{"as_of":"2026-08-09T23:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:67cab5953c2c4e9dc6cf817f375c497fe461318314d8dc465e263e29d028082b","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":26,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:37:51.603999Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":2,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-13T09:02:40.294491Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2503.23278"},"observation_digest":"sha256:70abe8991984ad08ac65549f34d2a4b4e22b7fafed6388b7d3bbff6d96eb1690","observation_id":"66e6083f-e437-47c3-874b-88c06a6b83e7","resolution":{"observed_at":"2026-05-13T09:02:40.411688Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-07T15:37:51.603999Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.14534","last_updated":"2025-05-20T15:54:45Z","snapshot_observed_at":"2026-08-08T20:01:40.635798Z","submitted_at":"2025-05-20T15:54:45Z","title":"Lessons from Defending Gemini Against Indirect Prompt Injections","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T15:37:51.603999Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2505.14534"},"observation_digest":"sha256:b497d0ba4783517fc0b484f01f30342986d07b839cd63fda3cee6bd310299def","observation_id":"aab7e631-2d14-4b0c-921c-5c3990c973cf","resolution":{"observed_at":"2026-08-07T15:37:51.603999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-07T04:34:08.000242Z","title":"arXiv preprint arXiv:2410.14923","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.10217","last_updated":"2025-07-01T01:49:13Z","snapshot_observed_at":"2026-08-08T01:06:19.422038Z","submitted_at":"2025-06-11T22:26:50Z","title":"Data-Centric Safety and Ethical Measures for Data and AI Governance","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T04:34:08.000242Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2506.10217"},"observation_digest":"sha256:48bdbbe1c0edc69e2227f82c2030c5789e2ff2700c2e6b148457b3aba067ac34","observation_id":"ac2626e6-3ed5-47fa-8f37-4d423204ba59","resolution":{"observed_at":"2026-08-07T04:34:08.000242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-07T00:32:36.507283Z","title":"Imprompter: Tricking llm agents into improper tool use.arXiv preprint arXiv:2410.14923, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-07T00:25:36.770856Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:32:36.507283Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2506.13666"},"observation_digest":"sha256:adf322d400f2324ca72ace93cd72577cf5781b81bc6148eaed0efde490c0a8c0","observation_id":"87ea844c-4b84-4efe-b22f-b0f8cc12c09b","resolution":{"observed_at":"2026-08-07T00:32:36.507283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2506.20911","last_updated":"2026-05-06T17:42:17Z","snapshot_observed_at":"2026-07-06T21:47:49.078141Z","submitted_at":"2025-06-26T00:33:43Z","title":"FaSTA$^*$: Fast-Slow Toolpath Agent with Subroutine Mining for Efficient Multi-turn Image Editing","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-19T08:17:08.223736Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2506.20911"},"observation_digest":"sha256:14c95ddf47599aed53a0c472fa853363a1264420368a13103e94957123fb15ce","observation_id":"ef7e3098-7e36-4660-b5c1-1aa73879559b","resolution":{"observed_at":"2026-05-19T08:17:10.746601Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-06T21:34:45.093922Z","title":"Imprompt: Prompt-based attacks on tool-using llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":122,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.093922Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:11eb3df8dfcf302041cbe99d680b579e45b2fd92252bb545537e8f911ed0cded","observation_id":"b8580e78-b2fc-44d8-ad47-fd96cdb4f583","resolution":{"observed_at":"2026-08-06T21:34:45.093922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-06T15:52:56.510579Z","title":"Aaron Grattafiori, Abhimanyu Dubey, Abhinav Jauhri, Abhinav Pandey, Abhishek Kadian, Ahmad Al- Dahle, Aiesha Letman, Akhil Mathur, Alan Schelten, Alex Vaughan, and 1 others","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14799","last_updated":"2025-07-20T03:10:13Z","snapshot_observed_at":"2026-08-06T23:52:08.348122Z","submitted_at":"2025-07-20T03:10:13Z","title":"Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T15:52:56.510579Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2507.14799"},"observation_digest":"sha256:0e5e53d698e307fd6a14c1037b9a6dfc6cf0c158fe8968387b3fffb5a39add1a","observation_id":"757c4528-ba1f-4594-9e0b-f07bfcbb87e9","resolution":{"observed_at":"2026-08-06T15:52:56.510579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T15:29:05.783421Z","title":"Gupta, Taylor Berg- Kirkpatrick, and Earlence Fernandes","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19834","last_updated":"2025-08-27T12:38:33Z","snapshot_observed_at":"2026-08-08T01:07:52.679680Z","submitted_at":"2025-08-27T12:38:33Z","title":"On the Future of Software Reuse in the Era of AI Native Software Engineering","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T15:29:05.783421Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2508.19834"},"observation_digest":"sha256:bd0034498e2bad0493a60a3eabcdcfdc98827d0241ac0780365af113dac9ab1f","observation_id":"4a7c8dd4-d55a-448e-aa63-0896643f70a5","resolution":{"observed_at":"2026-08-05T15:29:05.783421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-04T21:44:12.278474Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07764","last_updated":"2025-09-09T13:59:00Z","snapshot_observed_at":"2026-08-04T21:44:11.122043Z","submitted_at":"2025-09-09T13:59:00Z","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T21:44:12.278474Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2509.07764"},"observation_digest":"sha256:0442214e58247c27445dce548b70effd8cd9c4bdbd960e35ff04071dcfc0e396","observation_id":"dc60bca4-8180-45eb-ab43-56784df000e4","resolution":{"observed_at":"2026-08-04T21:44:12.278474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2510.21236","last_updated":"2026-04-24T09:59:19Z","snapshot_observed_at":"2026-07-06T22:33:58.663508Z","submitted_at":"2025-10-24T08:10:36Z","title":"AgentBound: Securing Execution Boundaries of AI Agents","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-18T05:12:23.542793Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2510.21236"},"observation_digest":"sha256:a990aacc6d093ef14ad5b423d3562cc73645dd5d4dbea617d498c15227dd564f","observation_id":"02c1bb54-0bef-4954-b47c-dde9e019eabb","resolution":{"observed_at":"2026-05-18T05:15:54.156005Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:0155753e2770d522efbd32b7ebcb757b3c666003918c9acbed4fc6ab247581e0","observation_id":"8fae375b-c2cf-4058-b1bf-1bed57620730","resolution":{"observed_at":"2026-05-18T03:42:22.516285Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2601.18842","last_updated":"2026-05-13T07:11:36Z","snapshot_observed_at":"2026-08-01T18:25:13.403669Z","submitted_at":"2026-01-26T11:33:40Z","title":"GUIGuard-Bench: Toward a General Evaluation for Privacy-Preserving GUI Agents","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-16T11:31:16.087579Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2601.18842"},"observation_digest":"sha256:d5d9839c14f2ba627caff885c937b7a5e09d82a181168d5c00b00f16f01bc31a","observation_id":"2f4b6a39-39f6-49ec-80b1-3cfe183eaf56","resolution":{"observed_at":"2026-05-16T11:32:48.257431Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-08-07T20:18:19.353329Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-05-16T05:05:16.370606Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2602.11327"},"observation_digest":"sha256:5fb6336adb4848e48e4558f13e3096f49630e1c604888b4a3c7062e21546f434","observation_id":"5d05004d-b4bb-4c5f-ad2c-0db093425c95","resolution":{"observed_at":"2026-05-16T05:07:20.812637Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-07-14T20:40:43.875392Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2603.15125","last_updated":"2026-06-05T07:33:44Z","snapshot_observed_at":"2026-08-07T06:17:50.557169Z","submitted_at":"2026-03-16T11:21:30Z","title":"From Storage to Steering: Memory Control Flow Attacks on LLM Agents","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-14T20:40:43.875392Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2603.15125"},"observation_digest":"sha256:72a39e044b647b65ccc8e7ff6554f44410e623e2a5ba91f031948d22d78d2401","observation_id":"fe22c24f-fdc2-4fff-94a8-7539659ed8de","resolution":{"observed_at":"2026-07-14T20:40:43.875392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2604.03070","last_updated":"2026-06-19T04:47:04Z","snapshot_observed_at":"2026-07-13T13:34:41.070446Z","submitted_at":"2026-04-03T14:50:16Z","title":"How Your Credentials Are Leaked by LLM Agent Skills: An Empirical Study","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-13T19:51:29.230241Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2604.03070"},"observation_digest":"sha256:26fb3fcbfa140848d38377b296201fc81ef3ff5da7106d5b318f69e4f1f89263","observation_id":"f631d8a7-2d9a-4229-aa2a-57fef3addcd8","resolution":{"observed_at":"2026-05-13T19:53:11.688398Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2604.15415","last_updated":"2026-04-16T17:31:52Z","snapshot_observed_at":"2026-07-06T23:02:58.361418Z","submitted_at":"2026-04-16T17:31:52Z","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-10T10:32:37.967401Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2604.15415"},"observation_digest":"sha256:95ccab7e5b2780211995b1ce8a44d98cc3f6a59cdf47227cbc83d8b6edcccf5c","observation_id":"1fe5a63e-6a84-41a7-bcfe-92c99bfd40c2","resolution":{"observed_at":"2026-05-10T10:34:29.224645Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-07-06T23:26:23.179482Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:0ff05ec53e1339a64f124300d3383d87e21fd1359ad858d0ce75bac82acbc8e4","observation_id":"bb9e389e-d419-4939-bb20-1b698435fbbf","resolution":{"observed_at":"2026-07-01T14:45:49.558073Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-22T05:50:28.114140Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:f2e60a3fa402512dcd82c4aa8fd9ede7c4a93b3d26fbf02601fbc38b6c48a4c1","observation_id":"432be1f4-7116-4eb1-a1ec-aeef85c35e84","resolution":{"observed_at":"2026-05-22T05:51:07.946360Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-25T06:05:27.736494Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:be4dbf79a1b996da7033862866de0d82af81a3082671a4a2b8519993a8a9934d","observation_id":"f4c8e78c-002a-4c01-bf51-b6d2680fb3ee","resolution":{"observed_at":"2026-05-25T06:06:43.046681Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2606.00497","last_updated":"2026-05-30T03:00:28Z","snapshot_observed_at":"2026-07-31T17:49:49.063236Z","submitted_at":"2026-05-30T03:00:28Z","title":"\"I Strongly Suspect This Website Is a Scam\": Benchmarking PII Leakage and Detection without Defense in Autonomous Web Agents","version":1},"reference_index":127,"source":"arxiv_source","source_observed_at":"2026-06-28T18:53:41.420255Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2606.00497"},"observation_digest":"sha256:4548422e602fcb189f521ebb5dcb0c15867915c796e08a68fbf5d5b8708f643a","observation_id":"a32cd385-442e-4221-ae45-5eeb7ecd29dd","resolution":{"observed_at":"2026-06-28T19:42:36.161487Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2606.10525","last_updated":"2026-06-09T07:54:58Z","snapshot_observed_at":"2026-08-07T10:29:56.938339Z","submitted_at":"2026-06-09T07:54:58Z","title":"Assessing Automated Prompt Injection Attacks in Agentic Environments","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T12:47:09.467463Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2606.10525"},"observation_digest":"sha256:0a2893a618a9c9ac6d07a48d087adf6f50d0c760eb5f991fc4ab746eab1baaf1","observation_id":"79b665f1-26d8-4d01-bda8-fcab0f5f660b","resolution":{"observed_at":"2026-07-03T06:17:41.981522Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2606.12474","last_updated":"2026-06-10T05:37:58Z","snapshot_observed_at":"2026-08-03T00:29:20.709630Z","submitted_at":"2026-06-10T05:37:58Z","title":"SAIGuard: Communication-State Simulation for Proactive Defense of LLM Multi-Agent Systems","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-27T08:04:15.004591Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2606.12474"},"observation_digest":"sha256:45fd059f12b269228c4c5675a1062163d6d2cf475ebe2a5e4830388ef1c97fbb","observation_id":"5486ad3f-d5bb-4798-af87-ff92b493f921","resolution":{"observed_at":"2026-07-03T13:28:18.842251Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":"2410.14923","doi":"10.48550/arxiv.2410.14923","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gupta, Taylor Berg-Kirkpatrick, and Earlence Fernandes","venue":"arXiv (Cornell University)","work_id":"00099e88-7d52-4846-aa97-0e49e327a206","year":2024},"citing_paper":{"arxiv_id":"2606.15057","last_updated":"2026-06-19T04:47:48Z","snapshot_observed_at":"2026-08-06T02:12:16.016081Z","submitted_at":"2026-06-13T02:09:08Z","title":"AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-27T04:57:54.827932Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2606.15057"},"observation_digest":"sha256:f86aeb60d86c6e3084a126515f16cea40a6193327c5aa0c826310b7e0160fd8b","observation_id":"8a2bfdbd-ac6d-49fe-a55a-265fd27b1e89","resolution":{"observed_at":"2026-07-03T16:48:40.495135Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-07-11T23:43:28.649948Z","title":"Imprompter: Tricking LLM agents into improper tool use,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03821","last_updated":"2026-07-04T11:12:36Z","snapshot_observed_at":"2026-08-04T05:25:45.960823Z","submitted_at":"2026-07-04T11:12:36Z","title":"DualView: Preventing Indirect Prompt Injection in Personal AI Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-11T23:43:28.649948Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2607.03821"},"observation_digest":"sha256:1e5346bf28b1c3533a9b5d695e9c39139f08001f8ca10983b7e7dcdb2b38866b","observation_id":"c52f5f5f-d966-4c28-9e05-07c50195f8c3","resolution":{"observed_at":"2026-07-11T23:43:28.649948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-07-11T08:31:36.099368Z","title":"Imprompter: Tricking llm agents into improper tool use,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.05120","last_updated":"2026-07-06T14:07:49Z","snapshot_observed_at":"2026-08-05T18:00:12.068331Z","submitted_at":"2026-07-06T14:07:49Z","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-11T08:31:36.099368Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2607.05120"},"observation_digest":"sha256:50436d8b3c883e9dc3ccc49e92798b74501057a0dd2657b717e8ab35e7cca234","observation_id":"aa3314d3-c3fa-4027-98e2-0b3b8e754aea","resolution":{"observed_at":"2026-07-11T08:31:36.099368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-01T06:04:46.607188Z","title":"arXiv preprint arXiv:2410.14923 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-08T12:54:01.031419Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":269,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.607188Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:d6047d53369914c46c6a65257cb422f17d57006dbe35a191310ff93269e67529","observation_id":"61022b50-8da0-46cb-85f6-ca54b0432b68","resolution":{"observed_at":"2026-08-01T06:04:46.607188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.14923/citation-record","integrity":"/paper/2410.14923/integrity","json":"/paper/2410.14923/citation-record.json","paper":"/paper/2410.14923"},"outbound":[],"paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T01:05:56.776964Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 26 inbound Pith citation observations for arXiv:2410.14923."}