 2025-12-14; Recorded arXiv version: v2; Recorded version updated: 2026-03-04T01:49:57Z.",
    "title": "ceLLMate: Sandboxing Browser AI Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2512.23128v3",
    "archive": "arXiv",
    "archive_location": "2512.23128",
    "author": [
      {
        "literal": "Karolina Korgul"
      },
      {
        "literal": "Yushi Yang"
      },
      {
        "literal": "Arkadiusz Drohomirecki"
      },
      {
        "literal": "Piotr Błaszczyk"
      },
      {
        "literal": "Will Howard"
      },
      {
        "literal": "Lukas Aichberger"
      },
      {
        "literal": "Chris Russell"
      },
      {
        "literal": "Philip H. S. Torr"
      },
      {
        "literal": "Adam Mahdi"
      },
      {
        "literal": "Adel Bibi"
      }
    ],
    "citation-key": "arxiv_2512_23128",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a255cccbe3f16f498918126724c391911e1d745c093189790cbab715fd28a2d2",
        "submitted_at": "2025-12-29T01:09:10Z",
        "updated_at": "2026-07-02T16:12:04Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2512.23128v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2512.23128",
      "catalog_id": "arxiv:2512.23128",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2025-12-29",
      "identifiers": {
        "arxiv": "2512.23128"
      },
      "record_updated_at": "2026-07-02"
    },
    "genre": "preprint",
    "id": "arxiv:2512.23128",
    "issued": {
      "date-parts": [
        [
          2025,
          12,
          29
        ]
      ]
    },
    "note": "First published: 2025-12-29; Recorded arXiv version: v3; Recorded version updated: 2026-07-02T16:12:04Z.",
    "title": "It's a TRAP! Task-Redirecting Agent Persuasion Benchmark for Web Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2601.07263v1",
    "archive": "arXiv",
    "archive_location": "2601.07263",
    "author": [
      {
        "literal": "Xinyi Wu"
      },
      {
        "literal": "Geng Hong"
      },
      {
        "literal": "Yueyue Chen"
      },
      {
        "literal": "MingXuan Liu"
      },
      {
        "literal": "Feier Jin"
      },
      {
        "literal": "Xudong Pan"
      },
      {
        "literal": "Jiarun Dai"
      },
      {
        "literal": "Baojun Liu"
      }
    ],
    "citation-key": "arxiv_2601_07263",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "4af00e0632ee21f70409998fc22f67e9a4ed1de415b488eda122c6ef94cab7aa",
        "submitted_at": "2026-01-12T07:10:08Z",
        "updated_at": "2026-01-12T07:10:08Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2601.07263v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2601.07263",
      "catalog_id": "arxiv:2601.07263",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-01-12",
      "identifiers": {
        "arxiv": "2601.07263"
      },
      "record_updated_at": "2026-01-12"
    },
    "genre": "preprint",
    "id": "arxiv:2601.07263",
    "issued": {
      "date-parts": [
        [
          2026,
          1,
          12
        ]
      ]
    },
    "note": "First published: 2026-01-12; Recorded arXiv version: v1; Recorded version updated: 2026-01-12T07:10:08Z.",
    "title": "When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2601.08406v1",
    "archive": "arXiv",
    "archive_location": "2601.08406",
    "author": [
      {
        "literal": "Xinyi Wu"
      },
      {
        "literal": "Jiagui Chen"
      },
      {
        "literal": "Geng Hong"
      },
      {
        "literal": "Jiayi Dong"
      },
      {
        "literal": "Xudong Pan"
      },
      {
        "literal": "Jiarun Dai"
      },
      {
        "literal": "Min Yang"
      }
    ],
    "citation-key": "arxiv_2601_08406",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "626702d22786336ff65b6e89d97e2034ff7aa144fab4ecc286d169fca6993410",
        "submitted_at": "2026-01-13T10:21:28Z",
        "updated_at": "2026-01-13T10:21:28Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2601.08406v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2601.08406",
      "catalog_id": "arxiv:2601.08406",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-01-13",
      "identifiers": {
        "arxiv": "2601.08406"
      },
      "record_updated_at": "2026-01-13"
    },
    "genre": "preprint",
    "id": "arxiv:2601.08406",
    "issued": {
      "date-parts": [
        [
          2026,
          1,
          13
        ]
      ]
    },
    "note": "First published: 2026-01-13; Recorded arXiv version: v1; Recorded version updated: 2026-01-13T10:21:28Z.",
    "title": "WebTrap Park: An Automated Platform for Systematic Security Evaluation of Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2601.09923v3",
    "archive": "arXiv",
    "archive_location": "2601.09923",
    "author": [
      {
        "literal": "Hanna Foerster"
      },
      {
        "literal": "Tom Blanchard"
      },
      {
        "literal": "Kristina Nikolić"
      },
      {
        "literal": "Ilia Shumailov"
      },
      {
        "literal": "Cheng Zhang"
      },
      {
        "literal": "Robert Mullins"
      },
      {
        "literal": "Nicolas Papernot"
      },
      {
        "literal": "Florian Tramèr"
      },
      {
        "literal": "Yiren Zhao"
      }
    ],
    "citation-key": "arxiv_2601_09923",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e32917bc92b65701eea06c09a2c681c7504418f8ce888af2b72012a1da50c9f6",
        "submitted_at": "2026-01-14T23:06:35Z",
        "updated_at": "2026-06-04T15:38:02Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2601.09923v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2601.09923",
      "catalog_id": "arxiv:2601.09923",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-01-14",
      "identifiers": {
        "arxiv": "2601.09923"
      },
      "record_updated_at": "2026-06-04"
    },
    "genre": "preprint",
    "id": "arxiv:2601.09923",
    "issued": {
      "date-parts": [
        [
          2026,
          1,
          14
        ]
      ]
    },
    "note": "First published: 2026-01-14; Recorded arXiv version: v3; Recorded version updated: 2026-06-04T15:38:02Z.",
    "title": "CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2601.12349v3",
    "archive": "arXiv",
    "archive_location": "2601.12349",
    "author": [
      {
        "literal": "Yi Qian"
      },
      {
        "literal": "Kunwei Qian"
      },
      {
        "literal": "Xingbang He"
      },
      {
        "literal": "Ligeng Chen"
      },
      {
        "literal": "Jikang Zhang"
      },
      {
        "literal": "Tiantai Zhang"
      },
      {
        "literal": "Haiyang Wei"
      },
      {
        "literal": "Linzhang Wang"
      },
      {
        "literal": "Hao Wu"
      },
      {
        "literal": "Bing Mao"
      }
    ],
    "citation-key": "arxiv_2601_12349",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "21848dea9e000125550fff7fe3844a57bf100215bf9eb800cbdbb612675f7074",
        "submitted_at": "2026-01-18T10:54:54Z",
        "updated_at": "2026-07-15T15:32:11Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2601.12349v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2601.12349",
      "catalog_id": "arxiv:2601.12349",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-01-18",
      "identifiers": {
        "arxiv": "2601.12349"
      },
      "record_updated_at": "2026-07-15"
    },
    "genre": "preprint",
    "id": "arxiv:2601.12349",
    "issued": {
      "date-parts": [
        [
          2026,
          1,
          18
        ]
      ]
    },
    "note": "First published: 2026-01-18; Recorded arXiv version: v3; Recorded version updated: 2026-07-15T15:32:11Z.",
    "title": "Mind the Gap: Action Rebinding Attacks against Android GUI Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2601.12822v1",
    "archive": "arXiv",
    "archive_location": "2601.12822",
    "author": [
      {
        "literal": "Wenqi Zhang"
      },
      {
        "literal": "Yulin Shen"
      },
      {
        "literal": "Changyue Jiang"
      },
      {
        "literal": "Jiarun Dai"
      },
      {
        "literal": "Geng Hong"
      },
      {
        "literal": "Xudong Pan"
      }
    ],
    "citation-key": "arxiv_2601_12822",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "b57586682d4675387dea2687e7c15d70cc10aecac883e35fe1812c39abcbc1dc",
        "submitted_at": "2026-01-19T08:32:09Z",
        "updated_at": "2026-01-19T08:32:09Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2601.12822v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2601.12822",
      "catalog_id": "arxiv:2601.12822",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-01-19",
      "identifiers": {
        "arxiv": "2601.12822"
      },
      "record_updated_at": "2026-01-19"
    },
    "genre": "preprint",
    "id": "arxiv:2601.12822",
    "issued": {
      "date-parts": [
        [
          2026,
          1,
          19
        ]
      ]
    },
    "note": "First published: 2026-01-19; Recorded arXiv version: v1; Recorded version updated: 2026-01-19T08:32:09Z.",
    "title": "MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2601.18842v3",
    "archive": "arXiv",
    "archive_location": "2601.18842",
    "author": [
      {
        "literal": "Yanxi Wang"
      },
      {
        "literal": "Zhiling Zhang"
      },
      {
        "literal": "Wenbo Zhou"
      },
      {
        "literal": "Weiming Zhang"
      },
      {
        "literal": "Jie Zhang"
      },
      {
        "literal": "Qiannan Zhu"
      },
      {
        "literal": "Yu Shi"
      },
      {
        "literal": "Shuxin Zheng"
      },
      {
        "literal": "Jiyan He"
      }
    ],
    "citation-key": "arxiv_2601_18842",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "1ca912ad67a681e8e908a5a403e982f39b5080bee4df376eb0b598468f3bb504",
        "submitted_at": "2026-01-26T11:33:40Z",
        "updated_at": "2026-05-13T07:11:36Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2601.18842v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2601.18842",
      "catalog_id": "arxiv:2601.18842",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-01-26",
      "identifiers": {
        "arxiv": "2601.18842"
      },
      "record_updated_at": "2026-05-13"
    },
    "genre": "preprint",
    "id": "arxiv:2601.18842",
    "issued": {
      "date-parts": [
        [
          2026,
          1,
          26
        ]
      ]
    },
    "note": "First published: 2026-01-26; Recorded arXiv version: v3; Recorded version updated: 2026-05-13T07:11:36Z.",
    "title": "GUIGuard-Bench: Toward a General Evaluation for Privacy-Preserving GUI Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2602.01725v1",
    "archive": "arXiv",
    "archive_location": "2602.01725",
    "author": [
      {
        "literal": "Yurun Chen"
      },
      {
        "literal": "Zeyi Liao"
      },
      {
        "literal": "Ping Yin"
      },
      {
        "literal": "Taotao Xie"
      },
      {
        "literal": "Keting Yin"
      },
      {
        "literal": "Shengyu Zhang"
      }
    ],
    "citation-key": "arxiv_2602_01725",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "d1a6f98c0ab0a221c169796d9680e4b2a7bf7a0775c0493254f47d5e0a9b3c4e",
        "submitted_at": "2026-02-02T07:04:06Z",
        "updated_at": "2026-02-02T07:04:06Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2602.01725v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2602.01725",
      "catalog_id": "arxiv:2602.01725",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-02-02",
      "identifiers": {
        "arxiv": "2602.01725"
      },
      "record_updated_at": "2026-02-02"
    },
    "genre": "preprint",
    "id": "arxiv:2602.01725",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          2
        ]
      ]
    },
    "note": "First published: 2026-02-02; Recorded arXiv version: v1; Recorded version updated: 2026-02-02T07:04:06Z.",
    "title": "SafePred: A Predictive Guardrail for Computer-Using Agents via World Models",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2602.03792v1",
    "archive": "arXiv",
    "archive_location": "2602.03792",
    "author": [
      {
        "literal": "Xilong Wang"
      },
      {
        "literal": "Yinuo Liu"
      },
      {
        "literal": "Zhun Wang"
      },
      {
        "literal": "Dawn Song"
      },
      {
        "literal": "Neil Gong"
      }
    ],
    "citation-key": "arxiv_2602_03792",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "86702018906e64294d7b8daea618c5f152e8b94b604d27d6b164e82aff462564",
        "submitted_at": "2026-02-03T17:55:04Z",
        "updated_at": "2026-02-03T17:55:04Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2602.03792v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2602.03792",
      "catalog_id": "arxiv:2602.03792",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-02-03",
      "identifiers": {
        "arxiv": "2602.03792"
      },
      "record_updated_at": "2026-02-03"
    },
    "genre": "preprint",
    "id": "arxiv:2602.03792",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          3
        ]
      ]
    },
    "note": "First published: 2026-02-03; Recorded arXiv version: v1; Recorded version updated: 2026-02-03T17:55:04Z.",
    "title": "WebSentinel: Detecting and Localizing Prompt Injection Attacks for Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2602.08995v2",
    "archive": "arXiv",
    "archive_location": "2602.08995",
    "author": [
      {
        "literal": "Yuting Ning"
      },
      {
        "literal": "Jaylen Jones"
      },
      {
        "literal": "Zhehao Zhang"
      },
      {
        "literal": "Chentao Ye"
      },
      {
        "literal": "Weitong Ruan"
      },
      {
        "literal": "Junyi Li"
      },
      {
        "literal": "Rahul Gupta"
      },
      {
        "literal": "Huan Sun"
      }
    ],
    "citation-key": "arxiv_2602_08995",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "853f64c020f47129be01778d5212ade8ef78251959ad634ee04ad0fb9fe2989c",
        "submitted_at": "2026-02-09T18:41:15Z",
        "updated_at": "2026-06-25T04:36:12Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2602.08995v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2602.08995",
      "catalog_id": "arxiv:2602.08995",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-02-09",
      "identifiers": {
        "arxiv": "2602.08995"
      },
      "record_updated_at": "2026-06-25"
    },
    "genre": "preprint",
    "id": "arxiv:2602.08995",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          9
        ]
      ]
    },
    "note": "First published: 2026-02-09; Recorded arXiv version: v2; Recorded version updated: 2026-06-25T04:36:12Z.",
    "title": "When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2602.09012v2",
    "archive": "arXiv",
    "archive_location": "2602.09012",
    "author": [
      {
        "literal": "Jiacheng Liu"
      },
      {
        "literal": "Yaxin Luo"
      },
      {
        "literal": "Jiacheng Cui"
      },
      {
        "literal": "Xinyi Shang"
      },
      {
        "literal": "Xiaohan Zhao"
      },
      {
        "literal": "Zhiqiang Shen"
      }
    ],
    "citation-key": "arxiv_2602_09012",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3178684a322fcf07f847473139efdddf0b02213af468f1afbd285549d15bde56",
        "submitted_at": "2026-02-09T18:55:33Z",
        "updated_at": "2026-06-21T08:25:39Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2602.09012v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2602.09012",
      "catalog_id": "arxiv:2602.09012",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-02-09",
      "identifiers": {
        "arxiv": "2602.09012"
      },
      "record_updated_at": "2026-06-21"
    },
    "genre": "preprint",
    "id": "arxiv:2602.09012",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          9
        ]
      ]
    },
    "note": "First published: 2026-02-09; Recorded arXiv version: v2; Recorded version updated: 2026-06-21T08:25:39Z.",
    "title": "Next-Gen CAPTCHAs: Leveraging the Cognitive Gap for Scalable and Diverse GUI-Agent Defense",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2602.10139v3",
    "archive": "arXiv",
    "archive_location": "2602.10139",
    "author": [
      {
        "literal": "Lepeng Zhao"
      },
      {
        "literal": "Zhenhua Zou"
      },
      {
        "literal": "Shuo Li"
      },
      {
        "literal": "Zhuotao Liu"
      }
    ],
    "citation-key": "arxiv_2602_10139",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "727279bf83a67f66fa8f173d028936fe0bdae63e9f23800d98476da10201ad0d",
        "submitted_at": "2026-02-08T15:50:04Z",
        "updated_at": "2026-04-26T01:34:23Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2602.10139v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2602.10139",
      "catalog_id": "arxiv:2602.10139",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-02-08",
      "identifiers": {
        "arxiv": "2602.10139"
      },
      "record_updated_at": "2026-04-26"
    },
    "genre": "preprint",
    "id": "arxiv:2602.10139",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          8
        ]
      ]
    },
    "note": "First published: 2026-02-08; Recorded arXiv version: v3; Recorded version updated: 2026-04-26T01:34:23Z.",
    "title": "Anonymization-Enhanced Privacy Protection for Mobile GUI Agents: Available but Invisible",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2602.12430v4",
    "archive": "arXiv",
    "archive_location": "2602.12430",
    "author": [
      {
        "literal": "Renjun Xu"
      },
      {
        "literal": "Yang Yan"
      }
    ],
    "citation-key": "arxiv_2602_12430",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f0edc70265a8d46a7c22a9c6384de8aa19f79dbb6987f8c23f4a260647a6a3f0",
        "submitted_at": "2026-02-12T21:33:25Z",
        "updated_at": "2026-06-02T16:14:54Z",
        "version": 4,
        "versioned_url": "https://arxiv.org/abs/2602.12430v4"
      },
      "canonical_source_url": "https://arxiv.org/abs/2602.12430",
      "catalog_id": "arxiv:2602.12430",
      "catalog_kind": "survey",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2026-02-12",
      "identifiers": {
        "arxiv": "2602.12430"
      },
      "record_updated_at": "2026-06-02"
    },
    "genre": "preprint",
    "id": "arxiv:2602.12430",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          12
        ]
      ]
    },
    "note": "First published: 2026-02-12; Recorded arXiv version: v4; Recorded version updated: 2026-06-02T16:14:54Z.",
    "title": "Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward",
    "type": "article",
    "version": "4"
  },
  {
    "URL": "https://arxiv.org/abs/2602.13516v1",
    "archive": "arXiv",
    "archive_location": "2602.13516",
    "author": [
      {
        "literal": "Jaechul Roh"
      },
      {
        "literal": "Eugene Bagdasarian"
      },
      {
        "literal": "Hamed Haddadi"
      },
      {
        "literal": "Ali Shahin Shamsabadi"
      }
    ],
    "citation-key": "arxiv_2602_13516",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "fb048b4e5d1d244d689957f30cdcb93cf4dbb750b24ae527b62ecfb04b554eb4",
        "submitted_at": "2026-02-13T23:02:50Z",
        "updated_at": "2026-02-13T23:02:50Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2602.13516v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2602.13516",
      "catalog_id": "arxiv:2602.13516",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-02-13",
      "identifiers": {
        "arxiv": "2602.13516"
      },
      "record_updated_at": "2026-02-13"
    },
    "genre": "preprint",
    "id": "arxiv:2602.13516",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          13
        ]
      ]
    },
    "note": "First published: 2026-02-13; Recorded arXiv version: v1; Recorded version updated: 2026-02-13T23:02:50Z.",
    "title": "SPILLage: Agentic Oversharing on the Web",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.00476v1",
    "archive": "arXiv",
    "archive_location": "2603.00476",
    "author": [
      {
        "literal": "Linxi Jiang"
      },
      {
        "literal": "Zhijie Liu"
      },
      {
        "literal": "Haotian Luo"
      },
      {
        "literal": "Zhiqiang Lin"
      }
    ],
    "citation-key": "arxiv_2603_00476",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "d3b24ac636d86124a70b44e84657b963db4c5af3367ae70e5c35e0bebb3f600f",
        "submitted_at": "2026-02-28T05:25:03Z",
        "updated_at": "2026-02-28T05:25:03Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.00476v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.00476",
      "catalog_id": "arxiv:2603.00476",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-02-28",
      "identifiers": {
        "arxiv": "2603.00476"
      },
      "record_updated_at": "2026-02-28"
    },
    "genre": "preprint",
    "id": "arxiv:2603.00476",
    "issued": {
      "date-parts": [
        [
          2026,
          2,
          28
        ]
      ]
    },
    "note": "First published: 2026-02-28; Recorded arXiv version: v1; Recorded version updated: 2026-02-28T05:25:03Z.",
    "title": "Atomicity for Agents: Exposing, Exploiting, and Mitigating TOCTOU Vulnerabilities in Browser-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.04364v2",
    "archive": "arXiv",
    "archive_location": "2603.04364",
    "author": [
      {
        "literal": "Haoyu Liu"
      },
      {
        "literal": "Dingcheng Li"
      },
      {
        "literal": "Lukas Rutishauser"
      },
      {
        "literal": "Zeyu Zheng"
      }
    ],
    "citation-key": "arxiv_2603_04364",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "971770e61bf0af91ad1f17b197f09fc166b26bfb4953d3f2c74d457a87e25f3a",
        "submitted_at": "2026-03-04T18:29:54Z",
        "updated_at": "2026-10-05T23:01:49Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2603.04364v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.04364",
      "catalog_id": "arxiv:2603.04364",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-04",
      "identifiers": {
        "arxiv": "2603.04364"
      },
      "record_updated_at": "2026-10-05"
    },
    "genre": "preprint",
    "id": "arxiv:2603.04364",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          4
        ]
      ]
    },
    "note": "First published: 2026-03-04; Recorded arXiv version: v2; Recorded version updated: 2026-10-05T23:01:49Z.",
    "title": "Dual-Modality Multi-Stage Adversarial Safety Training: Robustifying Multimodal Web Agents Against Cross-Modal Attacks",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2603.14707v1",
    "archive": "arXiv",
    "archive_location": "2603.14707",
    "author": [
      {
        "literal": "Xunzhuo Liu"
      },
      {
        "literal": "Bowei He"
      },
      {
        "literal": "Xue Liu"
      },
      {
        "literal": "Andy Luo"
      },
      {
        "literal": "Haichen Zhang"
      },
      {
        "literal": "Huamin Chen"
      }
    ],
    "citation-key": "arxiv_2603_14707",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5c7cb0e4784c2a58feeca27a1687d1f73880d9713c16387f0bbff9ed34c427c7",
        "submitted_at": "2026-03-16T01:31:32Z",
        "updated_at": "2026-03-16T01:31:32Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.14707v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.14707",
      "catalog_id": "arxiv:2603.14707",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-16",
      "identifiers": {
        "arxiv": "2603.14707"
      },
      "record_updated_at": "2026-03-16"
    },
    "genre": "preprint",
    "id": "arxiv:2603.14707",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          16
        ]
      ]
    },
    "note": "First published: 2026-03-16; Recorded arXiv version: v1; Recorded version updated: 2026-03-16T01:31:32Z.",
    "title": "Visual Confused Deputy: Exploiting and Defending Perception Failures in Computer-Using Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.15714v1",
    "archive": "arXiv",
    "archive_location": "2603.15714",
    "author": [
      {
        "literal": "Mateusz Dziemian"
      },
      {
        "literal": "Maxwell Lin"
      },
      {
        "literal": "Xiaohan Fu"
      },
      {
        "literal": "Micha Nowak"
      },
      {
        "literal": "Nick Winter"
      },
      {
        "literal": "Eliot Jones"
      },
      {
        "literal": "Andy Zou"
      },
      {
        "literal": "Lama Ahmad"
      },
      {
        "literal": "Kamalika Chaudhuri"
      },
      {
        "literal": "Sahana Chennabasappa"
      },
      {
        "literal": "Xander Davies"
      },
      {
        "literal": "Lauren Deason"
      },
      {
        "literal": "Benjamin L. Edelman"
      },
      {
        "literal": "Tanner Emek"
      },
      {
        "literal": "Ivan Evtimov"
      },
      {
        "literal": "Jim Gust"
      },
      {
        "literal": "Maia Hamin"
      },
      {
        "literal": "Kat He"
      },
      {
        "literal": "Klaudia Krawiecka"
      },
      {
        "literal": "Riccardo Patana"
      },
      {
        "literal": "Neil Perry"
      },
      {
        "literal": "Troy Peterson"
      },
      {
        "literal": "Xiangyu Qi"
      },
      {
        "literal": "Javier Rando"
      },
      {
        "literal": "Zifan Wang"
      },
      {
        "literal": "Zihan Wang"
      },
      {
        "literal": "Spencer Whitman"
      },
      {
        "literal": "Eric Winsor"
      },
      {
        "literal": "Arman Zharmagambetov"
      },
      {
        "literal": "Matt Fredrikson"
      },
      {
        "literal": "Zico Kolter"
      }
    ],
    "citation-key": "arxiv_2603_15714",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e7fe52247e01f331021013dbc3003b3b828e134d7706ec1f587210ad286eee1d",
        "submitted_at": "2026-03-16T14:49:36Z",
        "updated_at": "2026-03-16T14:49:36Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.15714v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.15714",
      "catalog_id": "arxiv:2603.15714",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-16",
      "identifiers": {
        "arxiv": "2603.15714"
      },
      "record_updated_at": "2026-03-16"
    },
    "genre": "preprint",
    "id": "arxiv:2603.15714",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          16
        ]
      ]
    },
    "note": "First published: 2026-03-16; Recorded arXiv version: v1; Recorded version updated: 2026-03-16T14:49:36Z.",
    "title": "How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.17357v1",
    "archive": "arXiv",
    "archive_location": "2603.17357",
    "author": [
      {
        "literal": "Nathan Zhao"
      }
    ],
    "citation-key": "arxiv_2603_17357",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e3b429d277ec776af18977a72aaeb95000a4fedf66aa89c0366ab02120d4cdbe",
        "submitted_at": "2026-03-18T04:41:16Z",
        "updated_at": "2026-03-18T04:41:16Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.17357v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.17357",
      "catalog_id": "arxiv:2603.17357",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-18",
      "identifiers": {
        "arxiv": "2603.17357"
      },
      "record_updated_at": "2026-03-18"
    },
    "genre": "preprint",
    "id": "arxiv:2603.17357",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          18
        ]
      ]
    },
    "note": "First published: 2026-03-18; Recorded arXiv version: v1; Recorded version updated: 2026-03-18T04:41:16Z.",
    "title": "WebPII: Benchmarking Visual PII Detection for Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.18762v1",
    "archive": "arXiv",
    "archive_location": "2603.18762",
    "author": [
      {
        "literal": "Haochen Zhao"
      },
      {
        "literal": "Shaoyang Cui"
      }
    ],
    "citation-key": "arxiv_2603_18762",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "0beb3fe342f080f0727181aba55fc1167d2512dd04542986448c5006b6b8213b",
        "submitted_at": "2026-03-19T11:14:45Z",
        "updated_at": "2026-03-19T11:14:45Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.18762v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.18762",
      "catalog_id": "arxiv:2603.18762",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-19",
      "identifiers": {
        "arxiv": "2603.18762"
      },
      "record_updated_at": "2026-03-19"
    },
    "genre": "preprint",
    "id": "arxiv:2603.18762",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          19
        ]
      ]
    },
    "note": "First published: 2026-03-19; Recorded arXiv version: v1; Recorded version updated: 2026-03-19T11:14:45Z.",
    "title": "ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.20351v1",
    "archive": "arXiv",
    "archive_location": "2603.20351",
    "author": [
      {
        "literal": "Yizhe Zhao"
      },
      {
        "literal": "Yongjian Fu"
      },
      {
        "literal": "Zihao Feng"
      },
      {
        "literal": "Hao Pan"
      },
      {
        "literal": "Yongheng Deng"
      },
      {
        "literal": "Yaoxue Zhang"
      },
      {
        "literal": "Ju Ren"
      }
    ],
    "citation-key": "arxiv_2603_20351",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f25f4999fc9d20433f96e22651311cccf78b5e2ad7cbc5578fe1765ac8be6a00",
        "submitted_at": "2026-03-20T12:19:41Z",
        "updated_at": "2026-03-20T12:19:41Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.20351v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.20351",
      "catalog_id": "arxiv:2603.20351",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-20",
      "identifiers": {
        "arxiv": "2603.20351"
      },
      "record_updated_at": "2026-03-20"
    },
    "genre": "preprint",
    "id": "arxiv:2603.20351",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          20
        ]
      ]
    },
    "note": "First published: 2026-03-20; Recorded arXiv version: v1; Recorded version updated: 2026-03-20T12:19:41Z.",
    "title": "MANA: Towards Efficient Mobile Ad Detection via Multimodal Agentic UI Navigation",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.23007v1",
    "archive": "arXiv",
    "archive_location": "2603.23007",
    "author": [
      {
        "literal": "Yutao Luo"
      },
      {
        "literal": "Haotian Zhu"
      },
      {
        "literal": "Shuchao Pang"
      },
      {
        "literal": "Zhigang Lu"
      },
      {
        "literal": "Tian Dong"
      },
      {
        "literal": "Yongbin Zhou"
      },
      {
        "literal": "Minhui Xue"
      }
    ],
    "citation-key": "arxiv_2603_23007",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "37960f42162d2bff2fca5e71e350f1ef7c4d86e3f438fd777a88dc2280d3aabe",
        "submitted_at": "2026-03-24T09:51:43Z",
        "updated_at": "2026-03-24T09:51:43Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.23007v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.23007",
      "catalog_id": "arxiv:2603.23007",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-24",
      "identifiers": {
        "arxiv": "2603.23007"
      },
      "record_updated_at": "2026-03-24"
    },
    "genre": "preprint",
    "id": "arxiv:2603.23007",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          24
        ]
      ]
    },
    "note": "First published: 2026-03-24; Recorded arXiv version: v1; Recorded version updated: 2026-03-24T09:51:43Z.",
    "title": "AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2603.23791v1",
    "archive": "arXiv",
    "archive_location": "2603.23791",
    "author": [
      {
        "literal": "Qianlong Lan"
      },
      {
        "literal": "Anuj Kaul"
      }
    ],
    "citation-key": "arxiv_2603_23791",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "bb8164fa076c55cddf73508e6b68ce24a6594917e65862504ba9f08b4e97ee48",
        "submitted_at": "2026-03-24T23:49:15Z",
        "updated_at": "2026-03-24T23:49:15Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2603.23791v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2603.23791",
      "catalog_id": "arxiv:2603.23791",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-03-24",
      "identifiers": {
        "arxiv": "2603.23791"
      },
      "record_updated_at": "2026-03-24"
    },
    "genre": "preprint",
    "id": "arxiv:2603.23791",
    "issued": {
      "date-parts": [
        [
          2026,
          3,
          24
        ]
      ]
    },
    "note": "First published: 2026-03-24; Recorded arXiv version: v1; Recorded version updated: 2026-03-24T23:49:15Z.",
    "title": "The Cognitive Firewall:Securing Browser Based AI Agents Against Indirect Prompt Injection Via Hybrid Edge Cloud Defense",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2604.00986v2",
    "archive": "arXiv",
    "archive_location": "2604.00986",
    "author": [
      {
        "literal": "Zhengyang Tang"
      },
      {
        "literal": "Ke Ji"
      },
      {
        "literal": "Xidong Wang"
      },
      {
        "literal": "Zihan Ye"
      },
      {
        "literal": "Xinyuan Wang"
      },
      {
        "literal": "Yiduo Guo"
      },
      {
        "literal": "Ziniu Li"
      },
      {
        "literal": "Chenxin Li"
      },
      {
        "literal": "Jingyuan Hu"
      },
      {
        "literal": "Shunian Chen"
      },
      {
        "literal": "Tongxu Luo"
      },
      {
        "literal": "Jiaxi Bi"
      },
      {
        "literal": "Zeyu Qin"
      },
      {
        "literal": "Shaobo Wang"
      },
      {
        "literal": "Xin Lai"
      },
      {
        "literal": "Pengyuan Lyu"
      },
      {
        "literal": "Junyi Li"
      },
      {
        "literal": "Can Xu"
      },
      {
        "literal": "Chengquan Zhang"
      },
      {
        "literal": "Han Hu"
      },
      {
        "literal": "Ming Yan"
      },
      {
        "literal": "Benyou Wang"
      }
    ],
    "citation-key": "arxiv_2604_00986",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3f137028b7608598fb1885a0bf1330e00c9404851571f856665aae1af1d9d63c",
        "submitted_at": "2026-04-01T14:50:50Z",
        "updated_at": "2026-04-02T13:51:55Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2604.00986v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.00986",
      "catalog_id": "arxiv:2604.00986",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-01",
      "identifiers": {
        "arxiv": "2604.00986"
      },
      "record_updated_at": "2026-04-02"
    },
    "genre": "preprint",
    "id": "arxiv:2604.00986",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          1
        ]
      ]
    },
    "note": "First published: 2026-04-01; Recorded arXiv version: v2; Recorded version updated: 2026-04-02T13:51:55Z.",
    "title": "Do Phone-Use Agents Respect Your Privacy?",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2604.02623v2",
    "archive": "arXiv",
    "archive_location": "2604.02623",
    "author": [
      {
        "literal": "Wei Zou"
      },
      {
        "literal": "Mingwen Dong"
      },
      {
        "literal": "Miguel Romero Calvo"
      },
      {
        "literal": "Shuaichen Chang"
      },
      {
        "literal": "Jiang Guo"
      },
      {
        "literal": "Dongkyu Lee"
      },
      {
        "literal": "Xing Niu"
      },
      {
        "literal": "Xiaofei Ma"
      },
      {
        "literal": "Yanjun Qi"
      },
      {
        "literal": "Jiarong Jiang"
      }
    ],
    "citation-key": "arxiv_2604_02623",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a37f4bdc495e10e4ae301ebff6faa28cdfa6de152d4619c051083b5dce41e6ba",
        "submitted_at": "2026-04-03T01:25:12Z",
        "updated_at": "2026-04-07T14:45:15Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2604.02623v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.02623",
      "catalog_id": "arxiv:2604.02623",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-03",
      "identifiers": {
        "arxiv": "2604.02623"
      },
      "record_updated_at": "2026-04-07"
    },
    "genre": "preprint",
    "id": "arxiv:2604.02623",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          3
        ]
      ]
    },
    "note": "First published: 2026-04-03; Recorded arXiv version: v2; Recorded version updated: 2026-04-07T14:45:15Z.",
    "title": "Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2604.04918v2",
    "archive": "arXiv",
    "archive_location": "2604.04918",
    "author": [
      {
        "literal": "Chaoran Chen"
      },
      {
        "literal": "Zhiping Zhang"
      },
      {
        "literal": "Zeya Chen"
      },
      {
        "literal": "Eryue Xu"
      },
      {
        "literal": "Yinuo Yang"
      },
      {
        "literal": "Ibrahim Khalilov"
      },
      {
        "literal": "Simret A Gebreegziabher"
      },
      {
        "literal": "Yanfang Ye"
      },
      {
        "literal": "Ziang Xiao"
      },
      {
        "literal": "Yaxing Yao"
      },
      {
        "literal": "Tianshi Li"
      },
      {
        "literal": "Toby Jia-Jun Li"
      }
    ],
    "citation-key": "arxiv_2604_04918",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "1411ee71ad8f65e4941af4ef538f52da6e9bf9c57fb537b6ecf37c8478609693",
        "submitted_at": "2026-04-06T17:57:16Z",
        "updated_at": "2026-09-12T06:05:52Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2604.04918v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.04918",
      "catalog_id": "arxiv:2604.04918",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-06",
      "identifiers": {
        "arxiv": "2604.04918"
      },
      "record_updated_at": "2026-09-12"
    },
    "genre": "preprint",
    "id": "arxiv:2604.04918",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          6
        ]
      ]
    },
    "note": "First published: 2026-04-06; Recorded arXiv version: v2; Recorded version updated: 2026-09-12T06:05:52Z.",
    "title": "Comparing Human Oversight Strategies for Computer-Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2604.06367v2",
    "archive": "arXiv",
    "archive_location": "2604.06367",
    "author": [
      {
        "literal": "Guruprasad Viswanathan Ramesh"
      },
      {
        "literal": "Asmit Nayak"
      },
      {
        "literal": "Basieem Siddique"
      },
      {
        "literal": "Kassem Fawaz"
      }
    ],
    "citation-key": "arxiv_2604_06367",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "400d8a9f7aed4f150dd5198d9a1561d2df0454069495594ca165ad4254a1be59",
        "submitted_at": "2026-04-07T18:43:21Z",
        "updated_at": "2026-06-16T22:37:53Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2604.06367v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.06367",
      "catalog_id": "arxiv:2604.06367",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-07",
      "identifiers": {
        "arxiv": "2604.06367"
      },
      "record_updated_at": "2026-06-16"
    },
    "genre": "preprint",
    "id": "arxiv:2604.06367",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          7
        ]
      ]
    },
    "note": "First published: 2026-04-07; Recorded arXiv version: v2; Recorded version updated: 2026-06-16T22:37:53Z.",
    "title": "WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2604.07831v2",
    "archive": "arXiv",
    "archive_location": "2604.07831",
    "author": [
      {
        "literal": "Wenkui Yang"
      },
      {
        "literal": "Chao Jin"
      },
      {
        "literal": "Haisu Zhu"
      },
      {
        "literal": "Weilin Luo"
      },
      {
        "literal": "Derek Yuen"
      },
      {
        "literal": "Kun Shao"
      },
      {
        "literal": "Junxian Duan"
      },
      {
        "literal": "Huaibo Huang"
      },
      {
        "literal": "Jie Cao"
      },
      {
        "literal": "Ran He"
      }
    ],
    "citation-key": "arxiv_2604_07831",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a5427eedff0e97f9c73101403754c38e8928ad71abab7b7eff5f136a30ee2205",
        "submitted_at": "2026-04-09T05:32:34Z",
        "updated_at": "2026-07-08T02:39:35Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2604.07831v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.07831",
      "catalog_id": "arxiv:2604.07831",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-09",
      "identifiers": {
        "arxiv": "2604.07831"
      },
      "record_updated_at": "2026-07-08"
    },
    "genre": "preprint",
    "id": "arxiv:2604.07831",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          9
        ]
      ]
    },
    "note": "First published: 2026-04-09; Recorded arXiv version: v2; Recorded version updated: 2026-07-08T02:39:35Z.",
    "title": "Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2604.09155v1",
    "archive": "arXiv",
    "archive_location": "2604.09155",
    "author": [
      {
        "literal": "Yushi Feng"
      },
      {
        "literal": "Junye Du"
      },
      {
        "literal": "Qifan Wang"
      },
      {
        "literal": "Zizhan Ma"
      },
      {
        "literal": "Qian Niu"
      },
      {
        "literal": "Yutaka Matsuo"
      },
      {
        "literal": "Long Feng"
      },
      {
        "literal": "Lequan Yu"
      }
    ],
    "citation-key": "arxiv_2604_09155",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e53647528b9ee9d98f93ee665d0d886f9b400a129873e240704041df291f5749",
        "submitted_at": "2026-04-10T09:41:21Z",
        "updated_at": "2026-04-10T09:41:21Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2604.09155v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.09155",
      "catalog_id": "arxiv:2604.09155",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-10",
      "identifiers": {
        "arxiv": "2604.09155"
      },
      "record_updated_at": "2026-04-10"
    },
    "genre": "preprint",
    "id": "arxiv:2604.09155",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          10
        ]
      ]
    },
    "note": "First published: 2026-04-10; Recorded arXiv version: v1; Recorded version updated: 2026-04-10T09:41:21Z.",
    "title": "CORA: Conformal Risk-Controlled Agents for Safeguarded Mobile GUI Automation",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2604.12284v1",
    "archive": "arXiv",
    "archive_location": "2604.12284",
    "author": [
      {
        "literal": "Yulin Chen"
      },
      {
        "literal": "Tri Cao"
      },
      {
        "literal": "Haoran Li"
      },
      {
        "literal": "Yue Liu"
      },
      {
        "literal": "Yibo Li"
      },
      {
        "literal": "Yufei He"
      },
      {
        "literal": "Le Minh Khoi"
      },
      {
        "literal": "Yangqiu Song"
      },
      {
        "literal": "Shuicheng Yan"
      },
      {
        "literal": "Bryan Hooi"
      }
    ],
    "citation-key": "arxiv_2604_12284",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "64d4323050a5ad0f7265231337eb22a4c0823cee41587099c8bdc5db6b320dea",
        "submitted_at": "2026-04-14T04:50:35Z",
        "updated_at": "2026-04-14T04:50:35Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2604.12284v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.12284",
      "catalog_id": "arxiv:2604.12284",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-14",
      "identifiers": {
        "arxiv": "2604.12284"
      },
      "record_updated_at": "2026-04-14"
    },
    "genre": "preprint",
    "id": "arxiv:2604.12284",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          14
        ]
      ]
    },
    "note": "First published: 2026-04-14; Recorded arXiv version: v1; Recorded version updated: 2026-04-14T04:50:35Z.",
    "title": "WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2604.16515v1",
    "archive": "arXiv",
    "archive_location": "2604.16515",
    "author": [
      {
        "literal": "Jiachen Qian"
      },
      {
        "literal": "Zhaolu Kang"
      }
    ],
    "citation-key": "arxiv_2604_16515",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "64e47028e752dd023e71414664a193beba74e1c4f1afe765fdf992d560dbea27",
        "submitted_at": "2026-04-15T10:46:38Z",
        "updated_at": "2026-04-15T10:46:38Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2604.16515v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.16515",
      "catalog_id": "arxiv:2604.16515",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-15",
      "identifiers": {
        "arxiv": "2604.16515"
      },
      "record_updated_at": "2026-04-15"
    },
    "genre": "preprint",
    "id": "arxiv:2604.16515",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          15
        ]
      ]
    },
    "note": "First published: 2026-04-15; Recorded arXiv version: v1; Recorded version updated: 2026-04-15T10:46:38Z.",
    "title": "Penny Wise, Pixel Foolish: Bypassing Price Constraints in Multimodal Agents via Visual Adversarial Perturbations",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2604.16548v3",
    "archive": "arXiv",
    "archive_location": "2604.16548",
    "author": [
      {
        "literal": "Zehao Lin"
      },
      {
        "literal": "Xixuan Hao"
      },
      {
        "literal": "Renyu Fu"
      },
      {
        "literal": "Shaobo Cui"
      },
      {
        "literal": "Kai Chen"
      },
      {
        "literal": "Chunyu Li"
      },
      {
        "literal": "Zhiyu Li"
      },
      {
        "literal": "Feiyu Xiong"
      }
    ],
    "citation-key": "arxiv_2604_16548",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "fb75ea30086ecf069d8adda1513a6e906cfcfcedcd4cab01d0986a850aa8009a",
        "submitted_at": "2026-04-17T06:28:22Z",
        "updated_at": "2026-09-22T07:33:24Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2604.16548v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.16548",
      "catalog_id": "arxiv:2604.16548",
      "catalog_kind": "survey",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2026-04-17",
      "identifiers": {
        "arxiv": "2604.16548"
      },
      "record_updated_at": "2026-09-22"
    },
    "genre": "preprint",
    "id": "arxiv:2604.16548",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          17
        ]
      ]
    },
    "note": "First published: 2026-04-17; Recorded arXiv version: v3; Recorded version updated: 2026-09-22T07:33:24Z.",
    "title": "A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2604.18860v1",
    "archive": "arXiv",
    "archive_location": "2604.18860",
    "author": [
      {
        "literal": "Wenpeng Xu"
      }
    ],
    "citation-key": "arxiv_2604_18860",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "8eb499729268ef287a9b9bf73275f526d47dabf2d7de399beaead2fe54cfd74e",
        "submitted_at": "2026-04-20T21:36:16Z",
        "updated_at": "2026-04-20T21:36:16Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2604.18860v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.18860",
      "catalog_id": "arxiv:2604.18860",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-20",
      "identifiers": {
        "arxiv": "2604.18860"
      },
      "record_updated_at": "2026-04-20"
    },
    "genre": "preprint",
    "id": "arxiv:2604.18860",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          20
        ]
      ]
    },
    "note": "First published: 2026-04-20; Recorded arXiv version: v1; Recorded version updated: 2026-04-20T21:36:16Z.",
    "title": "Temporal UI State Inconsistency in Desktop GUI Agents: Formalizing and Defending Against TOCTOU Attacks on Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2604.24348v1",
    "archive": "arXiv",
    "archive_location": "2604.24348",
    "author": [
      {
        "literal": "Zheng Wu"
      },
      {
        "literal": "Yi Hua"
      },
      {
        "literal": "Zhaoyuan Huang"
      },
      {
        "literal": "Chenhao Xue"
      },
      {
        "literal": "Yijie Lu"
      },
      {
        "literal": "Pengzhou Cheng"
      },
      {
        "literal": "Zongru Wu"
      },
      {
        "literal": "Lingzhong Dong"
      },
      {
        "literal": "Gongshen Liu"
      },
      {
        "literal": "Xinghao Jiang"
      },
      {
        "literal": "Zhuosheng Zhang"
      }
    ],
    "citation-key": "arxiv_2604_24348",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "772420683208561df8493c9ed5d68b341e9e098f5729945b972f3555e976d799",
        "submitted_at": "2026-04-27T11:44:26Z",
        "updated_at": "2026-04-27T11:44:26Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2604.24348v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.24348",
      "catalog_id": "arxiv:2604.24348",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-27",
      "identifiers": {
        "arxiv": "2604.24348"
      },
      "record_updated_at": "2026-04-27"
    },
    "genre": "preprint",
    "id": "arxiv:2604.24348",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          27
        ]
      ]
    },
    "note": "First published: 2026-04-27; Recorded arXiv version: v1; Recorded version updated: 2026-04-27T11:44:26Z.",
    "title": "OS-SPEAR: A Toolkit for the Safety, Performance,Efficiency, and Robustness Analysis of OS Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2604.25562v1",
    "archive": "arXiv",
    "archive_location": "2604.25562",
    "author": [
      {
        "literal": "Mengyao Du"
      },
      {
        "literal": "Han Fang"
      },
      {
        "literal": "Haokai Ma"
      },
      {
        "literal": "Jiahao Chen"
      },
      {
        "literal": "Kai Xu"
      },
      {
        "literal": "Quanjun Yin"
      },
      {
        "literal": "Ee-Chien Chang"
      }
    ],
    "citation-key": "arxiv_2604_25562",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "d2610c2658221d7da0bd888bf7b143ca6c4175791058570f6562cfa0c8c3a946",
        "submitted_at": "2026-04-28T12:32:21Z",
        "updated_at": "2026-04-28T12:32:21Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2604.25562v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2604.25562",
      "catalog_id": "arxiv:2604.25562",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-04-28",
      "identifiers": {
        "arxiv": "2604.25562"
      },
      "record_updated_at": "2026-04-28"
    },
    "genre": "preprint",
    "id": "arxiv:2604.25562",
    "issued": {
      "date-parts": [
        [
          2026,
          4,
          28
        ]
      ]
    },
    "note": "First published: 2026-04-28; Recorded arXiv version: v1; Recorded version updated: 2026-04-28T12:32:21Z.",
    "title": "SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2605.05509v1",
    "archive": "arXiv",
    "archive_location": "2605.05509",
    "author": [
      {
        "literal": "Sohom Datta"
      },
      {
        "literal": "Alex Nahapetyan"
      },
      {
        "literal": "William Enck"
      },
      {
        "literal": "Alexandros Kapravelos"
      }
    ],
    "citation-key": "arxiv_2605_05509",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "0ff44befcfdb97b67d1680c97784f9e9665d8d9879c093984f42d06c9516a342",
        "submitted_at": "2026-05-06T23:19:38Z",
        "updated_at": "2026-05-06T23:19:38Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2605.05509v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2605.05509",
      "catalog_id": "arxiv:2605.05509",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-05-06",
      "identifiers": {
        "arxiv": "2605.05509"
      },
      "record_updated_at": "2026-05-06"
    },
    "genre": "preprint",
    "id": "arxiv:2605.05509",
    "issued": {
      "date-parts": [
        [
          2026,
          5,
          6
        ]
      ]
    },
    "note": "First published: 2026-05-06; Recorded arXiv version: v1; Recorded version updated: 2026-05-06T23:19:38Z.",
    "title": "WAAA! Web Adversaries Against Agentic Browsers",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2605.09497v1",
    "archive": "arXiv",
    "archive_location": "2605.09497",
    "author": [
      {
        "literal": "Yilin Zhang"
      },
      {
        "literal": "Yingkai Hua"
      },
      {
        "literal": "Chunyu Wei"
      },
      {
        "literal": "Xin Wang"
      },
      {
        "literal": "Yueguo Chen"
      }
    ],
    "citation-key": "arxiv_2605_09497",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "b57d784c70b50d2c25055c6d139c0a5acfc97da3a4effbd63536b72d6df38a69",
        "submitted_at": "2026-05-10T12:11:52Z",
        "updated_at": "2026-05-10T12:11:52Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2605.09497v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2605.09497",
      "catalog_id": "arxiv:2605.09497",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-05-10",
      "identifiers": {
        "arxiv": "2605.09497"
      },
      "record_updated_at": "2026-05-10"
    },
    "genre": "preprint",
    "id": "arxiv:2605.09497",
    "issued": {
      "date-parts": [
        [
          2026,
          5,
          10
        ]
      ]
    },
    "note": "First published: 2026-05-10; Recorded arXiv version: v1; Recorded version updated: 2026-05-10T12:11:52Z.",
    "title": "Don't Click That: Teaching Web Agents to Resist Deceptive Interfaces",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2605.14290v1",
    "archive": "arXiv",
    "archive_location": "2605.14290",
    "author": [
      {
        "literal": "Julien Piet"
      },
      {
        "literal": "Annabella Chow"
      },
      {
        "literal": "Yiwei Hou"
      },
      {
        "literal": "Muxi Lyu"
      },
      {
        "literal": "Sylvie Venuto"
      },
      {
        "literal": "Jinhao Zhu"
      },
      {
        "literal": "Raluca Ada Popa"
      },
      {
        "literal": "David Wagner"
      }
    ],
    "citation-key": "arxiv_2605_14290",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "572be49190554bbfb6accac4c87ef91608f88e90d06250f229db2922e19fcd56",
        "submitted_at": "2026-05-14T02:48:57Z",
        "updated_at": "2026-05-14T02:48:57Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2605.14290v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2605.14290",
      "catalog_id": "arxiv:2605.14290",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2026-05-14",
      "identifiers": {
        "arxiv": "2605.14290"
      },
      "record_updated_at": "2026-05-14"
    },
    "genre": "preprint",
    "id": "arxiv:2605.14290",
    "issued": {
      "date-parts": [
        [
          2026,
          5,
          14
        ]
      ]
    },
    "note": "First published: 2026-05-14; Recorded arXiv version: v1; Recorded version updated: 2026-05-14T02:48:57Z.",
    "title": "Web Agents Should Adopt the Plan-Then-Execute Paradigm",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2605.17320v1",
    "archive": "arXiv",
    "archive_location": "2605.17320",
    "author": [
      {
        "literal": "Yutong Huang"
      },
      {
        "literal": "Vikranth Srivatsa"
      },
      {
        "literal": "Alex Asch"
      },
      {
        "literal": "Hansin Tushar Patwa"
      },
      {
        "literal": "Yiying Zhang"
      }
    ],
    "citation-key": "arxiv_2605_17320",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "51576fb9bde23f769d3200a0d593ad610eb27248917132aff1bcf6eb7ff03cea",
        "submitted_at": "2026-05-17T08:24:01Z",
        "updated_at": "2026-05-17T08:24:01Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2605.17320v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2605.17320",
      "catalog_id": "arxiv:2605.17320",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-05-17",
      "identifiers": {
        "arxiv": "2605.17320"
      },
      "record_updated_at": "2026-05-17"
    },
    "genre": "preprint",
    "id": "arxiv:2605.17320",
    "issued": {
      "date-parts": [
        [
          2026,
          5,
          17
        ]
      ]
    },
    "note": "First published: 2026-05-17; Recorded arXiv version: v1; Recorded version updated: 2026-05-17T08:24:01Z.",
    "title": "TClone: Low-Latency Forking of Live GUI Environments for Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2605.28116v1",
    "archive": "arXiv",
    "archive_location": "2605.28116",
    "author": [
      {
        "literal": "Ruoqi Guo"
      },
      {
        "literal": "Yi Liu"
      },
      {
        "literal": "Gelei Deng"
      },
      {
        "literal": "Yiheng Xiong"
      },
      {
        "literal": "Yuekang Li"
      },
      {
        "literal": "Ying Zhang"
      },
      {
        "literal": "Leo Yu Zhang"
      },
      {
        "literal": "Lida Zhao"
      },
      {
        "literal": "Ji Jie"
      },
      {
        "literal": "Yuxiao Lu"
      }
    ],
    "citation-key": "arxiv_2605_28116",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "4f39433695b9574b275fc844ca6b10a43baf66aed57048bf841f41bf08d4ac9a",
        "submitted_at": "2026-05-27T08:09:53Z",
        "updated_at": "2026-05-27T08:09:53Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2605.28116v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2605.28116",
      "catalog_id": "arxiv:2605.28116",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-05-27",
      "identifiers": {
        "arxiv": "2605.28116"
      },
      "record_updated_at": "2026-05-27"
    },
    "genre": "preprint",
    "id": "arxiv:2605.28116",
    "issued": {
      "date-parts": [
        [
          2026,
          5,
          27
        ]
      ]
    },
    "note": "First published: 2026-05-27; Recorded arXiv version: v1; Recorded version updated: 2026-05-27T08:09:53Z.",
    "title": "MIRAGE: Context-Aware Prompt Injection against Mobile GUI Agents via User-Generated Content",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2605.28646v2",
    "archive": "arXiv",
    "archive_location": "2605.28646",
    "author": [
      {
        "literal": "Yanqiu Zhao"
      },
      {
        "literal": "Dongying Zheng"
      },
      {
        "literal": "Kaibo Huang"
      },
      {
        "literal": "Yukun Wei"
      },
      {
        "literal": "Zhongliang Yang"
      },
      {
        "literal": "Linna Zhou"
      }
    ],
    "citation-key": "arxiv_2605_28646",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "6eb9b67f7e51edecfbe57af47b6bad445c05129c11c377d32ea84369b430f895",
        "submitted_at": "2026-05-27T15:51:22Z",
        "updated_at": "2026-05-29T04:03:46Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2605.28646v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2605.28646",
      "catalog_id": "arxiv:2605.28646",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-05-27",
      "identifiers": {
        "arxiv": "2605.28646"
      },
      "record_updated_at": "2026-05-29"
    },
    "genre": "preprint",
    "id": "arxiv:2605.28646",
    "issued": {
      "date-parts": [
        [
          2026,
          5,
          27
        ]
      ]
    },
    "note": "First published: 2026-05-27; Recorded arXiv version: v2; Recorded version updated: 2026-05-29T04:03:46Z.",
    "title": "MaskClaw: Edge-Side Personalized Privacy Arbitration for GUI Agents with Behavior-Driven Skill Evolution",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2606.03203v1",
    "archive": "arXiv",
    "archive_location": "2606.03203",
    "author": [
      {
        "literal": "Jia Yu"
      },
      {
        "literal": "Zilong Wang"
      },
      {
        "literal": "Xinyang Jiang"
      },
      {
        "literal": "Dongsheng Li"
      },
      {
        "literal": "Shuo Wang"
      }
    ],
    "citation-key": "arxiv_2606_03203",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "b23c12cafdd2d4a3ef63027c914ed3894c61c555edd89468c56ae40c3ec6cea9",
        "submitted_at": "2026-06-02T06:02:35Z",
        "updated_at": "2026-06-02T06:02:35Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2606.03203v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.03203",
      "catalog_id": "arxiv:2606.03203",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-02",
      "identifiers": {
        "arxiv": "2606.03203"
      },
      "record_updated_at": "2026-06-02"
    },
    "genre": "preprint",
    "id": "arxiv:2606.03203",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          2
        ]
      ]
    },
    "note": "First published: 2026-06-02; Recorded arXiv version: v1; Recorded version updated: 2026-06-02T06:02:35Z.",
    "title": "MedCUA-Bench: A Screenshot-Only Benchmark for Clinical Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2606.05233v1",
    "archive": "arXiv",
    "archive_location": "2606.05233",
    "author": [
      {
        "literal": "Nicholas Saban"
      }
    ],
    "citation-key": "arxiv_2606_05233",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7b649c0cef63bc15558aa4498a65043644c109faaf6403b610c2132fd3f5706d",
        "submitted_at": "2026-06-03T01:21:59Z",
        "updated_at": "2026-06-03T01:21:59Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2606.05233v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.05233",
      "catalog_id": "arxiv:2606.05233",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-03",
      "identifiers": {
        "arxiv": "2606.05233"
      },
      "record_updated_at": "2026-06-03"
    },
    "genre": "preprint",
    "id": "arxiv:2606.05233",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          3
        ]
      ]
    },
    "note": "First published: 2026-06-03; Recorded arXiv version: v1; Recorded version updated: 2026-06-03T01:21:59Z.",
    "title": "Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2606.12666v2",
    "archive": "arXiv",
    "archive_location": "2606.12666",
    "author": [
      {
        "literal": "Siyu Shen"
      },
      {
        "literal": "Fenghao Xu"
      },
      {
        "literal": "Wenrui Diao"
      },
      {
        "literal": "Kehuan Zhang"
      }
    ],
    "citation-key": "arxiv_2606_12666",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "fed1c6e109cc5d34aebe3bb333955e8bf792264d4c1ed0893d76534a77649afd",
        "submitted_at": "2026-06-10T20:48:39Z",
        "updated_at": "2026-06-16T03:15:00Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2606.12666v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.12666",
      "catalog_id": "arxiv:2606.12666",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-10",
      "identifiers": {
        "arxiv": "2606.12666"
      },
      "record_updated_at": "2026-06-16"
    },
    "genre": "preprint",
    "id": "arxiv:2606.12666",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          10
        ]
      ]
    },
    "note": "First published: 2026-06-10; Recorded arXiv version: v2; Recorded version updated: 2026-06-16T03:15:00Z.",
    "title": "CAPED: Context-Aware Privacy Exposure Defense for Mobile GUI Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2606.13385v2",
    "archive": "arXiv",
    "archive_location": "2606.13385",
    "author": [
      {
        "literal": "Zihao Wang"
      },
      {
        "literal": "Yiming Li"
      },
      {
        "literal": "Yutong Wu"
      },
      {
        "literal": "Kangjie Chen"
      },
      {
        "literal": "Zheyu Liu"
      },
      {
        "literal": "Fok Kar Wai"
      },
      {
        "literal": "Pin-Yu Chen"
      },
      {
        "literal": "Vrizlynn L. L. Thing"
      },
      {
        "literal": "Bo Li"
      },
      {
        "literal": "Dacheng Tao"
      },
      {
        "literal": "Tianwei Zhang"
      }
    ],
    "citation-key": "arxiv_2606_13385",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "88b7e2ee8717661e4f8b417916e35b844171ecd8a8a2add657cf341c8f759536",
        "submitted_at": "2026-06-11T14:12:43Z",
        "updated_at": "2026-07-27T14:19:24Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2606.13385v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.13385",
      "catalog_id": "arxiv:2606.13385",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-11",
      "identifiers": {
        "arxiv": "2606.13385"
      },
      "record_updated_at": "2026-07-27"
    },
    "genre": "preprint",
    "id": "arxiv:2606.13385",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          11
        ]
      ]
    },
    "note": "First published: 2026-06-11; Recorded arXiv version: v2; Recorded version updated: 2026-07-27T14:19:24Z.",
    "title": "Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2606.15034v3",
    "archive": "arXiv",
    "archive_location": "2606.15034",
    "author": [
      {
        "literal": "Mina Mohammadmirzaei"
      },
      {
        "literal": "Jeffrey Flanigan"
      }
    ],
    "citation-key": "arxiv_2606_15034",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7bf0297fba942441b19bcfeba147838bdef888b428f1150c2462d8bf3d986882",
        "submitted_at": "2026-06-13T00:32:24Z",
        "updated_at": "2026-10-09T19:45:15Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2606.15034v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.15034",
      "catalog_id": "arxiv:2606.15034",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-13",
      "identifiers": {
        "arxiv": "2606.15034"
      },
      "record_updated_at": "2026-10-09"
    },
    "genre": "preprint",
    "id": "arxiv:2606.15034",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          13
        ]
      ]
    },
    "note": "First published: 2026-06-13; Recorded arXiv version: v3; Recorded version updated: 2026-10-09T19:45:15Z.",
    "title": "OSGuard: A Benchmark for Safety in Computer-Use Agents",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2606.16659v1",
    "archive": "arXiv",
    "archive_location": "2606.16659",
    "author": [
      {
        "literal": "Y. H. Zhou"
      },
      {
        "literal": "Z. M. Ma"
      },
      {
        "literal": "Y. J. Zhou"
      },
      {
        "literal": "Y. T. Li"
      },
      {
        "literal": "H. X. Xiang"
      },
      {
        "literal": "Y. M. Cheng"
      },
      {
        "literal": "T. L. Chen"
      },
      {
        "literal": "K. J. Zhang"
      },
      {
        "literal": "Z. H. Nan"
      },
      {
        "literal": "J. H. Ni"
      },
      {
        "literal": "Z. Wu"
      },
      {
        "literal": "Q. Y. Pan"
      },
      {
        "literal": "S. Zhang"
      },
      {
        "literal": "S. Cheng"
      },
      {
        "literal": "M. Y. Luo"
      }
    ],
    "citation-key": "arxiv_2606_16659",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "6311b22ddb2262c74efbe79acc8856335f6870aa24197c507f3f7b048d6f7901",
        "submitted_at": "2026-06-15T12:53:55Z",
        "updated_at": "2026-06-15T12:53:55Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2606.16659v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.16659",
      "catalog_id": "arxiv:2606.16659",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-15",
      "identifiers": {
        "arxiv": "2606.16659"
      },
      "record_updated_at": "2026-06-15"
    },
    "genre": "preprint",
    "id": "arxiv:2606.16659",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          15
        ]
      ]
    },
    "note": "First published: 2026-06-15; Recorded arXiv version: v1; Recorded version updated: 2026-06-15T12:53:55Z.",
    "title": "FraudSMSWalker: Benchmarking Agentic Large Language Models for SMS-to-Webpage Fraud Detection",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2606.20717v2",
    "archive": "arXiv",
    "archive_location": "2606.20717",
    "author": [
      {
        "literal": "Xuelong Dai"
      },
      {
        "literal": "Jianyu Ma"
      },
      {
        "literal": "Boyang Ma"
      },
      {
        "literal": "Biwei Yan"
      },
      {
        "literal": "Yijun Yang"
      },
      {
        "literal": "Yue Zhang"
      }
    ],
    "citation-key": "arxiv_2606_20717",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "fea441692131ec677e4a9ae54f9ecef1f31d422e20884b496b124e99392e59c1",
        "submitted_at": "2026-06-16T15:31:33Z",
        "updated_at": "2026-10-15T04:29:19Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2606.20717v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.20717",
      "catalog_id": "arxiv:2606.20717",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-16",
      "identifiers": {
        "arxiv": "2606.20717"
      },
      "record_updated_at": "2026-10-15"
    },
    "genre": "preprint",
    "id": "arxiv:2606.20717",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          16
        ]
      ]
    },
    "note": "First published: 2026-06-16; Recorded arXiv version: v2; Recorded version updated: 2026-10-15T04:29:19Z.",
    "title": "MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2606.20910v1",
    "archive": "arXiv",
    "archive_location": "2606.20910",
    "author": [
      {
        "literal": "Dayeon Kang"
      },
      {
        "literal": "Hyejun Jeong"
      },
      {
        "literal": "Jade Sheffey"
      },
      {
        "literal": "Pubali Datta"
      },
      {
        "literal": "Amir Houmansadr"
      }
    ],
    "citation-key": "arxiv_2606_20910",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "8b2c6080f0de11c06fe73c30195c7c8529e07de283dc45fa47709072846d385a",
        "submitted_at": "2026-06-18T20:07:39Z",
        "updated_at": "2026-06-18T20:07:39Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2606.20910v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.20910",
      "catalog_id": "arxiv:2606.20910",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-18",
      "identifiers": {
        "arxiv": "2606.20910"
      },
      "record_updated_at": "2026-06-18"
    },
    "genre": "preprint",
    "id": "arxiv:2606.20910",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          18
        ]
      ]
    },
    "note": "First published: 2026-06-18; Recorded arXiv version: v1; Recorded version updated: 2026-06-18T20:07:39Z.",
    "title": "Whose Agent Are You? Multi-Layer Fingerprinting and Attribution of Autonomous Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2606.23189v2",
    "archive": "arXiv",
    "archive_location": "2606.23189",
    "author": [
      {
        "literal": "Anmol Goel"
      },
      {
        "literal": "Iryna Gurevych"
      }
    ],
    "citation-key": "arxiv_2606_23189",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "da8190bc5afc0bae400fc8ab5e7d80a7f34488c3400dce4477ca61635b19d5b7",
        "submitted_at": "2026-06-22T11:36:58Z",
        "updated_at": "2026-09-10T18:49:54Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2606.23189v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.23189",
      "catalog_id": "arxiv:2606.23189",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-22",
      "identifiers": {
        "arxiv": "2606.23189"
      },
      "record_updated_at": "2026-09-10"
    },
    "genre": "preprint",
    "id": "arxiv:2606.23189",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          22
        ]
      ]
    },
    "note": "First published: 2026-06-22; Recorded arXiv version: v2; Recorded version updated: 2026-09-10T18:49:54Z.",
    "title": "Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2606.25705v1",
    "archive": "arXiv",
    "archive_location": "2606.25705",
    "author": [
      {
        "literal": "Aradhana Nayak"
      },
      {
        "literal": "Mussadiq Nazeer"
      },
      {
        "literal": "Wang Peng"
      },
      {
        "literal": "Feng Liu"
      }
    ],
    "citation-key": "arxiv_2606_25705",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3c5a2d0e461b011e2d5b9dbd73012d007261d8df37bd1d687fa3bd86dc6f2246",
        "submitted_at": "2026-06-24T11:18:01Z",
        "updated_at": "2026-06-24T11:18:01Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2606.25705v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.25705",
      "catalog_id": "arxiv:2606.25705",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-24",
      "identifiers": {
        "arxiv": "2606.25705"
      },
      "record_updated_at": "2026-06-24"
    },
    "genre": "preprint",
    "id": "arxiv:2606.25705",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          24
        ]
      ]
    },
    "note": "First published: 2026-06-24; Recorded arXiv version: v1; Recorded version updated: 2026-06-24T11:18:01Z.",
    "title": "GUI agent: Guided Exploration of User-Sensitive Screens",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2606.25760v2",
    "archive": "arXiv",
    "archive_location": "2606.25760",
    "author": [
      {
        "literal": "Divake Kumar"
      },
      {
        "literal": "Sina Tayebati"
      },
      {
        "literal": "Devashri Naik"
      },
      {
        "literal": "Amanda Sofie Rios"
      },
      {
        "literal": "Nilesh Ahuja"
      },
      {
        "literal": "Omesh Tickoo"
      },
      {
        "literal": "Ranganath Krishnan"
      },
      {
        "literal": "Amit Ranjan Trivedi"
      }
    ],
    "citation-key": "arxiv_2606_25760",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "628d08bdbf23ae9e599bf767f0503cecedcde72dfbfcc183f9ea9f044c6f2d44",
        "submitted_at": "2026-06-24T12:34:28Z",
        "updated_at": "2026-09-29T20:55:51Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2606.25760v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.25760",
      "catalog_id": "arxiv:2606.25760",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-24",
      "identifiers": {
        "arxiv": "2606.25760"
      },
      "record_updated_at": "2026-09-29"
    },
    "genre": "preprint",
    "id": "arxiv:2606.25760",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          24
        ]
      ]
    },
    "note": "First published: 2026-06-24; Recorded arXiv version: v2; Recorded version updated: 2026-09-29T20:55:51Z.",
    "title": "Uncertainty Quantification for Computer-Use Agents: A Benchmark across Vision-Language Models and GUI Grounding Datasets",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2606.30119v1",
    "archive": "arXiv",
    "archive_location": "2606.30119",
    "author": [
      {
        "literal": "Iliana Fayolle"
      },
      {
        "literal": "Sihem Bouhenniche"
      },
      {
        "literal": "Samuel Pélissier"
      },
      {
        "literal": "Pierre Laperdrix"
      },
      {
        "literal": "Clémentine Maurice"
      },
      {
        "literal": "Walter Rudametkin"
      }
    ],
    "citation-key": "arxiv_2606_30119",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "770c901e3490b2a43b02296136825e8e6bd035fb7494ea74b3a9af74be1afed1",
        "submitted_at": "2026-06-29T10:51:13Z",
        "updated_at": "2026-06-29T10:51:13Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2606.30119v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2606.30119",
      "catalog_id": "arxiv:2606.30119",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-06-29",
      "identifiers": {
        "arxiv": "2606.30119"
      },
      "record_updated_at": "2026-06-29"
    },
    "genre": "preprint",
    "id": "arxiv:2606.30119",
    "issued": {
      "date-parts": [
        [
          2026,
          6,
          29
        ]
      ]
    },
    "note": "First published: 2026-06-29; Recorded arXiv version: v1; Recorded version updated: 2026-06-29T10:51:13Z.",
    "title": "On the Internet, Nobody Knows You're an LLM Bot: Unmasking Web Agents with Multi-Layer Fingerprinting",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2607.00333v2",
    "archive": "arXiv",
    "archive_location": "2607.00333",
    "author": [
      {
        "literal": "Zidong Zhang"
      },
      {
        "literal": "Zhentao Xie"
      },
      {
        "literal": "Wenrui Diao"
      },
      {
        "literal": "Jianliang Wu"
      }
    ],
    "citation-key": "arxiv_2607_00333",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "cd4d31e477d5915626d471682e52e5cd6083d9b0c67196f6de5de2a29c6a3058",
        "submitted_at": "2026-07-01T02:17:19Z",
        "updated_at": "2026-07-14T03:01:43Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2607.00333v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2607.00333",
      "catalog_id": "arxiv:2607.00333",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-01",
      "identifiers": {
        "arxiv": "2607.00333"
      },
      "record_updated_at": "2026-07-14"
    },
    "genre": "preprint",
    "id": "arxiv:2607.00333",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          1
        ]
      ]
    },
    "note": "First published: 2026-07-01; Recorded arXiv version: v2; Recorded version updated: 2026-07-14T03:01:43Z.",
    "title": "(A)I Sees What You Don't: Exploiting New Attack Surfaces in Third-Party Mobile Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2607.04334v2",
    "archive": "arXiv",
    "archive_location": "2607.04334",
    "author": [
      {
        "literal": "Guijia Zhang"
      },
      {
        "literal": "Yuxun Chen"
      },
      {
        "literal": "Yuheng Qi"
      },
      {
        "literal": "Harry Yang"
      }
    ],
    "citation-key": "arxiv_2607_04334",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e7fdae5d6e5ea17639fe0e2b8e2d655df7201a438d84acdeb3e0d02a78051ae2",
        "submitted_at": "2026-07-05T14:33:29Z",
        "updated_at": "2026-07-18T16:56:38Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2607.04334v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2607.04334",
      "catalog_id": "arxiv:2607.04334",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-05",
      "identifiers": {
        "arxiv": "2607.04334"
      },
      "record_updated_at": "2026-07-18"
    },
    "genre": "preprint",
    "id": "arxiv:2607.04334",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          5
        ]
      ]
    },
    "note": "First published: 2026-07-05; Recorded arXiv version: v2; Recorded version updated: 2026-07-18T16:56:38Z.",
    "title": "Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2607.05120v1",
    "archive": "arXiv",
    "archive_location": "2607.05120",
    "author": [
      {
        "literal": "Woohyuk Choi"
      },
      {
        "literal": "Juhee Kim"
      },
      {
        "literal": "Taehyun Kang"
      },
      {
        "literal": "Jihyeon Jeong"
      },
      {
        "literal": "Luyi Xing"
      },
      {
        "literal": "Byoungyoung Lee"
      }
    ],
    "citation-key": "arxiv_2607_05120",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "c5fb30b8be2c6e452471e6398720291ec59a2c5ef96e64baca0735fb01b7a12e",
        "submitted_at": "2026-07-06T14:07:49Z",
        "updated_at": "2026-07-06T14:07:49Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2607.05120v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2607.05120",
      "catalog_id": "arxiv:2607.05120",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-06",
      "identifiers": {
        "arxiv": "2607.05120"
      },
      "record_updated_at": "2026-07-06"
    },
    "genre": "preprint",
    "id": "arxiv:2607.05120",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          6
        ]
      ]
    },
    "note": "First published: 2026-07-06; Recorded arXiv version: v1; Recorded version updated: 2026-07-06T14:07:49Z.",
    "title": "Agent Data Injection Attacks are Realistic Threats to AI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2607.05277v1",
    "archive": "arXiv",
    "archive_location": "2607.05277",
    "author": [
      {
        "literal": "Kristina Nikolić"
      },
      {
        "literal": "Egor Zverev"
      },
      {
        "literal": "Javier Rando"
      },
      {
        "literal": "Matthew Jagielski"
      },
      {
        "literal": "Edoardo Debenedetti"
      },
      {
        "literal": "Florian Tramèr"
      }
    ],
    "citation-key": "arxiv_2607_05277",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "97d6c625b6ebc08cec7471df543812a91c4252f50d8d35f8d51fbef802dcb5a2",
        "submitted_at": "2026-07-06T16:22:37Z",
        "updated_at": "2026-07-06T16:22:37Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2607.05277v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2607.05277",
      "catalog_id": "arxiv:2607.05277",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-06",
      "identifiers": {
        "arxiv": "2607.05277"
      },
      "record_updated_at": "2026-07-06"
    },
    "genre": "preprint",
    "id": "arxiv:2607.05277",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          6
        ]
      ]
    },
    "note": "First published: 2026-07-06; Recorded arXiv version: v1; Recorded version updated: 2026-07-06T16:22:37Z.",
    "title": "Untrusted Content Masking for Web Agents with Security Guarantees",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2607.10608v1",
    "archive": "arXiv",
    "archive_location": "2607.10608",
    "author": [
      {
        "literal": "Yixiong Chen"
      },
      {
        "literal": "Xinyi Bai"
      },
      {
        "literal": "Alan Yuille"
      }
    ],
    "citation-key": "arxiv_2607_10608",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "0473ced7881ed2007aa49c2767860c33719d5bf1c798dfe4771a4061b13d655e",
        "submitted_at": "2026-07-12T07:05:31Z",
        "updated_at": "2026-07-12T07:05:31Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2607.10608v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2607.10608",
      "catalog_id": "arxiv:2607.10608",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-12",
      "identifiers": {
        "arxiv": "2607.10608"
      },
      "record_updated_at": "2026-07-12"
    },
    "genre": "preprint",
    "id": "arxiv:2607.10608",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          12
        ]
      ]
    },
    "note": "First published: 2026-07-12; Recorded arXiv version: v1; Recorded version updated: 2026-07-12T07:05:31Z.",
    "title": "The Compliance Trap: Diagnosing How AI Agents Consume Conflicting Memory",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2607.15550v3",
    "archive": "arXiv",
    "archive_location": "2607.15550",
    "author": [
      {
        "literal": "Xue Yu"
      },
      {
        "literal": "Bo Yuan"
      },
      {
        "literal": "Kailin Zhao"
      },
      {
        "literal": "Pengshuai Yang"
      },
      {
        "literal": "Hong Hu"
      },
      {
        "literal": "Junlan Feng"
      }
    ],
    "citation-key": "arxiv_2607_15550",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "6a15963a7fb4dfd488f0e79732d9ea0c9a03d43c1e3d5e50dd1ee8e00f1072be",
        "submitted_at": "2026-07-17T01:45:54Z",
        "updated_at": "2026-09-02T01:49:21Z",
        "version": 3,
        "versioned_url": "https://arxiv.org/abs/2607.15550v3"
      },
      "canonical_source_url": "https://arxiv.org/abs/2607.15550",
      "catalog_id": "arxiv:2607.15550",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-17",
      "identifiers": {
        "arxiv": "2607.15550"
      },
      "record_updated_at": "2026-09-02"
    },
    "genre": "preprint",
    "id": "arxiv:2607.15550",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          17
        ]
      ]
    },
    "note": "First published: 2026-07-17; Recorded arXiv version: v3; Recorded version updated: 2026-09-02T01:49:21Z.",
    "title": "SeerGuard: A Safety Framework for Mobile GUI Agents via World Model Prediction",
    "type": "article",
    "version": "3"
  },
  {
    "URL": "https://arxiv.org/abs/2607.18659v1",
    "archive": "arXiv",
    "archive_location": "2607.18659",
    "author": [
      {
        "literal": "Behzad Ousat"
      },
      {
        "literal": "Nikita Turkmen"
      },
      {
        "literal": "Lalchandra Rampersaud"
      },
      {
        "literal": "Dillan Bailey"
      },
      {
        "literal": "Amin Kharraz"
      }
    ],
    "citation-key": "arxiv_2607_18659",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e382b15a9d25e99aa187a72c7d2a33bbeca82b2b347ba580ca0a1d73a8e01d19",
        "submitted_at": "2026-07-21T03:02:57Z",
        "updated_at": "2026-07-21T03:02:57Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2607.18659v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2607.18659",
      "catalog_id": "arxiv:2607.18659",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-21",
      "identifiers": {
        "arxiv": "2607.18659"
      },
      "record_updated_at": "2026-07-21"
    },
    "genre": "preprint",
    "id": "arxiv:2607.18659",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          21
        ]
      ]
    },
    "note": "First published: 2026-07-21; Recorded arXiv version: v1; Recorded version updated: 2026-07-21T03:02:57Z.",
    "title": "Broken Gates: Re-evaluating Web Bot Defenses in the Age of LLM Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.00202v1",
    "archive": "arXiv",
    "archive_location": "2608.00202",
    "author": [
      {
        "literal": "Yashaswi Malla"
      },
      {
        "literal": "Sandra Siby"
      }
    ],
    "citation-key": "arxiv_2608_00202",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "60c93c90e6d4026452810a866a0c49d57afdec15ad5ced30606c925a8e83c8f7",
        "submitted_at": "2026-07-31T18:27:12Z",
        "updated_at": "2026-07-31T18:27:12Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.00202v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.00202",
      "catalog_id": "arxiv:2608.00202",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-31",
      "identifiers": {
        "arxiv": "2608.00202"
      },
      "record_updated_at": "2026-07-31"
    },
    "genre": "preprint",
    "id": "arxiv:2608.00202",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          31
        ]
      ]
    },
    "note": "First published: 2026-07-31; Recorded arXiv version: v1; Recorded version updated: 2026-07-31T18:27:12Z.",
    "title": "From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.03740v2",
    "archive": "arXiv",
    "archive_location": "2608.03740",
    "author": [
      {
        "literal": "Yu Ran"
      },
      {
        "literal": "Wentao Zhao"
      }
    ],
    "citation-key": "arxiv_2608_03740",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "152e21cd4f1f290aafadfdcfaa10e15a03378404540a46b5f1a5464a2d432d23",
        "submitted_at": "2026-08-04T14:34:41Z",
        "updated_at": "2026-09-28T13:07:55Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2608.03740v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.03740",
      "catalog_id": "arxiv:2608.03740",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-04",
      "identifiers": {
        "arxiv": "2608.03740"
      },
      "record_updated_at": "2026-09-28"
    },
    "genre": "preprint",
    "id": "arxiv:2608.03740",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          4
        ]
      ]
    },
    "note": "First published: 2026-08-04; Recorded arXiv version: v2; Recorded version updated: 2026-09-28T13:07:55Z.",
    "title": "MissClick: Execution-Aware Adversarial Attacks on Coordinate Generation in GUI Grounding Models",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2608.04741v1",
    "archive": "arXiv",
    "archive_location": "2608.04741",
    "author": [
      {
        "literal": "Longtao Guo"
      },
      {
        "literal": "Zelin Zhang"
      },
      {
        "literal": "Kaifeng Huang"
      },
      {
        "literal": "Yang Shi"
      }
    ],
    "citation-key": "arxiv_2608_04741",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "30e5ce3d86881041491ae507839b2f3d302691aea1d2fdfc92cfc00f35efefe7",
        "submitted_at": "2026-08-05T12:08:16Z",
        "updated_at": "2026-08-05T12:08:16Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.04741v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.04741",
      "catalog_id": "arxiv:2608.04741",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-05",
      "identifiers": {
        "arxiv": "2608.04741"
      },
      "record_updated_at": "2026-08-05"
    },
    "genre": "preprint",
    "id": "arxiv:2608.04741",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          5
        ]
      ]
    },
    "note": "First published: 2026-08-05; Recorded arXiv version: v1; Recorded version updated: 2026-08-05T12:08:16Z.",
    "title": "LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.04755v1",
    "archive": "arXiv",
    "archive_location": "2608.04755",
    "author": [
      {
        "literal": "Dongsheng Chen"
      },
      {
        "literal": "Yuxuan Li"
      },
      {
        "literal": "Guanhua Chen"
      },
      {
        "literal": "Jiaxin Zhang"
      },
      {
        "literal": "Xiangyu Zhao"
      },
      {
        "literal": "Lei Ma"
      },
      {
        "literal": "Xin Yao"
      },
      {
        "literal": "Xuetao Wei"
      }
    ],
    "citation-key": "arxiv_2608_04755",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5f8b84135f72558eea1fae428df7cb30f62232631de49e690e73010aeca22d4c",
        "submitted_at": "2026-08-05T12:23:16Z",
        "updated_at": "2026-08-05T12:23:16Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.04755v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.04755",
      "catalog_id": "arxiv:2608.04755",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-05",
      "identifiers": {
        "arxiv": "2608.04755"
      },
      "record_updated_at": "2026-08-05"
    },
    "genre": "preprint",
    "id": "arxiv:2608.04755",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          5
        ]
      ]
    },
    "note": "First published: 2026-08-05; Recorded arXiv version: v1; Recorded version updated: 2026-08-05T12:23:16Z.",
    "title": "\"Allow\" to Achieve, Over-Privileged Inadvertently: The Unintended Cost of Task-Completion-Driven Pop-up Decisions in Mobile GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.08939v1",
    "archive": "arXiv",
    "archive_location": "2608.08939",
    "author": [
      {
        "literal": "Rahul Deivasigamani"
      },
      {
        "literal": "Sayeda Faatin Alvi"
      },
      {
        "literal": "Derqui Andrea"
      },
      {
        "literal": "Kaushal Punjabi"
      },
      {
        "literal": "Stjepan Picek"
      }
    ],
    "citation-key": "arxiv_2608_08939",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "64e4845ce85dd67b7790cf5de357f12deb72b71eb72031298e1064809099f063",
        "submitted_at": "2026-08-09T22:13:55Z",
        "updated_at": "2026-08-09T22:13:55Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.08939v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.08939",
      "catalog_id": "arxiv:2608.08939",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-09",
      "identifiers": {
        "arxiv": "2608.08939"
      },
      "record_updated_at": "2026-08-09"
    },
    "genre": "preprint",
    "id": "arxiv:2608.08939",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          9
        ]
      ]
    },
    "note": "First published: 2026-08-09; Recorded arXiv version: v1; Recorded version updated: 2026-08-09T22:13:55Z.",
    "title": "Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.14131v1",
    "archive": "arXiv",
    "archive_location": "2608.14131",
    "author": [
      {
        "literal": "Thilo Reintjes"
      },
      {
        "literal": "Sivajeet Chand"
      },
      {
        "literal": "Derui Zhu"
      },
      {
        "literal": "Sushant Kumar Pandey"
      },
      {
        "literal": "Alexander Pretschner"
      }
    ],
    "citation-key": "arxiv_2608_14131",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f8a6bd69d421bdfb9a21c22e715a59d0afb0b0cab75510f28ff569903ecffae5",
        "submitted_at": "2026-08-14T09:36:33Z",
        "updated_at": "2026-08-14T09:36:33Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.14131v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.14131",
      "catalog_id": "arxiv:2608.14131",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-14",
      "identifiers": {
        "arxiv": "2608.14131"
      },
      "record_updated_at": "2026-08-14"
    },
    "genre": "preprint",
    "id": "arxiv:2608.14131",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          14
        ]
      ]
    },
    "note": "First published: 2026-08-14; Recorded arXiv version: v1; Recorded version updated: 2026-08-14T09:36:33Z.",
    "title": "LegacyWorld: Atomicity-Aware Evaluation of GUI Agents for Legacy Workflows",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.17659v1",
    "archive": "arXiv",
    "archive_location": "2608.17659",
    "author": [
      {
        "literal": "Sujin Chen"
      },
      {
        "literal": "Lijun Li"
      },
      {
        "literal": "Tianyi Du"
      },
      {
        "literal": "Jing Shao"
      }
    ],
    "citation-key": "arxiv_2608_17659",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "c49a67b38314152b83e793b9ade7ce4102a44aa27c331504a8758b94df906c67",
        "submitted_at": "2026-08-18T11:33:22Z",
        "updated_at": "2026-08-18T11:33:22Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.17659v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.17659",
      "catalog_id": "arxiv:2608.17659",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-18",
      "identifiers": {
        "arxiv": "2608.17659"
      },
      "record_updated_at": "2026-08-18"
    },
    "genre": "preprint",
    "id": "arxiv:2608.17659",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          18
        ]
      ]
    },
    "note": "First published: 2026-08-18; Recorded arXiv version: v1; Recorded version updated: 2026-08-18T11:33:22Z.",
    "title": "MobileWorldSafety: Benchmarking GUI Agent Safety Against Environmental Injection Attacks in Android Apps",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.24017v1",
    "archive": "arXiv",
    "archive_location": "2608.24017",
    "author": [
      {
        "literal": "Lin-Fa Lee"
      },
      {
        "literal": "YI-YU Chang"
      },
      {
        "literal": "Kuo-Hui Yeh"
      }
    ],
    "citation-key": "arxiv_2608_24017",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "1bddfe5b5b2312e9b71d01dbb6bb23a8b0ad1c8cd787e4e98449b71a2ac2d678",
        "submitted_at": "2026-08-25T03:16:45Z",
        "updated_at": "2026-08-25T03:16:45Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.24017v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.24017",
      "catalog_id": "arxiv:2608.24017",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2026-08-25",
      "identifiers": {
        "arxiv": "2608.24017"
      },
      "record_updated_at": "2026-08-25"
    },
    "genre": "preprint",
    "id": "arxiv:2608.24017",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          25
        ]
      ]
    },
    "note": "First published: 2026-08-25; Recorded arXiv version: v1; Recorded version updated: 2026-08-25T03:16:45Z.",
    "title": "WebMCP-Phalanx: Enforcing and Characterizing Trust Boundaries for Browser-Integrated LLM Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.24913v1",
    "archive": "arXiv",
    "archive_location": "2608.24913",
    "author": [
      {
        "literal": "Lily Bundgaard Wanscher"
      },
      {
        "literal": "Markus Heidemann Lorensen"
      },
      {
        "literal": "Mohammed Ammad Shafiq"
      },
      {
        "literal": "Mahyar Tourchi Moghaddam"
      },
      {
        "literal": "Mina Alipour"
      }
    ],
    "citation-key": "arxiv_2608_24913",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "046d93a43dd5a011809a780c7d998f98ee0abb3e931d733b8ad7807b86050ec7",
        "submitted_at": "2026-07-26T17:21:24Z",
        "updated_at": "2026-07-26T17:21:24Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.24913v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.24913",
      "catalog_id": "arxiv:2608.24913",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-07-26",
      "identifiers": {
        "arxiv": "2608.24913"
      },
      "record_updated_at": "2026-07-26"
    },
    "genre": "preprint",
    "id": "arxiv:2608.24913",
    "issued": {
      "date-parts": [
        [
          2026,
          7,
          26
        ]
      ]
    },
    "note": "First published: 2026-07-26; Recorded arXiv version: v1; Recorded version updated: 2026-07-26T17:21:24Z.",
    "title": "From Blind Edits to Verified Repair: Building Trustworthy User-Side LLM Agents for Web Accessibility",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.26204v2",
    "archive": "arXiv",
    "archive_location": "2608.26204",
    "author": [
      {
        "literal": "Joy Chen"
      },
      {
        "literal": "Alejandro Castillejo Munoz"
      },
      {
        "literal": "Pierluca D'Oro"
      },
      {
        "literal": "Yuxuan Sun"
      },
      {
        "literal": "Chloe Evans"
      },
      {
        "literal": "Joseph Tighe"
      }
    ],
    "citation-key": "arxiv_2608_26204",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "50c26a7ab741ecb3cb855305ee4f7d5b5729296248d650c469600aeb73101781",
        "submitted_at": "2026-08-25T23:21:57Z",
        "updated_at": "2026-09-15T04:43:00Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2608.26204v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.26204",
      "catalog_id": "arxiv:2608.26204",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-25",
      "identifiers": {
        "arxiv": "2608.26204"
      },
      "record_updated_at": "2026-09-15"
    },
    "genre": "preprint",
    "id": "arxiv:2608.26204",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          25
        ]
      ]
    },
    "note": "First published: 2026-08-25; Recorded arXiv version: v2; Recorded version updated: 2026-09-15T04:43:00Z.",
    "title": "ADeptS-Bench: Measuring the Trustworthiness of Computer Use Agents Across Devices",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2608.27808v1",
    "archive": "arXiv",
    "archive_location": "2608.27808",
    "author": [
      {
        "literal": "Divake Kumar"
      },
      {
        "literal": "Sina Tayebati"
      },
      {
        "literal": "Devashri Naik"
      },
      {
        "literal": "Amanda Sofie Rios"
      },
      {
        "literal": "Nilesh Ahuja"
      },
      {
        "literal": "Omesh Tickoo"
      },
      {
        "literal": "Ranganath Krishnan"
      },
      {
        "literal": "Amit Ranjan Trivedi"
      }
    ],
    "citation-key": "arxiv_2608_27808",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "14864aae8f977d474ff3e7dd3e38951374862abfb8077395f2dc5a9e1cc5a489",
        "submitted_at": "2026-08-28T00:50:47Z",
        "updated_at": "2026-08-28T00:50:47Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.27808v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.27808",
      "catalog_id": "arxiv:2608.27808",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-28",
      "identifiers": {
        "arxiv": "2608.27808"
      },
      "record_updated_at": "2026-08-28"
    },
    "genre": "preprint",
    "id": "arxiv:2608.27808",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          28
        ]
      ]
    },
    "note": "First published: 2026-08-28; Recorded arXiv version: v1; Recorded version updated: 2026-08-28T00:50:47Z.",
    "title": "CURA: Certified Runtime Alarms for Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.29596v2",
    "archive": "arXiv",
    "archive_location": "2608.29596",
    "author": [
      {
        "literal": "Sanket Badhe"
      },
      {
        "literal": "Deep Shah"
      },
      {
        "literal": "Priyanka Tiwari"
      },
      {
        "literal": "Nehal Kathrotia"
      }
    ],
    "citation-key": "arxiv_2608_29596",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "13b6833243a543eb156ce7f4d943f8a3c608b3b38b7eaa77605ca7484cdedc43",
        "submitted_at": "2026-08-30T06:36:42Z",
        "updated_at": "2026-09-28T17:25:01Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2608.29596v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.29596",
      "catalog_id": "arxiv:2608.29596",
      "catalog_kind": "survey",
      "catalog_review_status": "curated",
      "catalog_scope": "adjacent",
      "first_published_at": "2026-08-30",
      "identifiers": {
        "arxiv": "2608.29596"
      },
      "record_updated_at": "2026-09-28"
    },
    "genre": "preprint",
    "id": "arxiv:2608.29596",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          30
        ]
      ]
    },
    "note": "First published: 2026-08-30; Recorded arXiv version: v2; Recorded version updated: 2026-09-28T17:25:01Z.",
    "title": "A Systematic Survey of Agentic Skills: Architecture, Lifecycle, and Security",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2608.30038v1",
    "archive": "arXiv",
    "archive_location": "2608.30038",
    "author": [
      {
        "literal": "Mingshuo Wang"
      },
      {
        "literal": "Hanqing Guo"
      },
      {
        "literal": "Huining Li"
      },
      {
        "literal": "Yuliang Fu"
      },
      {
        "literal": "Jing Xu"
      },
      {
        "literal": "Chenhan Xu"
      }
    ],
    "citation-key": "arxiv_2608_30038",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7b17f858c9d6992f6a8d8f21cc79d468b0f1c81fc44084045791d9c3acacd6d0",
        "submitted_at": "2026-08-30T20:55:21Z",
        "updated_at": "2026-08-30T20:55:21Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2608.30038v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.30038",
      "catalog_id": "arxiv:2608.30038",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-30",
      "identifiers": {
        "arxiv": "2608.30038"
      },
      "record_updated_at": "2026-08-30"
    },
    "genre": "preprint",
    "id": "arxiv:2608.30038",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          30
        ]
      ]
    },
    "note": "First published: 2026-08-30; Recorded arXiv version: v1; Recorded version updated: 2026-08-30T20:55:21Z.",
    "title": "ActReal: System-Level Mobile Agents Challenge Mobile Automation Detection",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2608.30207v2",
    "archive": "arXiv",
    "archive_location": "2608.30207",
    "author": [
      {
        "literal": "Chen Xiong"
      },
      {
        "literal": "Zhiyuan He"
      },
      {
        "literal": "Pin-Yu Chen"
      },
      {
        "literal": "Stjepan Picek"
      },
      {
        "literal": "Tsung-Yi Ho"
      }
    ],
    "citation-key": "arxiv_2608_30207",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "87c3f58eebe2db437b1166ff8e83b336db4cde37684a7cd86f61c4b34fca7237",
        "submitted_at": "2026-08-31T03:39:43Z",
        "updated_at": "2026-10-03T10:41:41Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2608.30207v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2608.30207",
      "catalog_id": "arxiv:2608.30207",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-31",
      "identifiers": {
        "arxiv": "2608.30207"
      },
      "record_updated_at": "2026-10-03"
    },
    "genre": "preprint",
    "id": "arxiv:2608.30207",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          31
        ]
      ]
    },
    "note": "First published: 2026-08-31; Recorded arXiv version: v2; Recorded version updated: 2026-10-03T10:41:41Z.",
    "title": "SIR: Self-improving Red-teaming for Compute Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2609.00028v1",
    "archive": "arXiv",
    "archive_location": "2609.00028",
    "author": [
      {
        "literal": "Venus Team"
      },
      {
        "literal": "Zhuohan Cai"
      },
      {
        "literal": "Haoxing Chen"
      },
      {
        "literal": "Jiaxuan Chen"
      },
      {
        "literal": "Weizhi Chen"
      },
      {
        "literal": "Changlong Gao"
      },
      {
        "literal": "Zhangxuan Gu"
      },
      {
        "literal": "Yuan Guo"
      },
      {
        "literal": "Yusong Hu"
      },
      {
        "literal": "Jianrong Jiang"
      },
      {
        "literal": "Jianguo Li"
      },
      {
        "literal": "Runze Li"
      },
      {
        "literal": "Jinzhen Lin"
      },
      {
        "literal": "Zhenyu Ma"
      },
      {
        "literal": "Changhua Meng"
      },
      {
        "literal": "Han Peng"
      },
      {
        "literal": "Xinyu Qiu"
      },
      {
        "literal": "Shuheng Shen"
      },
      {
        "literal": "Zhongyi Shui"
      },
      {
        "literal": "Weiqiang Wang"
      },
      {
        "literal": "Ming Wen"
      },
      {
        "literal": "Zhuoer Xu"
      },
      {
        "literal": "Hang Yan"
      },
      {
        "literal": "Kaiwen Yang"
      },
      {
        "literal": "Ruilin Yao"
      },
      {
        "literal": "Nanjun Yu"
      },
      {
        "literal": "Zhengwen Zeng"
      },
      {
        "literal": "Lianrui Zhang"
      },
      {
        "literal": "Yunzhu Zhang"
      },
      {
        "literal": "Zhe Zhao"
      },
      {
        "literal": "Beitong Zhou"
      }
    ],
    "citation-key": "arxiv_2609_00028",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "34383fa6c6e5cca059c53fd0452d93eec9ac6a96271ddc14f81ddb96fdeaceec",
        "submitted_at": "2026-08-27T17:15:33Z",
        "updated_at": "2026-08-27T17:15:33Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.00028v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.00028",
      "catalog_id": "arxiv:2609.00028",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-27",
      "identifiers": {
        "arxiv": "2609.00028"
      },
      "record_updated_at": "2026-08-27"
    },
    "genre": "preprint",
    "id": "arxiv:2609.00028",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          27
        ]
      ]
    },
    "note": "First published: 2026-08-27; Recorded arXiv version: v1; Recorded version updated: 2026-08-27T17:15:33Z.",
    "title": "UI-Venus-2 Technical Report",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.02154v1",
    "archive": "arXiv",
    "archive_location": "2609.02154",
    "author": [
      {
        "literal": "Yimeng Liu"
      },
      {
        "literal": "Hua Huang"
      }
    ],
    "citation-key": "arxiv_2609_02154",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "b462dddd45e6b04a3bf6fa0bc73576a23a5f9617f61aeb257a845c0f456f731d",
        "submitted_at": "2026-09-02T06:06:43Z",
        "updated_at": "2026-09-02T06:06:43Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.02154v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.02154",
      "catalog_id": "arxiv:2609.02154",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-02",
      "identifiers": {
        "arxiv": "2609.02154"
      },
      "record_updated_at": "2026-09-02"
    },
    "genre": "preprint",
    "id": "arxiv:2609.02154",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          2
        ]
      ]
    },
    "note": "First published: 2026-09-02; Recorded arXiv version: v1; Recorded version updated: 2026-09-02T06:06:43Z.",
    "title": "WiP: Characterizing and Defending Against Mobile-Agent-Driven MFA Automation",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.03438v1",
    "archive": "arXiv",
    "archive_location": "2609.03438",
    "author": [
      {
        "literal": "Zhaoyuan Huang"
      },
      {
        "literal": "Tianjie Ju"
      },
      {
        "literal": "Pengzhou Cheng"
      },
      {
        "literal": "Zheng Wu"
      },
      {
        "literal": "Yansi Li"
      },
      {
        "literal": "Chuanbiao Song"
      },
      {
        "literal": "Jun Lan"
      },
      {
        "literal": "Huijia Zhu"
      },
      {
        "literal": "Weiqiang Wang"
      },
      {
        "literal": "Zhuosheng Zhang"
      }
    ],
    "citation-key": "arxiv_2609_03438",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a59f7d54845de6efebf6365a188e61e41fdf31e9ebe894b1d01ce7b86d6be4ec",
        "submitted_at": "2026-09-03T06:48:41Z",
        "updated_at": "2026-09-03T06:48:41Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.03438v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.03438",
      "catalog_id": "arxiv:2609.03438",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-03",
      "identifiers": {
        "arxiv": "2609.03438"
      },
      "record_updated_at": "2026-09-03"
    },
    "genre": "preprint",
    "id": "arxiv:2609.03438",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          3
        ]
      ]
    },
    "note": "First published: 2026-09-03; Recorded arXiv version: v1; Recorded version updated: 2026-09-03T06:48:41Z.",
    "title": "Do GUI Agents Know When Not to Act? Enabling Conflict-Aware Termination for Multimodal GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.09212v1",
    "archive": "arXiv",
    "archive_location": "2609.09212",
    "author": [
      {
        "literal": "Zhihao Liu"
      },
      {
        "literal": "Hongyu Sun"
      },
      {
        "literal": "Zhiyuan Fu"
      },
      {
        "literal": "Xiaonan Duan"
      },
      {
        "literal": "Jice Wang"
      },
      {
        "literal": "Shangru Zhao"
      },
      {
        "literal": "Weizhi Meng"
      },
      {
        "literal": "Wuxin Yang"
      },
      {
        "literal": "Yangfan Zhou"
      },
      {
        "literal": "Yuqing Zhang"
      }
    ],
    "citation-key": "arxiv_2609_09212",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5a3a7a81ffe43885d9c8362df4c8aff08000304fe60477f484a732caf35124b2",
        "submitted_at": "2026-09-06T03:49:45Z",
        "updated_at": "2026-09-06T03:49:45Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.09212v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.09212",
      "catalog_id": "arxiv:2609.09212",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-06",
      "identifiers": {
        "arxiv": "2609.09212"
      },
      "record_updated_at": "2026-09-06"
    },
    "genre": "preprint",
    "id": "arxiv:2609.09212",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          6
        ]
      ]
    },
    "note": "First published: 2026-09-06; Recorded arXiv version: v1; Recorded version updated: 2026-09-06T03:49:45Z.",
    "title": "AgentHijack: Visual Patch Attacks on Multimodal Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.13873v1",
    "archive": "arXiv",
    "archive_location": "2609.13873",
    "author": [
      {
        "literal": "Qihang Cen"
      },
      {
        "literal": "Tianshuo Cong"
      },
      {
        "literal": "Da Song"
      },
      {
        "literal": "Xinlei He"
      },
      {
        "literal": "Jiaxing Song"
      },
      {
        "literal": "Ke Xu"
      },
      {
        "literal": "Qi Li"
      }
    ],
    "citation-key": "arxiv_2609_13873",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "1eda33b358d4c4caf8c1fb0b1bd92698c3b37cee995d820f40ecffe82010edb4",
        "submitted_at": "2026-09-12T10:55:54Z",
        "updated_at": "2026-09-12T10:55:54Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.13873v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.13873",
      "catalog_id": "arxiv:2609.13873",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-12",
      "identifiers": {
        "arxiv": "2609.13873"
      },
      "record_updated_at": "2026-09-12"
    },
    "genre": "preprint",
    "id": "arxiv:2609.13873",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          12
        ]
      ]
    },
    "note": "First published: 2026-09-12; Recorded arXiv version: v1; Recorded version updated: 2026-09-12T10:55:54Z.",
    "title": "PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.16732v1",
    "archive": "arXiv",
    "archive_location": "2609.16732",
    "author": [
      {
        "literal": "Heng Li"
      },
      {
        "literal": "Fulin Zhao"
      },
      {
        "literal": "Zhe Geng"
      },
      {
        "literal": "Zhiyuan Yao"
      },
      {
        "literal": "Wei Yuan"
      },
      {
        "literal": "Xiapu Luo"
      }
    ],
    "citation-key": "arxiv_2609_16732",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "b86516b7695d23ffc9179c0829209dc28b96c3c819525eab62a293a68ab5daf0",
        "submitted_at": "2026-09-15T07:02:10Z",
        "updated_at": "2026-09-15T07:02:10Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.16732v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.16732",
      "catalog_id": "arxiv:2609.16732",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-15",
      "identifiers": {
        "arxiv": "2609.16732"
      },
      "record_updated_at": "2026-09-15"
    },
    "genre": "preprint",
    "id": "arxiv:2609.16732",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          15
        ]
      ]
    },
    "note": "First published: 2026-09-15; Recorded arXiv version: v1; Recorded version updated: 2026-09-15T07:02:10Z.",
    "title": "When Agents See Differently: Exposing UI Desynchronization Threats in Mobile Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.19843v1",
    "archive": "arXiv",
    "archive_location": "2609.19843",
    "author": [
      {
        "literal": "Haya Halimeh"
      },
      {
        "literal": "Sascha Kaltenpoth"
      },
      {
        "literal": "Kevin Bösch"
      },
      {
        "literal": "Oliver Müller"
      }
    ],
    "citation-key": "arxiv_2609_19843",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "70a7588abcf345418ed759fb2bdb96fc60c6e1444a3e0dc98766510c755f8478",
        "submitted_at": "2026-09-17T07:54:15Z",
        "updated_at": "2026-09-17T07:54:15Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.19843v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.19843",
      "catalog_id": "arxiv:2609.19843",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-17",
      "identifiers": {
        "arxiv": "2609.19843"
      },
      "record_updated_at": "2026-09-17"
    },
    "genre": "preprint",
    "id": "arxiv:2609.19843",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          17
        ]
      ]
    },
    "note": "First published: 2026-09-17; Recorded arXiv version: v1; Recorded version updated: 2026-09-17T07:54:15Z.",
    "title": "A Dual-Process Perspective on Nudge Susceptibility in LLM-Based GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.22178v2",
    "archive": "arXiv",
    "archive_location": "2609.22178",
    "author": [
      {
        "literal": "Zeyu Kang"
      },
      {
        "literal": "Zhenyun Yin"
      },
      {
        "literal": "Yang Zhang"
      },
      {
        "literal": "Shan He"
      },
      {
        "literal": "Shanzhe Lei"
      },
      {
        "literal": "Yanjiu Zhong"
      },
      {
        "literal": "Xinquan Chen"
      },
      {
        "literal": "Xuhong Wang"
      }
    ],
    "citation-key": "arxiv_2609_22178",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a88d287d5433009962a905dbdbf03359e1183e66e4a6015441ec28405f64a6ee",
        "submitted_at": "2026-08-27T05:43:50Z",
        "updated_at": "2026-09-22T06:39:18Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2609.22178v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.22178",
      "catalog_id": "arxiv:2609.22178",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-27",
      "identifiers": {
        "arxiv": "2609.22178"
      },
      "record_updated_at": "2026-09-22"
    },
    "genre": "preprint",
    "id": "arxiv:2609.22178",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          27
        ]
      ]
    },
    "note": "First published: 2026-08-27; Recorded arXiv version: v2; Recorded version updated: 2026-09-22T06:39:18Z.",
    "title": "Beyond Task Completion: Training Capable and Safe Computer-Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2609.27273v2",
    "archive": "arXiv",
    "archive_location": "2609.27273",
    "author": [
      {
        "literal": "Yuxuan Li"
      },
      {
        "literal": "Will Epperson"
      },
      {
        "literal": "Wesley Deng"
      },
      {
        "literal": "Zezhou Huang"
      }
    ],
    "citation-key": "arxiv_2609_27273",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "8d241c1ea9731bc815eef5df9c409d410608adb052616406d955d7d33cecd9b9",
        "submitted_at": "2026-09-23T03:00:00Z",
        "updated_at": "2026-09-27T20:49:01Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2609.27273v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.27273",
      "catalog_id": "arxiv:2609.27273",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-23",
      "identifiers": {
        "arxiv": "2609.27273"
      },
      "record_updated_at": "2026-09-27"
    },
    "genre": "preprint",
    "id": "arxiv:2609.27273",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          23
        ]
      ]
    },
    "note": "First published: 2026-09-23; Recorded arXiv version: v2; Recorded version updated: 2026-09-27T20:49:01Z.",
    "title": "CAVEAT: Towards Robust Computer-Use Agents in Incentive-Misaligned Environments",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2609.27461v1",
    "archive": "arXiv",
    "archive_location": "2609.27461",
    "author": [
      {
        "literal": "Zeyu Zhang"
      },
      {
        "literal": "Dingyi Rong"
      },
      {
        "literal": "Zijian Chen"
      },
      {
        "literal": "Zicheng Zhang"
      },
      {
        "literal": "Xiongkuo Min"
      },
      {
        "literal": "Guangtao Zhai"
      }
    ],
    "citation-key": "arxiv_2609_27461",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3a89489bb1ff3001a1d806c3eefd8a6aa19503d1dfbe0265b916766119f96ec2",
        "submitted_at": "2026-09-23T07:27:23Z",
        "updated_at": "2026-09-23T07:27:23Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.27461v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.27461",
      "catalog_id": "arxiv:2609.27461",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-23",
      "identifiers": {
        "arxiv": "2609.27461"
      },
      "record_updated_at": "2026-09-23"
    },
    "genre": "preprint",
    "id": "arxiv:2609.27461",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          23
        ]
      ]
    },
    "note": "First published: 2026-09-23; Recorded arXiv version: v1; Recorded version updated: 2026-09-23T07:27:23Z.",
    "title": "Invisible in Space, Visible in Time: Motion Vision CAPTCHA against GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.32915v1",
    "archive": "arXiv",
    "archive_location": "2609.32915",
    "author": [
      {
        "literal": "Asif Shahriar"
      },
      {
        "literal": "Md Nafiu Rahman"
      },
      {
        "literal": "Sadif Ahmed"
      },
      {
        "literal": "Farig Sadeque"
      },
      {
        "literal": "Md Rizwan Parvez"
      }
    ],
    "citation-key": "arxiv_2609_32915",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "802342ce2c486c30c84c33c897becb0348831034d4d11f8d3d3861ec0380b65c",
        "submitted_at": "2026-09-26T20:09:16Z",
        "updated_at": "2026-09-26T20:09:16Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.32915v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.32915",
      "catalog_id": "arxiv:2609.32915",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-26",
      "identifiers": {
        "arxiv": "2609.32915"
      },
      "record_updated_at": "2026-09-26"
    },
    "genre": "preprint",
    "id": "arxiv:2609.32915",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          26
        ]
      ]
    },
    "note": "First published: 2026-09-26; Recorded arXiv version: v1; Recorded version updated: 2026-09-26T20:09:16Z.",
    "title": "AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.33102v1",
    "archive": "arXiv",
    "archive_location": "2609.33102",
    "author": [
      {
        "literal": "Ben Hagag"
      },
      {
        "literal": "William L. Anderson"
      },
      {
        "literal": "Srija Chakraborty"
      },
      {
        "literal": "Christian Schroeder de Witt"
      }
    ],
    "citation-key": "arxiv_2609_33102",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3c380079220050fbe354509238a5a79c7df2917a245490e4ec0cff512f7565ab",
        "submitted_at": "2026-09-27T02:20:08Z",
        "updated_at": "2026-09-27T02:20:08Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.33102v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.33102",
      "catalog_id": "arxiv:2609.33102",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-27",
      "identifiers": {
        "arxiv": "2609.33102"
      },
      "record_updated_at": "2026-09-27"
    },
    "genre": "preprint",
    "id": "arxiv:2609.33102",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          27
        ]
      ]
    },
    "note": "First published: 2026-09-27; Recorded arXiv version: v1; Recorded version updated: 2026-09-27T02:20:08Z.",
    "title": "ORBIT: A Framework for Multi-Agent Safety and Security Evaluations",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.34974v1",
    "archive": "arXiv",
    "archive_location": "2609.34974",
    "author": [
      {
        "literal": "Ruozhao Yang"
      },
      {
        "literal": "Mingfei Cheng"
      },
      {
        "literal": "Xiaofei Xie"
      }
    ],
    "citation-key": "arxiv_2609_34974",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "a9bc3b57957e6c4f1af399379c4275366563b94a8b8fe01ec83e54715cfc8d11",
        "submitted_at": "2026-09-28T11:53:24Z",
        "updated_at": "2026-09-28T11:53:24Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.34974v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.34974",
      "catalog_id": "arxiv:2609.34974",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-28",
      "identifiers": {
        "arxiv": "2609.34974"
      },
      "record_updated_at": "2026-09-28"
    },
    "genre": "preprint",
    "id": "arxiv:2609.34974",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          28
        ]
      ]
    },
    "note": "First published: 2026-09-28; Recorded arXiv version: v1; Recorded version updated: 2026-09-28T11:53:24Z.",
    "title": "Before Acting, Change the State: Prospective State Intervention for Web Agents under Deceptive Interfaces",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.36201v1",
    "archive": "arXiv",
    "archive_location": "2609.36201",
    "author": [
      {
        "literal": "Jianxing Chen"
      },
      {
        "literal": "Xiao Yu"
      },
      {
        "literal": "Shipra Agrawal"
      },
      {
        "literal": "Zhou Yu"
      }
    ],
    "citation-key": "arxiv_2609_36201",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e92c63d4cf58375aa7068570f8a98c145e24f8d393c5807c0aff3ed67f18b9f0",
        "submitted_at": "2026-09-28T20:01:35Z",
        "updated_at": "2026-09-28T20:01:35Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.36201v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.36201",
      "catalog_id": "arxiv:2609.36201",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-28",
      "identifiers": {
        "arxiv": "2609.36201"
      },
      "record_updated_at": "2026-09-28"
    },
    "genre": "preprint",
    "id": "arxiv:2609.36201",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          28
        ]
      ]
    },
    "note": "First published: 2026-09-28; Recorded arXiv version: v1; Recorded version updated: 2026-09-28T20:01:35Z.",
    "title": "SCOUT: Synergizing Reasoning and Tool-Use for Computer-Use Safety",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2609.38184v1",
    "archive": "arXiv",
    "archive_location": "2609.38184",
    "author": [
      {
        "literal": "Yongjiang Wu"
      },
      {
        "literal": "Junyuan Zhang"
      },
      {
        "literal": "Ada Chen"
      },
      {
        "literal": "Kuiyi Gao"
      },
      {
        "literal": "Wenxuan Wang"
      }
    ],
    "citation-key": "arxiv_2609_38184",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f14844abefab6b4eb464a1c7675f9de7f460849872ebb776230724ed5828feed",
        "submitted_at": "2026-08-07T07:51:13Z",
        "updated_at": "2026-08-07T07:51:13Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2609.38184v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2609.38184",
      "catalog_id": "arxiv:2609.38184",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-08-07",
      "identifiers": {
        "arxiv": "2609.38184"
      },
      "record_updated_at": "2026-08-07"
    },
    "genre": "preprint",
    "id": "arxiv:2609.38184",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          7
        ]
      ]
    },
    "note": "First published: 2026-08-07; Recorded arXiv version: v1; Recorded version updated: 2026-08-07T07:51:13Z.",
    "title": "RealGUINoise: An Interactive Cross-Platform Benchmark for GUI Agent Robustness under Real-World Interface Noise",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.03089v1",
    "archive": "arXiv",
    "archive_location": "2610.03089",
    "author": [
      {
        "literal": "Giulio Zingrillo"
      },
      {
        "literal": "Hanna Foerster"
      },
      {
        "literal": "Ilia Shumailov"
      },
      {
        "literal": "Yiren Zhao"
      },
      {
        "literal": "Robert Mullins"
      }
    ],
    "citation-key": "arxiv_2610_03089",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7469484bb1186dd633b26e41dddc890008e893c303f93d2352f93c9d47fd78c2",
        "submitted_at": "2026-10-02T10:08:39Z",
        "updated_at": "2026-10-02T10:08:39Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.03089v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.03089",
      "catalog_id": "arxiv:2610.03089",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-02",
      "identifiers": {
        "arxiv": "2610.03089"
      },
      "record_updated_at": "2026-10-02"
    },
    "genre": "preprint",
    "id": "arxiv:2610.03089",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          2
        ]
      ]
    },
    "note": "First published: 2026-10-02; Recorded arXiv version: v1; Recorded version updated: 2026-10-02T10:08:39Z.",
    "title": "Securing Computer-Use Agents Against Branch Steering Attacks",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.03818v2",
    "archive": "arXiv",
    "archive_location": "2610.03818",
    "author": [
      {
        "literal": "Maria Sanchez del Rio"
      },
      {
        "literal": "Mikhail Terekhov"
      }
    ],
    "citation-key": "arxiv_2610_03818",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f9dd28bdfb8879cbdb68f539c286365a06f4e9d04eba2420bb46f3575fdbfa05",
        "submitted_at": "2026-10-02T00:31:34Z",
        "updated_at": "2026-10-12T23:17:28Z",
        "version": 2,
        "versioned_url": "https://arxiv.org/abs/2610.03818v2"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.03818",
      "catalog_id": "arxiv:2610.03818",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-02",
      "identifiers": {
        "arxiv": "2610.03818"
      },
      "record_updated_at": "2026-10-12"
    },
    "genre": "preprint",
    "id": "arxiv:2610.03818",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          2
        ]
      ]
    },
    "note": "First published: 2026-10-02; Recorded arXiv version: v2; Recorded version updated: 2026-10-12T23:17:28Z.",
    "title": "Control OSWorld: An AI Control Environment for GUI Computer Use Agents",
    "type": "article",
    "version": "2"
  },
  {
    "URL": "https://arxiv.org/abs/2610.06898v1",
    "archive": "arXiv",
    "archive_location": "2610.06898",
    "author": [
      {
        "literal": "Li Hu"
      },
      {
        "literal": "Kanghua Mo"
      },
      {
        "literal": "Yingbin Jin"
      },
      {
        "literal": "Qingqing Ye"
      },
      {
        "literal": "Haibo Hu"
      }
    ],
    "citation-key": "arxiv_2610_06898",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5afea9414462386ee921b9ead9381c0204963c710c9f616a96f4bc47079f059e",
        "submitted_at": "2026-09-29T03:03:00Z",
        "updated_at": "2026-09-29T03:03:00Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.06898v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.06898",
      "catalog_id": "arxiv:2610.06898",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-09-29",
      "identifiers": {
        "arxiv": "2610.06898"
      },
      "record_updated_at": "2026-09-29"
    },
    "genre": "preprint",
    "id": "arxiv:2610.06898",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          29
        ]
      ]
    },
    "note": "First published: 2026-09-29; Recorded arXiv version: v1; Recorded version updated: 2026-09-29T03:03:00Z.",
    "title": "DIBench: Benchmarking Decision Integrity of GUI-based Mobile Agents Under Deceptive Injections",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.08773v1",
    "archive": "arXiv",
    "archive_location": "2610.08773",
    "author": [
      {
        "literal": "Sarim Hashmi"
      },
      {
        "literal": "Mukul Ranjan"
      },
      {
        "literal": "Kshitij Mishra"
      },
      {
        "literal": "Mikhail Kuznetsov"
      },
      {
        "literal": "Praneeth Vepakomma"
      },
      {
        "literal": "Nils Lukas"
      }
    ],
    "citation-key": "arxiv_2610_08773",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "7113025e0dfd784d6994108c24681000625b13598e33ad0e4324e90fd2832c19",
        "submitted_at": "2026-10-06T17:56:43Z",
        "updated_at": "2026-10-06T17:56:43Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.08773v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.08773",
      "catalog_id": "arxiv:2610.08773",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-06",
      "identifiers": {
        "arxiv": "2610.08773"
      },
      "record_updated_at": "2026-10-06"
    },
    "genre": "preprint",
    "id": "arxiv:2610.08773",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          6
        ]
      ]
    },
    "note": "First published: 2026-10-06; Recorded arXiv version: v1; Recorded version updated: 2026-10-06T17:56:43Z.",
    "title": "AdvSim2Real : Training Web Agents Against Adaptive Prompt Injection in a Web World Model",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.09240v1",
    "archive": "arXiv",
    "archive_location": "2610.09240",
    "author": [
      {
        "literal": "Wanjing Han"
      },
      {
        "literal": "Levi Taiji Li"
      },
      {
        "literal": "Mu Zhang"
      },
      {
        "literal": "Yue Jiang"
      },
      {
        "literal": "Guanhong Tao"
      }
    ],
    "citation-key": "arxiv_2610_09240",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3b6ef7e785ad509ebd13fdb3da97fc583ee4c28dd42b4eab842c6cd88d7ef51f",
        "submitted_at": "2026-10-07T00:05:53Z",
        "updated_at": "2026-10-07T00:05:53Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.09240v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.09240",
      "catalog_id": "arxiv:2610.09240",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-07",
      "identifiers": {
        "arxiv": "2610.09240"
      },
      "record_updated_at": "2026-10-07"
    },
    "genre": "preprint",
    "id": "arxiv:2610.09240",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          7
        ]
      ]
    },
    "note": "First published: 2026-10-07; Recorded arXiv version: v1; Recorded version updated: 2026-10-07T00:05:53Z.",
    "title": "Adversarial Images Hijack Web Agents from Visual Grounding to Browser Execution",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.09469v1",
    "archive": "arXiv",
    "archive_location": "2610.09469",
    "author": [
      {
        "literal": "Sarthak Choudhary"
      },
      {
        "literal": "Mihai Christodorescu"
      },
      {
        "literal": "Ashish Hooda"
      },
      {
        "literal": "Somesh Jha"
      },
      {
        "literal": "Tongxin Li"
      },
      {
        "literal": "Damien Octeau"
      }
    ],
    "citation-key": "arxiv_2610_09469",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "f38c9e37ab7fc8356a0c8c72370de673d1c2b6294e15dfdc72c280269f43439c",
        "submitted_at": "2026-10-07T05:24:40Z",
        "updated_at": "2026-10-07T05:24:40Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.09469v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.09469",
      "catalog_id": "arxiv:2610.09469",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-07",
      "identifiers": {
        "arxiv": "2610.09469"
      },
      "record_updated_at": "2026-10-07"
    },
    "genre": "preprint",
    "id": "arxiv:2610.09469",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          7
        ]
      ]
    },
    "note": "First published: 2026-10-07; Recorded arXiv version: v1; Recorded version updated: 2026-10-07T05:24:40Z.",
    "title": "Secure-CUA: Controlling Untrusted Influence in Computer-Use Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.11942v1",
    "archive": "arXiv",
    "archive_location": "2610.11942",
    "author": [
      {
        "literal": "Jiaming Zhang"
      },
      {
        "literal": "Xuan Wang"
      },
      {
        "literal": "Fuyao Zhang"
      },
      {
        "literal": "Yang Cao"
      },
      {
        "literal": "Lingjuan Lyu"
      },
      {
        "literal": "Wei Yang Bryan Lim"
      }
    ],
    "citation-key": "arxiv_2610_11942",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "53120f960c7b98e87210c93ac661a2e397b858cc9f211786b0f8233fa61c6dd3",
        "submitted_at": "2026-10-08T13:33:23Z",
        "updated_at": "2026-10-08T13:33:23Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.11942v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.11942",
      "catalog_id": "arxiv:2610.11942",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-08",
      "identifiers": {
        "arxiv": "2610.11942"
      },
      "record_updated_at": "2026-10-08"
    },
    "genre": "preprint",
    "id": "arxiv:2610.11942",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          8
        ]
      ]
    },
    "note": "First published: 2026-10-08; Recorded arXiv version: v1; Recorded version updated: 2026-10-08T13:33:23Z.",
    "title": "Right Screen, Wrong Transition: World Models as Verifiers for GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.15138v1",
    "archive": "arXiv",
    "archive_location": "2610.15138",
    "author": [
      {
        "literal": "Md Imran Hossen"
      }
    ],
    "citation-key": "arxiv_2610_15138",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "63e19265f1df2c336e28c4a13e11331021bd60866269c0b921d92a3c0fec080d",
        "submitted_at": "2026-10-10T19:30:31Z",
        "updated_at": "2026-10-10T19:30:31Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.15138v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.15138",
      "catalog_id": "arxiv:2610.15138",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-10",
      "identifiers": {
        "arxiv": "2610.15138"
      },
      "record_updated_at": "2026-10-10"
    },
    "genre": "preprint",
    "id": "arxiv:2610.15138",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          10
        ]
      ]
    },
    "note": "First published: 2026-10-10; Recorded arXiv version: v1; Recorded version updated: 2026-10-10T19:30:31Z.",
    "title": "The Agent Clicks Approve: Injected Page Text Makes Browser Agents Authorize Access the Task Never Named",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.15502v1",
    "archive": "arXiv",
    "archive_location": "2610.15502",
    "author": [
      {
        "literal": "Hyobin Ahn"
      },
      {
        "literal": "Dongjae Lee"
      }
    ],
    "citation-key": "arxiv_2610_15502",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "ff5470e792d14ced2cdff648d97e2606eea4b3c822046b7c10272fd2a5f1695f",
        "submitted_at": "2026-10-11T10:09:44Z",
        "updated_at": "2026-10-11T10:09:44Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.15502v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.15502",
      "catalog_id": "arxiv:2610.15502",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-11",
      "identifiers": {
        "arxiv": "2610.15502"
      },
      "record_updated_at": "2026-10-11"
    },
    "genre": "preprint",
    "id": "arxiv:2610.15502",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          11
        ]
      ]
    },
    "note": "First published: 2026-10-11; Recorded arXiv version: v1; Recorded version updated: 2026-10-11T10:09:44Z.",
    "title": "From Observations to Authorized Actions: Measuring Source Information in Android Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.16778v1",
    "archive": "arXiv",
    "archive_location": "2610.16778",
    "author": [
      {
        "literal": "Zian Yuan"
      },
      {
        "literal": "Wei Li"
      }
    ],
    "citation-key": "arxiv_2610_16778",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "c5a2743a18bae1deeed13fbd1dd7379c3f21c67488627057ccb466ffe51d09dc",
        "submitted_at": "2026-10-12T13:34:52Z",
        "updated_at": "2026-10-12T13:34:52Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.16778v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.16778",
      "catalog_id": "arxiv:2610.16778",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-12",
      "identifiers": {
        "arxiv": "2610.16778"
      },
      "record_updated_at": "2026-10-12"
    },
    "genre": "preprint",
    "id": "arxiv:2610.16778",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          12
        ]
      ]
    },
    "note": "First published: 2026-10-12; Recorded arXiv version: v1; Recorded version updated: 2026-10-12T13:34:52Z.",
    "title": "PrivacyGuard: Source-Linked Sanitization and Locally Resolvable PII References for Cloud GUI Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.17457v1",
    "archive": "arXiv",
    "archive_location": "2610.17457",
    "author": [
      {
        "literal": "Yuetian Chen"
      },
      {
        "literal": "Kaiyuan Zhang"
      },
      {
        "literal": "Yuntao Du"
      },
      {
        "literal": "Thomas Li"
      },
      {
        "literal": "Mark Tenenholtz"
      },
      {
        "literal": "Kyle Polley"
      },
      {
        "literal": "Jerry Ma"
      },
      {
        "literal": "Denis Yarats"
      },
      {
        "literal": "Ninghui Li"
      }
    ],
    "citation-key": "arxiv_2610_17457",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "247cd4c9634dea78780a2230138c728adf53871e8b65614697f76ba53dea858c",
        "submitted_at": "2026-10-12T22:17:51Z",
        "updated_at": "2026-10-12T22:17:51Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.17457v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.17457",
      "catalog_id": "arxiv:2610.17457",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-12",
      "identifiers": {
        "arxiv": "2610.17457"
      },
      "record_updated_at": "2026-10-12"
    },
    "genre": "preprint",
    "id": "arxiv:2610.17457",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          12
        ]
      ]
    },
    "note": "First published: 2026-10-12; Recorded arXiv version: v1; Recorded version updated: 2026-10-12T22:17:51Z.",
    "title": "BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.18508v1",
    "archive": "arXiv",
    "archive_location": "2610.18508",
    "author": [
      {
        "literal": "Dominik Seip"
      },
      {
        "literal": "Bartol Markovinović"
      },
      {
        "literal": "Matthias Hein"
      }
    ],
    "citation-key": "arxiv_2610_18508",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "5565d38dd40b02b4158d7edcc2c5c27e7e285dbedefe1c7101a31c4f8d17b659",
        "submitted_at": "2026-10-13T15:03:33Z",
        "updated_at": "2026-10-13T15:03:33Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.18508v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.18508",
      "catalog_id": "arxiv:2610.18508",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-13",
      "identifiers": {
        "arxiv": "2610.18508"
      },
      "record_updated_at": "2026-10-13"
    },
    "genre": "preprint",
    "id": "arxiv:2610.18508",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          13
        ]
      ]
    },
    "note": "First published: 2026-10-13; Recorded arXiv version: v1; Recorded version updated: 2026-10-13T15:03:33Z.",
    "title": "Towards Safe Autonomy for Computer Use",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.19384v1",
    "archive": "arXiv",
    "archive_location": "2610.19384",
    "author": [
      {
        "literal": "Yuke Wang"
      },
      {
        "literal": "Benlei Cui"
      },
      {
        "literal": "Shen Pang"
      },
      {
        "literal": "Xuemei Dong"
      },
      {
        "literal": "Longtao Huang"
      },
      {
        "literal": "Hui Xue"
      },
      {
        "literal": "Yuwen Zhai"
      },
      {
        "literal": "Junjie Li"
      },
      {
        "literal": "Jingqun Tang"
      },
      {
        "literal": "Haiwen Hong"
      }
    ],
    "citation-key": "arxiv_2610_19384",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "da334d943d98b4bf9915c6ca28aab734d736f376e67cbab950aa1af65f540ebf",
        "submitted_at": "2026-10-14T01:30:03Z",
        "updated_at": "2026-10-14T01:30:03Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.19384v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.19384",
      "catalog_id": "arxiv:2610.19384",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-14",
      "identifiers": {
        "arxiv": "2610.19384"
      },
      "record_updated_at": "2026-10-14"
    },
    "genre": "preprint",
    "id": "arxiv:2610.19384",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          14
        ]
      ]
    },
    "note": "First published: 2026-10-14; Recorded arXiv version: v1; Recorded version updated: 2026-10-14T01:30:03Z.",
    "title": "MMA-SafetyBench: A Benchmark for Multimodal Agent Safety Evaluation",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.20100v1",
    "archive": "arXiv",
    "archive_location": "2610.20100",
    "author": [
      {
        "literal": "Wenkui Yang"
      },
      {
        "literal": "Yiming Hao"
      },
      {
        "literal": "Kai Zhou"
      },
      {
        "literal": "Chengyu Pu"
      },
      {
        "literal": "Yuzhe Zhang"
      },
      {
        "literal": "Jie Cao"
      },
      {
        "literal": "Jin Huang"
      },
      {
        "literal": "Shuai Ma"
      },
      {
        "literal": "Feng Tian"
      }
    ],
    "citation-key": "arxiv_2610_20100",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "602f4eb7aacc05748b83b9c32b28439098005c77eafb7624804f820995521a79",
        "submitted_at": "2026-10-14T12:35:59Z",
        "updated_at": "2026-10-14T12:35:59Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.20100v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.20100",
      "catalog_id": "arxiv:2610.20100",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-14",
      "identifiers": {
        "arxiv": "2610.20100"
      },
      "record_updated_at": "2026-10-14"
    },
    "genre": "preprint",
    "id": "arxiv:2610.20100",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          14
        ]
      ]
    },
    "note": "First published: 2026-10-14; Recorded arXiv version: v1; Recorded version updated: 2026-10-14T12:35:59Z.",
    "title": "Task-State Governance: A Virtual Machine for Verifiable and Recoverable GUI Agent Execution",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.22697v1",
    "archive": "arXiv",
    "archive_location": "2610.22697",
    "author": [
      {
        "literal": "Umar Iqbal"
      }
    ],
    "citation-key": "arxiv_2610_22697",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "077dd623c980813e83197a38b6545161a3d2fc842d99fe291c53372b9770acd2",
        "submitted_at": "2026-10-15T22:02:45Z",
        "updated_at": "2026-10-15T22:02:45Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.22697v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.22697",
      "catalog_id": "arxiv:2610.22697",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-15",
      "identifiers": {
        "arxiv": "2610.22697"
      },
      "record_updated_at": "2026-10-15"
    },
    "genre": "preprint",
    "id": "arxiv:2610.22697",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          15
        ]
      ]
    },
    "note": "First published: 2026-10-15; Recorded arXiv version: v1; Recorded version updated: 2026-10-15T22:02:45Z.",
    "title": "What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.23303v1",
    "archive": "arXiv",
    "archive_location": "2610.23303",
    "author": [
      {
        "literal": "Songping Wang"
      },
      {
        "literal": "Borui Li"
      },
      {
        "literal": "Qinglong Liu"
      },
      {
        "literal": "Yueming Lyu"
      },
      {
        "literal": "Yi Huang"
      },
      {
        "literal": "Fengting Li"
      },
      {
        "literal": "Chao Feng"
      },
      {
        "literal": "Caifeng Shan"
      }
    ],
    "citation-key": "arxiv_2610_23303",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "ea753c1cb0666950d89f2781511f26872e3d5b1c2fd2434896248214160fa22c",
        "submitted_at": "2026-10-16T11:06:37Z",
        "updated_at": "2026-10-16T11:06:37Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.23303v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.23303",
      "catalog_id": "arxiv:2610.23303",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-16",
      "identifiers": {
        "arxiv": "2610.23303"
      },
      "record_updated_at": "2026-10-16"
    },
    "genre": "preprint",
    "id": "arxiv:2610.23303",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          16
        ]
      ]
    },
    "note": "First published: 2026-10-16; Recorded arXiv version: v1; Recorded version updated: 2026-10-16T11:06:37Z.",
    "title": "MobileJailBench: Red Queen Jailbreak Benchmarking for Mobile Agents",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.23307v1",
    "archive": "arXiv",
    "archive_location": "2610.23307",
    "author": [
      {
        "literal": "Songping Wang"
      },
      {
        "literal": "Peiyang Li"
      },
      {
        "literal": "Yi Huang"
      },
      {
        "literal": "Fengting Li"
      },
      {
        "literal": "Xuhao Ran"
      },
      {
        "literal": "Yueming Lyu"
      },
      {
        "literal": "Chao Feng"
      },
      {
        "literal": "Caifeng Shan"
      }
    ],
    "citation-key": "arxiv_2610_23307",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "3fc22fbeda19ac2947b00af73801f0674c550e0d7c78919f811cae754b06128c",
        "submitted_at": "2026-10-16T11:10:30Z",
        "updated_at": "2026-10-16T11:10:30Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.23307v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.23307",
      "catalog_id": "arxiv:2610.23307",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-16",
      "identifiers": {
        "arxiv": "2610.23307"
      },
      "record_updated_at": "2026-10-16"
    },
    "genre": "preprint",
    "id": "arxiv:2610.23307",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          16
        ]
      ]
    },
    "note": "First published: 2026-10-16; Recorded arXiv version: v1; Recorded version updated: 2026-10-16T11:10:30Z.",
    "title": "MobileInject: Evaluating Reasoning-to-Action Security of MLLM-Based Mobile Agents under Cross-Modal Consistency Injection",
    "type": "article",
    "version": "1"
  },
  {
    "URL": "https://arxiv.org/abs/2610.24277v1",
    "archive": "arXiv",
    "archive_location": "2610.24277",
    "author": [
      {
        "literal": "Egor Zverev"
      },
      {
        "literal": "Juhee Kim"
      },
      {
        "literal": "Leon Trampert"
      },
      {
        "literal": "Boris Köpf"
      },
      {
        "literal": "Aashish Kolluri"
      },
      {
        "literal": "Shruti Tople"
      },
      {
        "literal": "Santiago Zanella-Béguelin"
      }
    ],
    "citation-key": "arxiv_2610_24277",
    "custom": {
      "arxiv_snapshot": {
        "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
        "abstract_sha256": "e675a3082f571da547fb5b6cb89e4f68a034bfa57236886e1218cb2bb2cdf1c3",
        "submitted_at": "2026-10-16T22:12:45Z",
        "updated_at": "2026-10-16T22:12:45Z",
        "version": 1,
        "versioned_url": "https://arxiv.org/abs/2610.24277v1"
      },
      "canonical_source_url": "https://arxiv.org/abs/2610.24277",
      "catalog_id": "arxiv:2610.24277",
      "catalog_kind": "paper",
      "catalog_review_status": "curated",
      "catalog_scope": "core",
      "first_published_at": "2026-10-16",
      "identifiers": {
        "arxiv": "2610.24277"
      },
      "record_updated_at": "2026-10-16"
    },
    "genre": "preprint",
    "id": "arxiv:2610.24277",
    "issued": {
      "date-parts": [
        [
          2026,
          10,
          16
        ]
      ]
    },
    "note": "First published: 2026-10-16; Recorded arXiv version: v1; Recorded version updated: 2026-10-16T22:12:45Z.",
    "title": "SPIDES: Information-Flow Control for Browser Agents",
    "type": "article",
    "version": "1"
  }
]