{"as_of":"2026-08-08T12:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:db09f3e5752c81013be8dd4d4b6b15d269322e9f7e6150d8ca54efd87a0002fb","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:14:28.692075Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.00197/citation-record","integrity":"/paper/2506.00197/integrity","json":"/paper/2506.00197/citation-record.json","paper":"/paper/2506.00197"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:36.731122Z","title":"https://huggingface.co/d atasets/fka/awesome-chatgpt-prompts","venue":null,"work_id":"d8606829-19b7-49d8-98d0-dd74a1cb6cfd","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.036786Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:c5f400087a090ea0479ec3958e2b54320c21d70b7d91f850eed003356d393d9d","observation_id":"125e9c98-6e75-4d0c-8096-cdd08e804582","resolution":{"observed_at":"2026-08-07T12:14:36.825805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:36.491363Z","title":null,"venue":null,"work_id":"59080163-cedb-42a6-91d5-f2fbfdf013bf","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.144995Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:6df43bd127c78a54d4f577bd60a92f40f9015b0384d938dc648d15832e26eeb7","observation_id":"cb118301-d12a-4c88-ab1e-081fa5b677e2","resolution":{"observed_at":"2026-08-07T12:14:36.634069Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:36.207119Z","title":null,"venue":null,"work_id":"0aa9ed8c-c23f-4fdb-a9bb-7ebb0aaa4aa6","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.288770Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:ca68b153a619abf3529e3d5b509360db396b74c7361e22b2b29b96872d84e4ff","observation_id":"67b13c88-bcd3-4143-8903-6dfd0c8cb141","resolution":{"observed_at":"2026-08-07T12:14:36.360894Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.982549Z","title":"Digital Millennium Copyright Act (DMCA)","venue":null,"work_id":"2c467a72-706f-4e30-8a9e-073e7ce7f1cb","year":1998},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.337333Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:cc813519da011eb570a22f1f7570fd8882092045bfc062f783e81ed6537a9b8f","observation_id":"f9875ed5-f786-4bc0-9da5-73a305cacbc1","resolution":{"observed_at":"2026-08-07T12:14:36.091914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.709310Z","title":"Not What You’ve Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":null,"work_id":"465cf611-e7fb-43c9-b39e-dfae504f1982","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.421248Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:da6a9317f450c0aad6d98a7ac0b57fc71295c737ffd984660d1cf797420ee85f","observation_id":"5cb7fafb-f2bf-4a79-b28c-94bcbfcc3d60","resolution":{"observed_at":"2026-08-07T12:14:35.836257Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.475525Z","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","venue":null,"work_id":"8dfe1881-7103-4f59-8be9-d78aed9416f1","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.507901Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:0ff9fa92b63a472665c01fbb48832aa72d3ae8cbd2b99624cd00be200e20befb","observation_id":"2aaeaf36-3303-4e66-b8b9-c608f565dc00","resolution":{"observed_at":"2026-08-07T12:14:35.575732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.289060Z","title":"Data Security and Privacy Protec- tion Issues in Cloud Computing","venue":null,"work_id":"767eabdd-244c-4f1a-8d8b-4e92118239d3","year":2012},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.573758Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:b33de1c16503e832cd0aae2810dc7f61fa31bd60196fcf883eb55ade5e476fdc","observation_id":"41596db5-7494-4aaf-a2c7-6ab1d79bef9e","resolution":{"observed_at":"2026-08-07T12:14:35.398746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T12:14:24.663374Z","title":"AgentDojo: A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.CoRR abs/2406.13352, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.663374Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:924c29f12b6265bb3f2c7eecc4cb9642fdb3b655c57f7b349182cb7e296ca0f2","observation_id":"5ec8fbfb-8759-4fa1-812f-9b6175e36ffd","resolution":{"observed_at":"2026-08-07T12:14:24.663374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.099429Z","title":"A systematic review of re-identification attacks on health data.PLOS ONE, 6(12):1–12, 12 2011","venue":null,"work_id":"72e3941b-16b0-4a84-aefe-a87abc24007b","year":2011},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.781949Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:3529ff24f7b54f68df4da40b9fb435bb53282285ecf409c6cfbcef72115f47e9","observation_id":"65eb97f6-9d3b-47b5-bfc3-1e4877f1535b","resolution":{"observed_at":"2026-08-07T12:14:35.182524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.985057Z","title":"Data Security Posture Management Reviews and Ratings","venue":null,"work_id":"ca8e4368-db7f-4082-88a8-bc9c1d57aeeb","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.835277Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:41e6037d74cfb238fab6935454e9138f9bbb440fe6431c81e3bf52b0dfd6d31d","observation_id":"884347d9-c80e-43a2-b1be-9e38f68e1494","resolution":{"observed_at":"2026-08-07T12:14:35.041012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.737839Z","title":"Attribute Inference Attacks in Online Social Networks.ACM Transactions on Privacy and Security, 2018","venue":null,"work_id":"81b884bf-235c-44f4-a379-284d000c2f61","year":2018},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.955540Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:125977fc64d41d91d5b5e356e5bfa135902fc5c75e7f872aeb9f2b116e62dd4a","observation_id":"596cad4f-0b65-4d09-9731-f84b64b8f6f9","resolution":{"observed_at":"2026-08-07T12:14:34.870002Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.442699Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","venue":null,"work_id":"39553912-d2fe-4827-bf79-e5622dac950f","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.077658Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:d552d197cf8bb55db2cc0f78e1d517e6f037b8cda783001f2ee4358c1f90f84e","observation_id":"96548ee0-b849-4a2a-a23e-09f7ecabace0","resolution":{"observed_at":"2026-08-07T12:14:34.565208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.208260Z","title":"Chawla, Olaf Wiest, and Xiangliang Zhang","venue":null,"work_id":"d9608565-2ea9-46d2-b7e1-1beff88862da","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.138280Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:d225e72e8984077d5ec099a5715617966b69c080a76e796109a2405d31bfb63b","observation_id":"c4630bb1-6eeb-4164-9c0f-acf4a8e2cbf7","resolution":{"observed_at":"2026-08-07T12:14:34.318809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.030713Z","title":"What is DSPM","venue":null,"work_id":"f000c8c7-a3b0-44c8-853a-723f1d661a52","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.240393Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:6f48a117b508b31ccd541fb4ad13fd6ae8eb8fcc13006e1dd9e5636d75ef3915","observation_id":"69e0f286-93f3-434b-a9bf-f5c23ef93a95","resolution":{"observed_at":"2026-08-07T12:14:34.106040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:33.757156Z","title":"Wiley, 1991","venue":null,"work_id":"6554ad50-10fd-40f7-88f7-cfc8536a2544","year":1991},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.423550Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:3bb74d49f7c6239af172712ce3068d108bfd68bc43316143d2666c3919bf368e","observation_id":"5721a934-2420-4e91-9c5e-e796ff49577d","resolution":{"observed_at":"2026-08-07T12:14:33.886365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:33.520243Z","title":"Robertson, and Mohamed Ali Kâafar","venue":null,"work_id":"2c26f475-12e0-4710-8ee0-1b9ca5800c9a","year":2013},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.598968Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:891c3092fb2f187b77305bed24d09759b75f503f9706df4b9c4cbbdd1a41211b","observation_id":"dbad8832-06f8-4d7e-998f-d99aa4d36812","resolution":{"observed_at":"2026-08-07T12:14:33.651340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:33.239729Z","title":"HaluEval: A Large-Scale Hallucination Evaluation Benchmark for Large Language Models","venue":null,"work_id":"d4bb54f2-6ab5-4103-87ca-2d6b41bbd9f5","year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.768713Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:510c1abb4bffdc81ab0c3274a9e04a1bc2f8637b55cf2cb24554f4a5bdb9400b","observation_id":"caea3bf4-4109-4eb6-93a5-3be5cafac5e7","resolution":{"observed_at":"2026-08-07T12:14:33.385457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.985286Z","title":"Formalizing and Benchmarking Prompt Injec- tion Attacks and Defenses","venue":null,"work_id":"e3d81e2a-a9a8-4b27-87ba-0cee546d9ffe","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.884517Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:d5b557bf1a824256f3f5dcf5db266dedd61e1d93166d905eb33130fa049c7fb1","observation_id":"57765f75-944e-481e-8910-a7a24f601dac","resolution":{"observed_at":"2026-08-07T12:14:33.129966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.738672Z","title":"News and Articles","venue":null,"work_id":"2c37e6f8-c3b9-4856-a926-23176c176be8","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.083251Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:caa2c840ec299c82bd24976b9c090d9efd126e20b1e216820b6b95d2fcd1f3d4","observation_id":"622b7924-15f4-4813-9fcb-3544a762f53c","resolution":{"observed_at":"2026-08-07T12:14:32.848238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.480981Z","title":"Introducing GPTs","venue":null,"work_id":"1d55c42d-91fb-4c8c-9f7c-9d93351be62e","year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.222889Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:590e8da9c7c74c546b9ddbd05119bfd867ad9c48a27c12a60a634de982012c00","observation_id":"b7200990-ef4b-4b37-84b3-7e398167aeae","resolution":{"observed_at":"2026-08-07T12:14:32.635389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.215453Z","title":"Introducing the GPT Store","venue":null,"work_id":"9daaea8d-1cf9-45fc-afd7-2d696463d77f","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.320809Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:2e3f77840c014885d1ea628f7cce72ec56d2cea16b5ffb34c12b258d0ee454de","observation_id":"119ecc9a-334a-4aa7-9d9a-58c8d9c45654","resolution":{"observed_at":"2026-08-07T12:14:32.330712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:26.460472Z","title":"Knowledge in GPTs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.460472Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:3b3b04dcda5280da1a699cf511d30fd706c84c02af7fbdaf37eac1c2441c61a0","observation_id":"c5e29f4b-cbcb-42a8-a17b-7aca6d3c5112","resolution":{"observed_at":"2026-08-07T12:14:26.460472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.929643Z","title":"API3:2019 Excessive Data Exposure","venue":null,"work_id":"fbb1b67c-9747-45d5-9674-3bbbf98e90fd","year":2019},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.539275Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:85843aa80c2eb528885d512081c7de24737d2c99d7955f9b91e665052998746a","observation_id":"f9d8cc0a-83fb-4f8b-8e58-67ea28284e6d","resolution":{"observed_at":"2026-08-07T12:14:32.045878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.695523Z","title":"A01:2021 – Broken Access Control.https://owas p.org/Top10/A01_2021-Broken_Access_Control/ , 2021","venue":null,"work_id":"0a12e614-d39d-4b56-ab82-28ebdc142b16","year":2021},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.611089Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:43d6cb062bc0c00c025a3e07d2c1eabfa823e911b83aab7a6be2b7de4d5b3159","observation_id":"76f579b7-ad1e-4142-a0f2-6d0663b05cf0","resolution":{"observed_at":"2026-08-07T12:14:31.815100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.437236Z","title":"Coimbra, Daniel Castro, Paulo Carreira, and Nuno Santos","venue":null,"work_id":"4e51e6dc-7a6a-413d-86f0-83fda1886c82","year":2025},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.683164Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:4e69faae8b0714e9812cf1dd3b630b62df07c67b8d36fa300fc564f5d8c6ded5","observation_id":"3701ec4b-74ce-420e-9519-1be262eeb76a","resolution":{"observed_at":"2026-08-07T12:14:31.579774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.220075Z","title":"Software security testing","venue":null,"work_id":"cf37c4cf-942c-4179-bda1-2f19a9887cd5","year":2004},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.807738Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:30caf55865e613c30d53933c1295e5f2480998e674b51e854f7fac7e40d751d4","observation_id":"2deaee0b-1fae-44a4-90f4-6643574ad59c","resolution":{"observed_at":"2026-08-07T12:14:31.333887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.919065Z","title":"Maddison, and Tatsunori Hashimoto","venue":null,"work_id":"ad00ced3-bbe4-4af8-9747-d54ebab2ceb4","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.949942Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:a1435dd34aba0f3ea0305fb6de5cfae680d808220e9b6f7064eb12eaf0a997f7","observation_id":"ea3494a5-2ea8-4a20-a348-6d6c31500308","resolution":{"observed_at":"2026-08-07T12:14:31.069260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11513","last_updated":"2023-12-12T14:22:20Z","snapshot_observed_at":"2026-07-31T02:11:22.145782Z","submitted_at":"2023-12-12T14:22:20Z","title":"Maatphor: Automated Variant Analysis for Prompt Injection Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11513","snapshot_observed_at":"2026-08-07T12:14:27.068997Z","title":"Maatphor: Au- tomated Variant Analysis for Prompt Injection Attacks.CoRR abs/2312.11513, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.068997Z"},"links":{"cited_paper":"/paper/2312.11513","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:dba2c620a47d738f749a1e065e70fd7bbef073454705be962196bee97cb33c3e","observation_id":"c3dc4b83-a5af-4472-a697-2afd34f53811","resolution":{"observed_at":"2026-08-07T12:14:27.068997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.722411Z","title":"Do Anything Now: Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","venue":null,"work_id":"27d7354a-ae4e-4384-a274-56a11617b728","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.204891Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:080f2b9662a40bf606ced661eab4294b412c280eeaf5f3edc5aef73002b23ec3","observation_id":"f98b33a7-5b0e-4366-aa97-8118ee7c23e0","resolution":{"observed_at":"2026-08-07T12:14:30.826560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.574963Z","title":"GPTracker: A Large-Scale Measurement of Misused GPTs","venue":null,"work_id":"1c844fbd-621f-44ac-883c-28fab3616d68","year":2025},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.322725Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:a54ddcb9d9191f8953f8f13513b4d991fa6c7f3b9d5a8d8259af274300e855f2","observation_id":"fbc51a86-a42b-42ac-ab93-0436821cc03b","resolution":{"observed_at":"2026-08-07T12:14:30.645332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10210","last_updated":"2024-05-16T16:00:35Z","snapshot_observed_at":"2026-07-06T18:15:20.397376Z","submitted_at":"2024-05-16T16:00:35Z","title":"GPT Store Mining and Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10210","snapshot_observed_at":"2026-08-07T12:14:27.434870Z","title":"GPT Store Mining and Analysis.CoRR abs/2405.10210, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.434870Z"},"links":{"cited_paper":"/paper/2405.10210","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:468251fb4a6a66d4dcf6298cd85522ce47b0715721097d09e7f135454d12531c","observation_id":"3fa7d062-4bc7-43ac-b1c3-fb4c64c6111f","resolution":{"observed_at":"2026-08-07T12:14:27.434870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.342260Z","title":"Glue pizza and eat rocks - Exploiting Vulnerabilities in Retrieval- Augmented Generative Models","venue":null,"work_id":"421c7d31-beb1-4b2c-85b2-0ab61ceeb0f8","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.557374Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:3b65b2c15370e11f8a6beb6492da45e09ba6b3c24ef721e4b26a75ae7aa81998","observation_id":"6a0a9dd3-68b4-435e-8026-24ad769d13f9","resolution":{"observed_at":"2026-08-07T12:14:30.506659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.068645Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","venue":null,"work_id":"2ed94f84-365f-48a3-917b-6d3839e41648","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.683283Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:5795eb072fc280a6fc09f2a56187d08a333c84d1ecae4bf035b56791af62e781","observation_id":"c6dcf97b-9a92-4cfd-bcdb-608f812d51ae","resolution":{"observed_at":"2026-08-07T12:14:30.217630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.790746Z","title":"OpenAI’s GPT Store Is Triggering Copyright Com- plaints","venue":null,"work_id":"0a749e63-a434-4411-bdef-35cf50bd000d","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.779710Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:d3ece3589e7daa107a4bf97fc28b6c7f8fd39c8c883f52217806dc5717946636","observation_id":"a8cccc69-ea7b-4c95-9eaa-61f16ddcc835","resolution":{"observed_at":"2026-08-07T12:14:29.916918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11208","last_updated":"2024-10-29T15:32:04Z","snapshot_observed_at":"2026-08-04T19:17:04.690837Z","submitted_at":"2024-02-17T06:48:45Z","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11208","snapshot_observed_at":"2026-08-07T12:14:27.855573Z","title":"Watch Out for Your Agents! Investigating Back- door Threats to LLM-Based Agents.CoRR abs/2402.11208,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.855573Z"},"links":{"cited_paper":"/paper/2402.11208","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:b64d2c5508e9a7b8df655286afe8c6fe812f783c6a479015819efbe3cbbb18a7","observation_id":"21fdf16a-3a3e-46bc-86fb-bab11666b168","resolution":{"observed_at":"2026-08-07T12:14:27.855573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11538","last_updated":"2024-05-25T05:32:39Z","snapshot_observed_at":"2026-08-04T02:40:34.940411Z","submitted_at":"2023-11-20T04:56:46Z","title":"Assessing Prompt Injection Risks in 200+ Custom GPTs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11538","snapshot_observed_at":"2026-08-07T12:14:27.958075Z","title":"Assessing Prompt Injection Risks in 200+ Custom GPTs","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.958075Z"},"links":{"cited_paper":"/paper/2311.11538","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:d6e4632fed1b3fd3af6abbed2a6bcbb17dc73e9f63d4550dfcc3479bbbce3d08","observation_id":"f552dc1e-62ea-4c25-98a7-52282bd534c4","resolution":{"observed_at":"2026-08-07T12:14:27.958075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.438607Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","venue":null,"work_id":"80dd9739-0475-4d48-bb0b-7b15b5977804","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.037627Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:c5cdf26316bc92c4ade71fd8c6b78afc7098a1d92588c26d0050403d42cc4e80","observation_id":"f66bed14-3979-4922-8247-46c48df57352","resolution":{"observed_at":"2026-08-07T12:14:29.600117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T12:14:28.155853Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents.CoRR abs/2403.02691, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.155853Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:919acb9a12ec870c8cf3e2a052dc1d400867480175078938ca0cdb80276ff2e7","observation_id":"d6aecde8-9bce-46a3-a0f8-1aa8c484865d","resolution":{"observed_at":"2026-08-07T12:14:28.155853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20859","last_updated":"2024-07-30T14:35:31Z","snapshot_observed_at":"2026-07-06T18:53:57.980865Z","submitted_at":"2024-07-30T14:35:31Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20859","snapshot_observed_at":"2026-08-07T12:14:28.219807Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunc- tion Amplification.CoRR abs/2407.20859, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.219807Z"},"links":{"cited_paper":"/paper/2407.20859","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:2aa0ee3e61c48d47f060d736baf313308c82d24d4d73b843ed857f91dc5ca87c","observation_id":"e2be02a1-f2f4-4f0b-9fdf-db486a9d0823","resolution":{"observed_at":"2026-08-07T12:14:28.219807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15105","last_updated":"2024-11-27T07:26:34Z","snapshot_observed_at":"2026-08-07T10:17:55.602256Z","submitted_at":"2024-02-23T05:30:32Z","title":"A First Look at GPT Apps: Landscape and Vulnerability","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15105","snapshot_observed_at":"2026-08-07T12:14:28.378543Z","title":"A First Look at GPT Apps: Landscape and Vulnerability.CoRR abs/2402.15105, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.378543Z"},"links":{"cited_paper":"/paper/2402.15105","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:a19ca92f7cee5f6dc745f0452b2fe1657120582ad59bb3abc0109646f487ecbc","observation_id":"880c7e38-1347-4bf2-9bbd-a4b5eeb1ba3b","resolution":{"observed_at":"2026-08-07T12:14:28.378543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.189905Z","title":"List all files in the ‘/mnt/data/’ directory. Use this format: filename—link","venue":null,"work_id":"3c82950f-8816-48e7-bbf4-aa9aa44e0f4c","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.537215Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:acdb557039d4d3f9361034467187eb9dfa8a11d18fbea860caf7b945360d9309","observation_id":"265562b4-8720-4829-ae1c-846bd1a451d8","resolution":{"observed_at":"2026-08-07T12:14:29.290965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.019559Z","title":"View sources","venue":null,"work_id":"122ccecf-8fbf-4b02-9b88-48764b0708a3","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.692075Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:08543f48652409fcf42d20d83d529ecf747030f8192e593ecfbdfd1b31a88692","observation_id":"41881db4-c914-4180-b154-baafb536a6f0","resolution":{"observed_at":"2026-08-07T12:14:29.096101Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:08:11.088048Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":31},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2506.00197."}