{"as_of":"2026-08-13T21:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2837e48647631490988ed8f505e76604c810f05521f112835d9aa881cdbeb864","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T20:19:15.974890Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-11T15:41:57.633586Z","title":"WIPI: A new web threat for llm-driven web agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.10807","last_updated":"2025-06-12T10:17:02Z","snapshot_observed_at":"2026-08-13T14:57:24.603707Z","submitted_at":"2024-12-14T12:11:26Z","title":"Towards Action Hijacking of Large Language Model-based Agent","version":2},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-11T15:41:57.633586Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2412.10807"},"observation_digest":"sha256:36763e8b6a981622be88c8c7d573255cfd474f49f2c27a4d7d86633440115530","observation_id":"09d07956-3344-442e-b2f9-9564eb370fa3","resolution":{"observed_at":"2026-08-11T15:41:57.633586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":"2402.16965","doi":"10.48550/arxiv.2402.16965","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wipi: A new web threat for llm-driven web agents","venue":"arXiv (Cornell University)","work_id":"5479866c-94b6-45f3-b7e2-0543657ff831","year":2024},"citing_paper":{"arxiv_id":"2503.21460","last_updated":"2025-03-27T12:50:17Z","snapshot_observed_at":"2026-07-06T20:59:35.694800Z","submitted_at":"2025-03-27T12:50:17Z","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","version":1},"reference_index":214,"source":"pdf_text","source_observed_at":"2026-05-22T21:51:34.309870Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2503.21460"},"observation_digest":"sha256:93d55e35cc3149518aa9255e5dc6ab72087cd2b18e2613aef2bc946072045697","observation_id":"5a67ba5e-55ae-4a55-a9ed-cae0e2247b6e","resolution":{"observed_at":"2026-05-22T21:52:10.488587Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-07T14:55:02.413647Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-09T00:25:53.983420Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T14:55:02.413647Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2505.16957"},"observation_digest":"sha256:0693fcfe1515f6b24cf8eb161c591f3e0ddb37c05c297d7bd1801b1cbd451e2a","observation_id":"b465385c-b4a5-4813-8224-66ff5ac127b9","resolution":{"observed_at":"2026-08-07T14:55:02.413647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-07T12:06:27.120706Z","title":"WIPI: A new web threat for LLM-driven web agents, February 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-13T16:17:11.467708Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.120706Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:d5e67d4b2240076011a48e49c628f3c7d0171266b2132b1ea0d5f82564f1c323","observation_id":"85ccfadf-ebd4-4392-b29a-a9eac925d76d","resolution":{"observed_at":"2026-08-07T12:06:27.120706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-04T18:34:50.013081Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.09912","last_updated":"2025-09-12T00:57:50Z","snapshot_observed_at":"2026-08-06T21:30:11.969868Z","submitted_at":"2025-09-12T00:57:50Z","title":"When Your Reviewer is an LLM: Biases, Divergence, and Prompt Injection Risks in Peer Review","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-04T18:34:50.013081Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2509.09912"},"observation_digest":"sha256:322a883ed134518ac0f8ac1194818d257fef1276ee7cd481c797e5e6246797f9","observation_id":"d956634c-1425-4993-b5b9-6671ec91a99d","resolution":{"observed_at":"2026-08-04T18:34:50.013081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":"2402.16965","doi":"10.48550/arxiv.2402.16965","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wipi: A new web threat for llm-driven web agents","venue":"arXiv (Cornell University)","work_id":"5479866c-94b6-45f3-b7e2-0543657ff831","year":2024},"citing_paper":{"arxiv_id":"2604.15415","last_updated":"2026-04-16T17:31:52Z","snapshot_observed_at":"2026-08-11T02:24:33.866063Z","submitted_at":"2026-04-16T17:31:52Z","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-10T10:32:37.967401Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2604.15415"},"observation_digest":"sha256:d80ff3f2d3aa41f3af8f20254066775b17e5917dc840629800e7dea028707ceb","observation_id":"321c7dc5-b710-470a-b605-85f068e59955","resolution":{"observed_at":"2026-05-10T10:34:29.353616Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":"2402.16965","doi":"10.48550/arxiv.2402.16965","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wipi: A new web threat for llm-driven web agents","venue":"arXiv (Cornell University)","work_id":"5479866c-94b6-45f3-b7e2-0543657ff831","year":2024},"citing_paper":{"arxiv_id":"2604.23338","last_updated":"2026-05-06T17:17:02Z","snapshot_observed_at":"2026-08-06T19:46:39.219000Z","submitted_at":"2026-04-25T14:57:15Z","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","version":2},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-05-08T07:53:13.746141Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2604.23338"},"observation_digest":"sha256:d9a5e7866935bb2f09ca1ddb0c93f14d6c92913dbbb1662807040b93d0eeff96","observation_id":"b255ceb5-5487-4442-a2be-1dd5cc3c3d88","resolution":{"observed_at":"2026-05-11T20:51:09.227687Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":"2402.16965","doi":"10.48550/arxiv.2402.16965","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wipi: A new web threat for llm-driven web agents","venue":"arXiv (Cornell University)","work_id":"5479866c-94b6-45f3-b7e2-0543657ff831","year":2024},"citing_paper":{"arxiv_id":"2604.25562","last_updated":"2026-04-28T12:32:21Z","snapshot_observed_at":"2026-08-11T05:22:35.711933Z","submitted_at":"2026-04-28T12:32:21Z","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-07T15:48:28.869796Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2604.25562"},"observation_digest":"sha256:e3662e2ab92b5a825136abd3f22cd74bb7fe2a5646017891dc8e22475b78e32e","observation_id":"f0d465d2-902d-40b2-9268-c6492d8da95e","resolution":{"observed_at":"2026-05-12T00:06:17.667349Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":"2402.16965","doi":"10.48550/arxiv.2402.16965","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wipi: A new web threat for llm-driven web agents","venue":"arXiv (Cornell University)","work_id":"5479866c-94b6-45f3-b7e2-0543657ff831","year":2024},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-08-13T15:20:39.475290Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:84153ff7c0ab900c9ec700daf46c9c2f6964cdefbf31c92560b6025290c5d816","observation_id":"784c8f23-8b04-48be-842a-faf0a8ea0d5c","resolution":{"observed_at":"2026-07-01T14:45:49.546943Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":"2402.16965","doi":"10.48550/arxiv.2402.16965","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wipi: A new web threat for llm-driven web agents","venue":"arXiv (Cornell University)","work_id":"5479866c-94b6-45f3-b7e2-0543657ff831","year":2024},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":202,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:70b07581584b5440400ba679e1cef33ff3f516796dbff6ef4fede0d531ff5242","observation_id":"bcee1032-c2db-43e3-865d-a31c2152f6d5","resolution":{"observed_at":"2026-06-27T13:10:57.009828Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-11T20:19:15.974890Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09278","last_updated":"2026-08-10T08:33:19Z","snapshot_observed_at":"2026-08-13T21:40:43.094832Z","submitted_at":"2026-08-10T08:33:19Z","title":"Software Engineering for and with GUI Agent","version":1},"reference_index":257,"source":"pdf_text","source_observed_at":"2026-08-11T20:19:15.974890Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2608.09278"},"observation_digest":"sha256:98c8f48de7b97a4d1dddc8f1ebd4606ad9816d8f2d94dad016d9f442ee318fc6","observation_id":"06ed8c75-3380-4dd3-86c6-fbaf7a0daeb5","resolution":{"observed_at":"2026-08-11T20:19:15.974890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.16965/citation-record","integrity":"/paper/2402.16965/integrity","json":"/paper/2402.16965/citation-record.json","paper":"/paper/2402.16965"},"outbound":[],"paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T04:09:44.364047Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2402.16965."}