数据概览

• 快照周：2026-07-03 至 2026-07-09
• 追踪器：ArXiv cs.AI 周度论文追踪（查看所有历史快照：/tech/ai-agents/data/?tracker=arxiv-cs-ai-weekly）
• 更新频率：每周
• 主要来源：ArXiv cs.AI RSS Feed、ArXiv cs.CL RSS Feed、ArXiv API（AI Agent Papers 查询）

关键数据

• 谁：100+ 研究团队，涵盖 67 篇 cs.AI 和 29 篇 cs.CL 投稿，另有 4 篇跨目录论文
• 什么：241 篇独立投稿中有 100 篇智能体相关论文（智能体密度 41.5%）；2 篇首次 MCP 安全漏洞披露；5 个编排框架；12 个新基准测试
• 何时：快照覆盖 2026-07-03 至 2026-07-09 的投稿
• 影响：3 篇 MCP 相关论文（2 篇安全披露 + 1 篇 MCP 架构），18 篇多智能体论文，11 篇趋势评分 10 的论文

方法论

数据采集自三个主要来源：ArXiv cs.AI RSS feed、ArXiv cs.CL RSS feed，以及通过 ArXiv API 针对智能体相关论文的定向查询（在 cs.AI 中搜索 “agent”、“LLM”、“multi-agent”、“tool-use”、“reasoning” 或 “RAG”）。论文按 ArXiv ID 跨来源去重。每篇论文按智能体相关性分类，并根据新颖性、与当前智能体研究前沿的主题契合度、以及社区参与信号（HuggingFace Papers 链接）的交叉参考，赋予趋势评分（1-10）。本周查询 HuggingFace Daily Papers RSS feed 时返回 404 错误。数据截至 2026-07-09。

本周数据

Title	Authors	ArXiv ID	Category	Key Topics	Trend Score
Danus: Orchestrating Mathematical Reasoning Agents with Fact-Graph Memory	Jihao Liu, Guoxiong Gao, Zeming Sun et al.	2607.06447	cs.AI	agent, reasoning, planning, orchestration	10
Agents That Teach: Towards Designing Incidental Learning Back into AI-Assisted Software Development	Rohit Mehra, Samdyuti Suri, Prithviraj K Tagadinamani et al.	2607.06101	cs.AI	agent, multi-agent, reasoning, autonomous	10
PolyWorkBench: Benchmarking Multilingual Long-Horizon LLM Agents	Hongliang Li, Yijin Liu, Zhiwei Zhang et al.	2607.06008	cs.AI	agent, reasoning, tool-use, LLM, planning	10
Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents	Wael Albayaydh, Rui Zhao, Ivan Flechais	2607.05775	cs.AI	agent, multi-agent, reasoning, tool-use, LLM, planning	10
Beyond Static Evaluation: Building Simulation Environments for Scalable Agentic Reinforcement Learning	Akshay Arora, Ishan Nigam, Ashutosh Aggarwal et al.	2607.05773	cs.AI	agent, tool-use, LLM, autonomous	10
KAT-Coder-V2.5 Technical Report	Bo Huang, Fengxiang Li, Hao Xu et al.	2607.05471	cs.AI	agent, tool-use, autonomous	10
CanvasAgent: Enabling Complex Image Creation and Editing via Visual Tool Orchestration	Hairui Zhu, Yiying Yang, Tengjin Weng et al.	2607.05465	cs.AI	agent, reasoning, tool-use, orchestration	10
Prompt-to-Paper: Agentic AI System for Bioinformatics	Ramsha Kamran, Maheera Amjad, Zartasha Mustansar et al.	2607.05456	cs.AI	agent, multi-agent, LLM, autonomous	10
CHARLIE: An On-Premise Multi-Agent RAG System for Evidential Reasoning in Forensic Science	Leandro D. Carneiro, Andre L. S. Meirelles et al.	2607.05428	cs.AI	agent, multi-agent, reasoning, planning, orchestration	10
When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents	Kaiyue Yang, Yuyan Bu, Jingwei Yi et al.	2606.20023	cs.CL	agent, tool-use, autonomous	10
PolyJarvis: An LLM-Orchestrated Agent for Automated All-Atom Molecular Dynamics of Amorphous Homopolymers	Alexander Zhao, Achuth Chandrasekhar, Amir Barati Farimani	2604.02537	cs.CL	agent, LLM, MCP, orchestration	10
From Voting to Agent Collaboration: Answer-Type-Aware LLM Pipelines for BioASQ 14b	Taeyun Roh, Eunha Lee, Wonjune Jang et al.	2607.06452	cs.CL	agent, multi-agent, reasoning, LLM	9
LLM Agents for Deliberative Collaboration: A Study on Joint Decision Making Under Partial Observability	Chenxu Wang, Yongkun Yang, Boyuan Du et al.	2607.06157	cs.CL	agent, multi-agent, reasoning, LLM	9
Tangent classes of matroids and wonderful compactifications	Ronnie Cheng, Shurui Liu, Guoxiong Gao	2607.05835	cs.AI	agent, reasoning, autonomous	9
From Passive Retrieval to Active Memory Navigation: Learning to Use Memory as a Structured Action Space	Yue Xu, Yutao Sun, Yihao Liu et al.	2607.05794	cs.AI	agent, reasoning, tool-use	9
Rethinking Scientific Discovery in the Agentic Era	Yining Zheng, Yuxin Wang, Jiahao Lu et al.	2607.03863	cs.CL	agent, multi-agent, autonomous	9
An Experimental Design Approach to Evaluating Agentic AI’s Autonomous Model Discovery	Hao He, Xueying Liu, Chris J. Kuhlman et al.	2607.06413	stat.ME	agent, LLM, autonomous	8
Information Limits and Attractor Dynamics in Economies of Frontier LLM Agents: A Pre-Registered Test	Cheng Qian	2607.06001	cs.AI	agent, multi-agent, reasoning	8
When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Games	Jerick Shi, Terry Jingcheng Zhang, Bernhard Scholkopf et al.	2607.05132	cs.CL	agent, LLM, autonomous	8
When Does Tool Use Increase the Expressive Power of Finite-Precision Recurrent Models?	Nikola Zubic, Qian Li, Yuyi Wang et al.	2607.06155	cs.CL	agent, tool-use	7
MCP-Enabled Agentic AI for Autonomous IPoDWDM Network Lifecycle Automation	Chunmin Xia, Jakub Harbaczewski, Nikhil Dsilva et al.	2607.05975	cs.AI	agent, autonomous	7
Agentic AI for IPoDWDM Network Lifecycle Automation: An MCP-Enabled Architecture	Chunmin Xia, Jakub Harbaczewski, Nikhil Dsilva et al.	2607.05958	cs.AI	agent, autonomous	7
Controlling Tool Use with Heading-Specific Activation Steering	Yuqi Chen, Vincent Siu, Yang Liu et al.	2607.05790	cs.AI	reasoning, tool-use, LLM	7
Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations	Mohammadreza Rashidi	2607.05744	cs.AI	agent, MCP	7
The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and TOCTOU Vulnerabilities	Mohammadreza Rashidi	2607.05743	cs.AI	agent, MCP	7
Decision Protocols in Multi-Agent Large Language Model Conversations	Lars Benedikt Kaesberg	2607.05477	cs.AI	agent, multi-agent, LLM	7
Bridging Physical Reasoning and Task Generalization via Visual Action Outcome Reasoning Alignment	Han-Jun Ko, Jr-Jen Chen, Haobo Yuan et al.	2607.06522	cs.AI	agent, reasoning	6
Multi-Agent Deep Reinforcement Learning for Multi Objective Battery Management in Dairy Farms	Marcos Eduardo Cruz Victorio, Karl Mason	2607.06489	cs.AI	agent, multi-agent	6
Finding H. pylori in the Fine Print: Evidence-Linked Multi-Agent Case Finding from Gastric Biopsy Reports	Yufan Wang, Anit Kumar Sahu, Yan Fei Ng et al.	2607.06435	cs.AI	agent, multi-agent	6
RuBench: A Repository-Level Agentic Coding Benchmark with Natively Authored Russian Task Specifications	Evgeny Shilov	2607.06411	cs.CL	agent, reasoning	6
Task Decomposition-Guided Reranking for Adaptive Agent Skill Retrieval	Yanping Chen, Weijie Shi, Weijie Shi, Wen Yang et al.	2607.06283	cs.AI	agent, planning	6
Demonstrating TOFFEE: A Learned System for Synthesizing Data Agent Trajectories at Scale	Ziting Wang, Yin Li, Zuhao Yang et al.	2607.06233	cs.AI	agent, reasoning	6
A toy framework for single and multi-agent human-AI curiosity ecosystems	Ilya E. Monosov	2607.06214	cs.AI	agent, multi-agent	6
From Blueprint to Reality: Modeling and Applying Putnam’s Social Capital Theory with LLM-based Multi-agent Simulations	Shiyi Ling, Zhi Zheng, Hui Zheng et al.	2607.06080	cs.AI	agent, multi-agent	6
Reward-Density Heuristic for Dynamic Multi-Vehicle Routing: Performance and Computational Efficiency	Manish Kolachalam, Rani Malhotra	2607.06066	cs.AI	autonomous, planning	6
SearchEyes: Towards Frontier Multimodal Deep Search Intelligence via Search World Simulation	Zhengbo Jiao, Yiming Cheng, Yilei Jiang et al.	2607.05943	cs.AI	agent, reasoning	6
StateFuse: Deterministic Conflict-Preserving Memory for Multi-Agent Systems	Sergey Volkov, Yang Li, Ye Luo	2607.05844	cs.AI	agent, multi-agent	6
Onnes: A Physics-Grounded Multi-Agent LLM Simulator for Cryogenic Fault Diagnosis in Quantum Computing Infrastructure	Praneeth Narisetty, Uday Kumar Reddy Kattamanchi et al.	2607.05805	cs.AI	agent, multi-agent	6
FORGE: Towards Functional Tool-Use Generalization via Keypoint Trajectory Reasoning	Chuhao Zhou, Liquan Wang, Shuxin Cao et al.	2607.05780	cs.AI	reasoning, tool-use	6
IMR: Iterative Mode-World Weighted Regression for Multi-Agent Trajectory Prediction	Honglin Wang, Shiyao Pan, Yun-Fu Liu	2607.05705	cs.AI	agent, multi-agent	6
FirstResearch: Auditable Question Formation for LLM Scientific Discovery Agents	Yufeng Wang	2607.05682	cs.AI	agent, planning	6
Evaluating calibrated refusal and safe usefulness in dual-use biology settings	Edwin H. Wintermute, Harmon Bhasin et al.	2607.05462	cs.AI	agent, reasoning	6
Proof of Execution: Runtime Verification for Governed AI Agent Actions	James Rhodes, George Kang	2607.05397	cs.AI	agent, planning	6
LLM-as-a-Verifier: A General-Purpose Verification Framework	Jacky Kwok, Shulu Li, Pranav Atreya et al.	2607.05391	cs.CL	agent, reasoning	6
Unified Audio Intelligence Without Regressing on Text Intelligence	Zhifeng Kong, Sang-gil Lee, Jaehyeon Kim et al.	2607.05196	cs.CL	agent, reasoning	6
EgoDyn-Bench: Evaluating Ego-Motion Understanding in Vision-Centric Foundation Models for Autonomous Driving	Finn Rasmus Schafer, Yuan Gao, Dingrui Wang et al.	2604.22851	cs.CL	reasoning, autonomous	6
SecureCode: A Production-Grade Multi-Turn Dataset for Training Security-Aware Code Generation Models	Scott Thornton	2512.18542	cs.CL	agent, multi-agent	6
MASCA: LLM based-Multi Agents System for Credit Assessment	Gautam Jajoo, Atharva Pandey et al.	2507.22758	cs.CL	agent, multi-agent	6

周环比摘要

指标	本周	上周	变化
扫描论文总数	241	32	+209
智能体相关论文	100	22	+78
多智能体论文	18	2	+16
新基准测试	12	5	+7
MCP 相关论文	3	0	+3
编排框架	5	0	+5
工具使用论文	10	3	+7
推理论文	42	12	+30
自主智能体论文	15	4	+11
智能体密度	41.5%	68.8%	-27.3pp

注：智能体密度的表面下降（68.8% 降至 41.5%）反映本周采集范围扩大，纳入了 cs.CL、stat.ME、cs.FL 和 cs.CV 的跨目录论文。智能体相关论文的绝对数量大幅增长（+78）。

趋势与观察

• MCP 安全崛起为一级研究议题：Mohammadreza Rashidi 的两篇独立漏洞披露论文（2607.05744、2607.05743）代表了对 Model Context Protocol 的首次学术安全分析。第一篇揭示了 Unicode TAG-Block 隐蔽攻击，可在三个独立 MCP 服务器实现的审批视图中隐藏恶意工具元数据载荷。第二篇梳理了 AI 编码智能体执行安全中的 TOCTOU（检查时间到使用时间）漏洞。一周内从 0 到 2 的转变表明，随着 MCP 采用加速（本周还出现了 2 个新的 MCP 电信网络架构），安全研究社区正在跟进。

• 智能体编排成为显式研究主题：本周五篇论文提出了显式编排架构——Danus（数学推理的事实图谱记忆）、CanvasAgent（图像创作的视觉工具编排）、CHARLIE（法医科学的多智能体 RAG）、PolyJarvis（基于 MCP 的分子动力学），以及 MCP-Enabled IPoDWDM 电信自动化论文对。这标志着从单智能体工具调用模式向结构化多步骤、多工具协调的转变。

• 垂直领域智能体加速扩散：本周出现了面向生物信息学（Prompt-to-Paper）、法医科学（CHARLIE）、CAD/工业设计（ArtisanCAD、CanvasAgent）、电信网络（MCP-Enabled IPoDWDM）、分子动力学（PolyJarvis）、奶牛场能源管理、量子计算基础设施（Onnes）和信用评估（MASCA）的智能体。覆盖面的广度表明智能体架构已达到领域特定部署的成熟度。

• 智能体记忆架构多元化：本周出现三种不同的记忆范式——事实图谱记忆（Danus，用于数学推理）、进程内检索即工作记忆（Memory in the Loop），以及叙事世界模型（用于长篇虚构创作）。这种多元化表明社区正从简单的向量存储检索转向结构化、任务特定的记忆系统。

• 多语言智能体评估缺口得到填补：PolyWorkBench 是首个显式评估多语言长程智能体性能的基准测试，挑战了现有基准测试的英语中心假设。RuBench 以原生编写的俄语任务规范补充了仓库级编码智能体的评估。

• 显著变化：本周最重要的结构性转变是 MCP 安全研究从零到两篇论文的涌现，同时伴随两篇新的 MCP 架构论文。这种采用与漏洞披露的汇聚，映射了 Web 和云基础设施中典型的安全生命周期——表明智能体生态系统正进入基础设施安全将日益影响采用决策的阶段。

🔺 Scout Intel: What Others Missed

多数 ArXiv 周报会聚焦 11 篇趋势评分 10 的论文和智能体框架数量的激增。更重要的信号是：MCP 安全已作为学术研究议题正式登场，且一周内即出现两篇漏洞披露。 Unicode TAG-Block 隐蔽攻击（2607.05744）尤其值得关注——它证明 MCP 的审批视图机制（工具调用的主要用户侧安全控制）可被通过在工具元数据中嵌入不可见 Unicode 字符的方式绕过。这意味着大多数 MCP 部署所依赖的”审批前审查”模式存在具体的、可实施的漏洞利用。TOCTOU 论文（2607.05743）进一步表明，编码智能体的执行安全研究分散在沙箱隔离、访问控制和竞态条件等鲜有交叉引用的文献中。这些论文共同表明，智能体基础设施层——协议、执行环境和审批机制——正成为下一个关键研究前沿，尽管多数注意力仍集中在智能体能力和基准测试上。部署基于 MCP 智能体的组织应将这些披露视为早期预警信号，而非理论性担忧。

Previous Snapshots

• Week of Jul 2, 2026
• Week of Jun 25, 2026
• Week of Jun 18, 2026
• Week of Jun 11, 2026
• Week of May 28, 2026
• Week of May 14, 2026
• Week of Apr 23, 2026

Sources

• ArXiv cs.AI RSS Feed — ArXiv, 2026-07-07
• ArXiv cs.CL RSS Feed — ArXiv, 2026-07-07
• ArXiv API - AI Agent Papers — ArXiv, 2026-07-07