{"as_of":"2026-08-07T15:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:18d22695430fa008180d2d561f222a20dd2fe5102177f3a1ad43050c75f3e436","coverage":[{"denominator":69,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":69,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:06:29.178864Z","state":"measured"},{"denominator":78,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":78,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:30:41.349884Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T10:15:44.749818Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-08-06T15:30:41.349884Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15759","last_updated":"2025-07-21T16:15:18Z","snapshot_observed_at":"2026-08-07T12:39:48.882990Z","submitted_at":"2025-07-21T16:15:18Z","title":"Interaction as Intelligence: Deep Research With Human-AI Partnership","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-06T15:30:41.349884Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2507.15759"},"observation_digest":"sha256:342a2fd5189de3c407d0600bf81e2fd9c91471a80af3b8df41ab8d480126b2ca","observation_id":"e1f0af57-0761-4a52-8269-243c52467e34","resolution":{"observed_at":"2026-08-06T15:30:41.349884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-08-06T13:06:39.600377Z","title":"Riosworld: Benchmarking the risk of multimodal compter-use agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21017","last_updated":"2025-07-28T17:38:29Z","snapshot_observed_at":"2026-08-07T12:39:13.524680Z","submitted_at":"2025-07-28T17:38:29Z","title":"MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T13:06:39.600377Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2507.21017"},"observation_digest":"sha256:ab6604dfadbdb0b16bc288b5b2c2114658bbd74711bc8c16c73484044f54a995","observation_id":"e02f4beb-6747-45b5-a515-3a32c537d92a","resolution":{"observed_at":"2026-08-06T13:06:39.600377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2604.13531","last_updated":"2026-04-15T06:27:49Z","snapshot_observed_at":"2026-07-06T23:01:32.542040Z","submitted_at":"2026-04-15T06:27:49Z","title":"RiskWebWorld: A Realistic Interactive Benchmark for GUI Agents in E-commerce Risk Management","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-10T13:40:55.540869Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2604.13531"},"observation_digest":"sha256:25983b3b1f5408ea3f286a0d89c136d6e80d0333fb6085df63ceac3e57a6e894","observation_id":"198f2fce-0baa-458a-a94e-b9c340a9c42c","resolution":{"observed_at":"2026-05-10T13:45:28.535266Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2605.07110","last_updated":"2026-05-08T01:38:46Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T01:38:46Z","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-11T01:15:19.239355Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2605.07110"},"observation_digest":"sha256:56767c8c3faaef680e3bbfdcd666eb092c2b97bb55ad87948052a684f57a93ef","observation_id":"4f14a556-c514-44ac-ade0-270597fdf455","resolution":{"observed_at":"2026-05-11T04:35:56.403952Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2605.07630","last_updated":"2026-05-08T11:58:57Z","snapshot_observed_at":"2026-07-06T23:20:01.856093Z","submitted_at":"2026-05-08T11:58:57Z","title":"Safe, or Simply Incapable? Rethinking Safety Evaluation for Phone-Use Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-11T02:00:17.765986Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2605.07630"},"observation_digest":"sha256:5d59f75868183ff00351f8c480026d81a96db013118afbe07f0f3f5da434da24","observation_id":"2bd2be58-e9cb-47bf-9b50-bbe51e238bf6","resolution":{"observed_at":"2026-05-11T04:00:56.737761Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2605.13631","last_updated":"2026-06-10T08:07:41Z","snapshot_observed_at":"2026-08-06T00:45:09.267894Z","submitted_at":"2026-05-13T14:58:24Z","title":"ProjGuard: Safety Monitoring for Computer-Use Agents via Low-Dimensional Projections","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-30T21:12:50.686474Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2605.13631"},"observation_digest":"sha256:00f59f733f61a670857f0210872a6035382db0eff636bc62bc8bc092490efaac","observation_id":"08533699-b62e-4b8c-9fd0-ff7e54baaf87","resolution":{"observed_at":"2026-06-30T21:15:04.158298Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2606.29537","last_updated":"2026-07-13T10:30:17Z","snapshot_observed_at":"2026-07-17T23:18:06.822637Z","submitted_at":"2026-06-28T17:59:17Z","title":"OSWorld 2.0: Benchmarking Computer Use Agents on Long-Horizon Real-World Tasks","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-06-30T07:10:38.909339Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2606.29537"},"observation_digest":"sha256:c34f82ee3e2092694136a05f2b0bee2d6e2f1b2aa562b9ebd2e66228de1234f5","observation_id":"8440b821-8599-4093-98be-be1f3d70b564","resolution":{"observed_at":"2026-06-30T07:14:21.161346Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-15T10:24:53.345620Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.29537","last_updated":"2026-07-13T10:30:17Z","snapshot_observed_at":"2026-07-17T23:18:06.822637Z","submitted_at":"2026-06-28T17:59:17Z","title":"OSWorld 2.0: Benchmarking Computer Use Agents on Long-Horizon Real-World Tasks","version":2},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-07-15T10:24:53.345620Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2606.29537"},"observation_digest":"sha256:d7fede8f8a53e4441861c35041006fadf2dde9a7f21b58d5cb8c91cb0b1dd977","observation_id":"53b68dca-4d98-4e7b-a568-5e48b6d6d008","resolution":{"observed_at":"2026-07-15T10:24:53.345620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2606.31551","last_updated":"2026-06-30T12:09:51Z","snapshot_observed_at":"2026-08-02T07:22:06.505365Z","submitted_at":"2026-06-30T12:09:51Z","title":"AutoTrainess: Teaching Language Models to Improve Language Models Autonomously","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-01T05:39:48.575174Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2606.31551"},"observation_digest":"sha256:dc0058a17919b69ed61b77c67dd619843d77d337bb83feb855ba24d3f8c6abff","observation_id":"515df8a8-1794-4b4b-8e36-3b00d246e64a","resolution":{"observed_at":"2026-07-01T10:15:44.751236Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.00618/citation-record","integrity":"/paper/2506.00618/integrity","json":"/paper/2506.00618/citation-record.json","paper":"/paper/2506.00618"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.08164","last_updated":"2024-10-10T17:43:51Z","snapshot_observed_at":"2026-07-06T19:31:23.072307Z","submitted_at":"2024-10-10T17:43:51Z","title":"Agent S: An Open Agentic Framework that Uses Computers Like a Human","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.08164","snapshot_observed_at":"2026-08-07T12:06:22.590276Z","title":"Agent s: An open agentic framework that uses computers like a human.arXiv preprint arXiv:2410.08164, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.590276Z"},"links":{"cited_paper":"/paper/2410.08164","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:7cb1278420e6e27b9757d0512a895d47eeb06786d2db51863a1211c4b6832543","observation_id":"284988e6-016b-48e4-b6ee-e89aa93bbbdf","resolution":{"observed_at":"2026-08-07T12:06:22.590276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:22.686046Z","title":"Attacking multimodal os agents with malicious image patches.arXiv preprint arXiv:2503.10809, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.686046Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:73ee0ff8997da1e2688af77748a5619b40ef9607aea7149b7dd46b38b9b3f296","observation_id":"5e0d7b01-54a6-44a2-9c25-6f91021d9e8c","resolution":{"observed_at":"2026-08-07T12:06:22.686046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-07T12:06:22.753457Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents.arXiv preprint arXiv:2410.09024, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.753457Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:93c9df426620bda09b4240ceec43d8f2981f4871517469f5339d8877e8f7bc1d","observation_id":"457ecadb-2fa0-4c52-b68d-af978cbd43bc","resolution":{"observed_at":"2026-08-07T12:06:22.753457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:34.278946Z","title":"Introducing computer use, a new Claude 3.5 Sonnet, and Claude 3.5 Haiku, October","venue":null,"work_id":"b8333778-43e8-41da-9947-d13f3de50c05","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.867309Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:934a50c7fdc3e73cf086d7bcf3332961e747a57a9ce4917196d812b2e6f51139","observation_id":"8f9d311f-9945-4c27-b3ec-2821158f37f3","resolution":{"observed_at":"2026-08-07T12:06:34.359550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.962126Z","title":"The claude 3 model family: Opus, sonnet, haiku.https://www- cdn.anthropic.com/de8ba9b01c9ab7cbabf5c33b80b7bbc618857627/Model_Card_Claude_3.pdf, 2024","venue":null,"work_id":"f8fce480-0594-43ec-bd58-f072563c150a","year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.019663Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:41a5c37d76cbeb9165b8bc243e9514497aecee213c9761f550da974a93fa4bec","observation_id":"64218e8f-8491-4f08-986b-40d6d266ad9e","resolution":{"observed_at":"2026-08-07T12:06:34.036970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.810179Z","title":"Claude 3.7 sonnet system card, October 2025","venue":null,"work_id":"1ad62905-1f4f-4768-9756-a7c37ca2f16c","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.095720Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:311907f4b2176cd736fd0bdd1a7483cc01066697ca07821d3fbf9e74630170da","observation_id":"c2bb2ada-3d80-4f13-bf05-f14fc7c0363f","resolution":{"observed_at":"2026-08-07T12:06:33.880157Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.609402Z","title":"Developing a computer use model, October 2025","venue":null,"work_id":"e45c203e-f4f9-42be-af64-9506a3858ef4","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.186031Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:74e0673b762d594c71fea27fdb3a404be93a21aaa66a9970a97fd37bbb8cc984","observation_id":"4ee72da9-71eb-4ad0-b1cf-d867dd7d1307","resolution":{"observed_at":"2026-08-07T12:06:33.712367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-07T12:06:23.264319Z","title":"Qwen technical report.arXiv preprint arXiv:2309.16609, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.264319Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:9b44f82d13105bc2dc7b1cd7e72b58bed39e51d3229e843eba4c90ed9f231762","observation_id":"c77596af-e757-439b-aa3f-30285f37420d","resolution":{"observed_at":"2026-08-07T12:06:23.264319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-07T12:06:23.352657Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.352657Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:c92c59349c3f70c0e5e8b978265ea7af9597fa87ce275944ae76535f83e2a390","observation_id":"a677f3b9-b95b-4396-a6a1-800e2e8b4acb","resolution":{"observed_at":"2026-08-07T12:06:23.352657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01744","last_updated":"2026-07-20T02:23:52Z","snapshot_observed_at":"2026-08-06T19:59:23.330469Z","submitted_at":"2024-04-02T09:01:32Z","title":"Octopus v2: On-device language model for super agent","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01744","snapshot_observed_at":"2026-08-07T12:06:23.410305Z","title":"Octopus v2: On-device language model for super agent.arXiv preprint arXiv:2404.01744, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.410305Z"},"links":{"cited_paper":"/paper/2404.01744","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:f7775b063f0c01f68345827b28e768774e9b65beecf5f4954e6ed63529361a86","observation_id":"34eb453f-4baa-4326-8391-5f36d87d19e0","resolution":{"observed_at":"2026-08-07T12:06:23.410305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10935","last_updated":"2024-02-23T04:36:51Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-17T08:10:35Z","title":"SeeClick: Harnessing GUI Grounding for Advanced Visual GUI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10935","snapshot_observed_at":"2026-08-07T12:06:23.503732Z","title":"Seeclick: Harnessing gui grounding for advanced visual gui agents.arXiv preprint arXiv:2401.10935, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.503732Z"},"links":{"cited_paper":"/paper/2401.10935","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:72944c8862f180536acc4f34982a15289d1413a56f41f77350742e41268aa9ee","observation_id":"c47314d5-2658-400b-99eb-4c3d9768afa4","resolution":{"observed_at":"2026-08-07T12:06:23.503732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T12:06:23.592039Z","title":"Agentdojo: A dynamic environment to evaluate attacks and defenses for llm agents.arXiv preprint arXiv:2406.13352, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.592039Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:44f622c7f5053f9094ba80bf7739f0073ec0b8affc4f840d4c68ec430183be60","observation_id":"bbdb7fac-8879-4cc8-bc8b-dadea32a3828","resolution":{"observed_at":"2026-08-07T12:06:23.592039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.18575","last_updated":"2025-05-16T22:42:29Z","snapshot_observed_at":"2026-08-07T07:40:41.686734Z","submitted_at":"2025-04-22T17:51:03Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.18575","snapshot_observed_at":"2026-08-07T12:06:23.663176Z","title":"Wasp: Benchmarking web agent security against prompt injection attacks.arXiv preprint arXiv:2504.18575, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.663176Z"},"links":{"cited_paper":"/paper/2504.18575","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:089166c2d8e45ea4438c4129c3f8d2a659794383e27bcffb3c03628b4ddebc26","observation_id":"029cf64f-9676-4e24-850d-801b0376976c","resolution":{"observed_at":"2026-08-07T12:06:23.663176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T12:06:23.757644Z","title":"The llama 3 herd of models.arXiv preprint arXiv:2407.21783, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.757644Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:81c12fc374c73c7c66791da09a639a46b153b332ab2dfe9e2db015b3ae8ec188","observation_id":"f0688495-ce81-4327-b012-24fd294e647b","resolution":{"observed_at":"2026-08-07T12:06:23.757644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13919","last_updated":"2024-06-06T18:37:34Z","snapshot_observed_at":"2026-08-07T11:03:34.753698Z","submitted_at":"2024-01-25T03:33:18Z","title":"WebVoyager: Building an End-to-End Web Agent with Large Multimodal Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13919","snapshot_observed_at":"2026-08-07T12:06:23.848988Z","title":"Webvoyager: Building an end-to-end web agent with large multimodal models.arXiv preprint arXiv:2401.13919, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.848988Z"},"links":{"cited_paper":"/paper/2401.13919","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:965fe2a4ee07c10377495912f3b5778d1fddf705c7859063125e4a131e839d1f","observation_id":"9b662792-2707-4c6c-b155-9bd26d621df6","resolution":{"observed_at":"2026-08-07T12:06:23.848988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-07T12:06:23.968062Z","title":"Gpt-4o system card.arXiv preprint arXiv:2410.21276, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.968062Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:33d5aeeec95769d7d52887a399642aae63c6c5891dd2898bb6b26ddf070b34c9","observation_id":"e965dfe2-4db4-4e8e-bb1c-53e32202773a","resolution":{"observed_at":"2026-08-07T12:06:23.968062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-07T12:06:24.068502Z","title":"Openai o1 system card.arXiv preprint arXiv:2412.16720, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.068502Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:d7c4aff88fe8290544472d5555432bcb314a9e9e8d0c08e13880a572b9d24960","observation_id":"b2618616-389b-4c92-bcca-a80cbc730f06","resolution":{"observed_at":"2026-08-07T12:06:24.068502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.376136Z","title":"SWE-bench: Can language models resolve real-world Github issues? InThe Twelfth International Conference on Learning Representations, 2024","venue":null,"work_id":"2cf2f01a-a94a-4f83-90ba-8753a41986bb","year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.139358Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:d0cfb0804bb01c46a39147bc3045b6ef553c9f6fac793e2217cb42cf9b5f340a","observation_id":"a403411d-81b7-42cd-8ddd-153941fee54e","resolution":{"observed_at":"2026-08-07T12:06:33.499982Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13649","last_updated":"2024-06-06T02:01:09Z","snapshot_observed_at":"2026-08-05T16:01:54.847394Z","submitted_at":"2024-01-24T18:35:21Z","title":"VisualWebArena: Evaluating Multimodal Agents on Realistic Visual Web Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13649","snapshot_observed_at":"2026-08-07T12:06:24.215598Z","title":"Visualwebarena: Evaluating multimodal agents on realistic visual web tasks.arXiv preprint arXiv:2401.13649, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.215598Z"},"links":{"cited_paper":"/paper/2401.13649","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:680b03ba7bcda97138adbc00d2a7bdb7dba9e905dc1acd4d179b82ec76286d9a","observation_id":"c8a04038-099c-44f2-9b0c-eaf15b9ca3c2","resolution":{"observed_at":"2026-08-07T12:06:24.215598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:24.325954Z","title":"Autowebglm: A large language model- based web navigating agent","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.325954Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:bd475da4f22de1f0b82be9825a997a1c9f82f1af7cee76abcf3ffeddd8d9a8fc","observation_id":"ebc3a157-94e5-4f86-b624-6796770c4735","resolution":{"observed_at":"2026-08-07T12:06:24.325954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:24.447633Z","title":"Mobilesafe- tybench: Evaluating safety of autonomous agents in mobile device control.arXiv preprint arXiv:2410.17520, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.447633Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:38e712673cb03f23d3e5d4c27ab9dae84d953bb85d5f6e35ffbd6a2fb6e29345","observation_id":"588e37ac-892c-4bbe-9e0d-a54bec4c8327","resolution":{"observed_at":"2026-08-07T12:06:24.447633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.206122Z","title":"ST- WebAgentBench: A benchmark for evaluating safety and trustworthiness in web agents, October","venue":null,"work_id":"92a2064f-b518-488f-b016-4c4d35d7481f","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.550937Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:6b1dfd3a35245e1d0ec9cf80078008b2eed3754a49c193a44db26a2af96232fd","observation_id":"94e1e1ff-014d-44b5-8874-cf613ebe8c4b","resolution":{"observed_at":"2026-08-07T12:06:33.271607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-07T12:06:24.688608Z","title":"EIA: Environmental injection attack on generalist web agents for privacy leakage, October 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.688608Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:fe546a1cbae6503612cf6669d5a098ea2ff855187292e948c8064428e6a32e72","observation_id":"11b9720f-17e5-4452-b75f-8a4a47c42ef0","resolution":{"observed_at":"2026-08-07T12:06:24.688608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06703","last_updated":"2026-06-04T09:59:28Z","snapshot_observed_at":"2026-08-05T07:12:18.604381Z","submitted_at":"2024-10-09T09:13:38Z","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06703","snapshot_observed_at":"2026-08-07T12:06:24.612239Z","title":"arXiv:2410.06703","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.612239Z"},"links":{"cited_paper":"/paper/2410.06703","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:42fc5c67588cd6f5372289077c0dfa30724ebe41ad669b38673c6c151bcd1169","observation_id":"aaf56cf0-5b9d-427e-95cf-2d46ceaf3b80","resolution":{"observed_at":"2026-08-07T12:06:24.612239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.006041Z","title":"Large language model-based agents for software engineering: A survey, September","venue":null,"work_id":"8ba0e6fb-2916-4df5-a27a-a8d31db4c1ce","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.847496Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:f1479e39ee240918f9a3863a8bfa80f8d65d9ac15441a7d10deee5519ce36621","observation_id":"e3a15162-a7d8-4038-b57f-9acdb5af51e4","resolution":{"observed_at":"2026-08-07T12:06:33.104616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.17465","last_updated":"2024-11-26T14:29:47Z","snapshot_observed_at":"2026-07-06T19:57:18.481261Z","submitted_at":"2024-11-26T14:29:47Z","title":"ShowUI: One Vision-Language-Action Model for GUI Visual Agent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.17465","snapshot_observed_at":"2026-08-07T12:06:24.763166Z","title":"Showui: One vision-language-action model for gui visual agent.arXiv preprint arXiv:2411.17465, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.763166Z"},"links":{"cited_paper":"/paper/2411.17465","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:770cb229b176a010fc3998f0a172fe69b94cf7fd480ac9786c117d371117140a","observation_id":"038741e4-74ad-4c5c-9a4a-56f7f7ac5b94","resolution":{"observed_at":"2026-08-07T12:06:24.763166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11941","last_updated":"2024-06-02T13:25:05Z","snapshot_observed_at":"2026-08-06T20:03:08.814025Z","submitted_at":"2024-02-19T08:29:03Z","title":"CoCo-Agent: A Comprehensive Cognitive MLLM Agent for Smartphone GUI Automation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11941","snapshot_observed_at":"2026-08-07T12:06:25.162426Z","title":"Coco-agent: A comprehensive cognitive mllm agent for smartphone gui automation.arXiv preprint arXiv:2402.11941, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.162426Z"},"links":{"cited_paper":"/paper/2402.11941","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:cb33960edb9615aac44dbb16c74cd370d00177210ea6f0435f7e653643d8afd1","observation_id":"03241d5c-d09c-4935-827f-a8682c9e436b","resolution":{"observed_at":"2026-08-07T12:06:25.162426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.02977","last_updated":"2025-12-03T03:33:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-04T15:59:41Z","title":"Large Language Model-Based Agents for Software Engineering: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.02977","snapshot_observed_at":"2026-08-07T12:06:24.945129Z","title":"arXiv:2409.02977","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.945129Z"},"links":{"cited_paper":"/paper/2409.02977","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:be26236ec4dc1ecce81a8c33a3a01166f8a3f4e4f38ca28a48fe1bf433b36114","observation_id":"fda4c8a5-c71b-4d21-b977-b7e32457ba21","resolution":{"observed_at":"2026-08-07T12:06:24.945129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02544","last_updated":"2025-09-05T09:21:10Z","snapshot_observed_at":"2026-08-07T14:37:21.533706Z","submitted_at":"2024-08-05T15:16:22Z","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02544","snapshot_observed_at":"2026-08-07T12:06:24.997627Z","title":"Caution for the environment: Multimodal agents are susceptible to environmental distractions.arXiv preprint arXiv:2408.02544, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.997627Z"},"links":{"cited_paper":"/paper/2408.02544","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:52fcf4d33976407ca07700f1fb6136229007c357dfd6f36dba524cabcac690ef","observation_id":"c9e9e7d1-8aaa-4348-ae3b-32b7af5095b0","resolution":{"observed_at":"2026-08-07T12:06:24.997627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.639606Z","title":"nightly/daily builds","venue":null,"work_id":"f8f3df40-0b59-479c-85bb-a78dbee9bcc5","year":2003},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.440932Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:078614e32539e6d05a0642de880259e76a12228ac88b7422c211f7e9a7b948b5","observation_id":"5de20775-65e0-4c4d-9fff-94a03f9b5bcb","resolution":{"observed_at":"2026-08-07T12:06:32.712424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.793667Z","title":"Manus ai: a universal ai assistant that can transform your ideas into actions, 2025","venue":null,"work_id":"d14bf28e-67bd-41b7-8034-628be208cb36","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.230337Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:a4720cdab8a548195a365bef01f631a499d3af5a3b07e3851567d50c939e8c15","observation_id":"f2827640-58b0-4763-9238-cbd5d2e29986","resolution":{"observed_at":"2026-08-07T12:06:32.863721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.12844","last_updated":"2021-04-13T23:39:18Z","snapshot_observed_at":"2026-07-06T10:08:08.004416Z","submitted_at":"2020-10-24T09:11:26Z","title":"FLIN: A Flexible Natural Language Interface for Web Navigation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.12844","snapshot_observed_at":"2026-08-07T12:06:25.336004Z","title":"Flin: A flexible natural language interface for web navigation.arXiv preprint arXiv:2010.12844, 2020","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.336004Z"},"links":{"cited_paper":"/paper/2010.12844","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:e9ad795486a69d88e16b2a7a4968a186050a7e60c12ab6911fd63ab5e6f1a39d","observation_id":"9b0e310f-50f2-4e14-8168-d746c1a53d67","resolution":{"observed_at":"2026-08-07T12:06:25.336004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.367462Z","title":"Roscript: a visual script driven truly non-intrusive robotic testing system for touch screen applications","venue":null,"work_id":"3acf75a6-8238-4575-91f6-3fd1088aebf8","year":2020},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.774003Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:2f2af46292d10001806c6127ba17c63a16b9487b5f06035143f43a9ebcc2a5e4","observation_id":"4462c3d3-e7f7-418c-ad67-8f55354b8925","resolution":{"observed_at":"2026-08-07T12:06:32.412319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.475556Z","title":"Computer-Using Agent: Introducing a universal interface for AI to interact with the digital world, 2025","venue":null,"work_id":"de18d175-ea27-4d82-bad3-5df0a2a9ad49","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.562633Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:673d4b74dafcdf3cc40b72f35222313a99779cf805b1dc77c440e4d0aee929b4","observation_id":"8f812064-c74d-4b95-b877-afeee57352c2","resolution":{"observed_at":"2026-08-07T12:06:32.531191Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T12:06:25.667552Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.667552Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:547d2362166dd3cb0f9ea8c39968fdcca58a17d301efd2877a49da1420761a69","observation_id":"4f5875be-c1ad-48d0-a7ef-be1eb45a8f7f","resolution":{"observed_at":"2026-08-07T12:06:25.667552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05530","last_updated":"2024-12-16T17:39:39Z","snapshot_observed_at":"2026-07-06T17:41:42.995949Z","submitted_at":"2024-03-08T18:54:20Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05530","snapshot_observed_at":"2026-08-07T12:06:26.116515Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context.arXiv preprint arXiv:2403.05530, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.116515Z"},"links":{"cited_paper":"/paper/2403.05530","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:41c622618c87273375717b00af9485da46f7d707beeb8cd0b2fafe130330a3f8","observation_id":"2f970317-af43-4050-a55e-7c6f225a1dfd","resolution":{"observed_at":"2026-08-07T12:06:26.116515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:25.915682Z","title":"An- droidinthewild: A large-scale dataset for android device control.Advances in Neural Information Processing Systems, 36:59708–59728, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.915682Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:c8671b2756c509372c20fc0ac3c3a9b3d92e9953de8a96abe1fd34ba26386236","observation_id":"9930c096-1ea4-446d-808e-0e618fead237","resolution":{"observed_at":"2026-08-07T12:06:25.915682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14573","last_updated":"2025-04-06T20:37:50Z","snapshot_observed_at":"2026-08-07T08:11:20.950548Z","submitted_at":"2024-05-23T13:48:54Z","title":"AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14573","snapshot_observed_at":"2026-08-07T12:06:26.003533Z","title":"Androidworld: A dynamic benchmarking environment for autonomous agents.arXiv preprint arXiv:2405.14573, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.003533Z"},"links":{"cited_paper":"/paper/2405.14573","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:168e0b1653230542c60b327f2be9f936f770fc2e6d2002c509aca488be796b91","observation_id":"4d82527d-7030-4595-9126-52f889bb9ca1","resolution":{"observed_at":"2026-08-07T12:06:26.003533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.11029","last_updated":"2022-11-24T06:34:43Z","snapshot_observed_at":"2026-07-06T13:12:39.361042Z","submitted_at":"2022-05-23T04:05:37Z","title":"META-GUI: Towards Multi-modal Conversational Agents on Mobile GUI","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.11029","snapshot_observed_at":"2026-08-07T12:06:26.528417Z","title":"Meta-gui: Towards multi-modal conversational agents on mobile gui.arXiv preprint arXiv:2205.11029, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.528417Z"},"links":{"cited_paper":"/paper/2205.11029","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:1645784fea96bb764072c54617baca410b01284dea6359bd546d92333ff16064","observation_id":"242886f9-7c24-4c9d-a98c-8ae3463f74de","resolution":{"observed_at":"2026-08-07T12:06:26.528417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-07T12:06:26.269044Z","title":"Identifying the risks of lm agents with an lm-emulated sandbox.arXiv preprint arXiv:2309.15817, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.269044Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:1c95ed02d111bfc4d3d1a06f2c63263f3767fd92f187705ffdc1e0429ae6073e","observation_id":"0134cf90-712e-4a33-9f88-4b7e5ee96823","resolution":{"observed_at":"2026-08-07T12:06:26.269044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:26.372738Z","title":"World of bits: An open-domain platform for web-based agents","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.372738Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:1e5c9d7eed050a148fb56bb9471477f9eddba7738e74abc5656c02a680745f9a","observation_id":"6c36f7e1-9ca0-461e-8d3b-b17cfc4f6a6b","resolution":{"observed_at":"2026-08-07T12:06:26.372738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04957","last_updated":"2025-03-06T20:43:14Z","snapshot_observed_at":"2026-07-06T20:48:13.849680Z","submitted_at":"2025-03-06T20:43:14Z","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04957","snapshot_observed_at":"2026-08-07T12:06:26.862588Z","title":"Safearena: Evaluating the safety of autonomous web agents.arXiv preprint arXiv:2503.04957, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.862588Z"},"links":{"cited_paper":"/paper/2503.04957","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:bbdb848d6c2dc3ecb6acaa90d52ef8520d93df0e031780c961365f784a6bccd3","observation_id":"a5c77f8b-7556-4ec2-a7ce-abfab940e084","resolution":{"observed_at":"2026-08-07T12:06:26.862588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-07T12:06:26.652241Z","title":"Gemini: a family of highly capable multimodal models.arXiv preprint arXiv:2312.11805, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.652241Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:c561939b57aba520607400f8c1f05f01de8b2b36e3199ca6b68015317ab23db1","observation_id":"789e627a-8e40-4533-924d-3036e3323756","resolution":{"observed_at":"2026-08-07T12:06:26.652241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:26.748863Z","title":"Anthropic, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.748863Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:1aae23dd81595f1ad26048bf719bd4ba1a39f49c5ad82c506e9af5fe4ec75d52","observation_id":"072e9111-6972-4ef9-9353-cc8650932af2","resolution":{"observed_at":"2026-08-07T12:06:26.748863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-07-06T17:35:49.280235Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-07T12:06:27.120706Z","title":"WIPI: A new web threat for LLM-driven web agents, February 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.120706Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:0071f5768e8da6b89f178b9a96d72ac4f7904d7b76f61abd244779f5ec9825fb","observation_id":"85ccfadf-ebd4-4392-b29a-a9eac925d76d","resolution":{"observed_at":"2026-08-07T12:06:27.120706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12191","last_updated":"2024-10-03T15:54:49Z","snapshot_observed_at":"2026-08-06T05:35:29.109022Z","submitted_at":"2024-09-18T17:59:32Z","title":"Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolution","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12191","snapshot_observed_at":"2026-08-07T12:06:26.962871Z","title":"Qwen2-vl: Enhancing vision-language model’s perception of the world at any resolution.arXiv preprint arXiv:2409.12191, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.962871Z"},"links":{"cited_paper":"/paper/2409.12191","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:c790a8bc5f06ef4b6ee90052597b6bf5c0c67e0997d99d5bb24172cc7683a664","observation_id":"46b14f9f-f75d-437e-a271-de3dce4bc275","resolution":{"observed_at":"2026-08-07T12:06:26.962871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-07-06T18:33:07.118735Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-07T12:06:27.049458Z","title":"Dissecting adversarial robustness of multimodal LM agents, December 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.049458Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:e24d08acc14ab74c0fa4c4ff1d14376ccc937fa7f187ab159dc09bc43bc1b233","observation_id":"fa21ad3d-c8e7-40f9-ab5c-b12894695053","resolution":{"observed_at":"2026-08-07T12:06:27.049458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04454","last_updated":"2025-05-05T16:17:20Z","snapshot_observed_at":"2026-07-06T20:02:21.509050Z","submitted_at":"2024-12-05T18:58:26Z","title":"Aguvis: Unified Pure Vision Agents for Autonomous GUI Interaction","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04454","snapshot_observed_at":"2026-08-07T12:06:27.404090Z","title":"Aguvis: Unified pure vision agents for autonomous gui interaction","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.404090Z"},"links":{"cited_paper":"/paper/2412.04454","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:3906198a479529f71871cd1de1bc40cd73346363af190dc519fef87f8263224c","observation_id":"2dbfab8a-e111-4091-8d2a-76d09e757829","resolution":{"observed_at":"2026-08-07T12:06:27.404090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.23218","last_updated":"2024-10-30T17:10:19Z","snapshot_observed_at":"2026-08-05T06:30:40.974506Z","submitted_at":"2024-10-30T17:10:19Z","title":"OS-ATLAS: A Foundation Action Model for Generalist GUI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.23218","snapshot_observed_at":"2026-08-07T12:06:27.217615Z","title":"Os-atlas: A foundation action model for generalist gui agents.arXiv preprint arXiv:2410.23218, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.217615Z"},"links":{"cited_paper":"/paper/2410.23218","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:d0c50c28536dfd6308ad4ca337ee8bf245561b19124e5a0a7a2ed10661709abc","observation_id":"2a6ef5ce-6c1b-43c0-b5db-30d3ff956a2e","resolution":{"observed_at":"2026-08-07T12:06:27.217615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:27.317673Z","title":"Osworld: Benchmarking multimodal agents for open-ended tasks in real computer environments.Advances in Neural Information Processing Systems, 37:52040–52094, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.317673Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:97d6ea49fa5a03607fe060d68a2fb94f5f946bbaa23cfabda9d9fab7a32dcd22","observation_id":"811cc1c0-f73f-414a-a0ba-562fbc81413b","resolution":{"observed_at":"2026-08-07T12:06:27.317673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10019","last_updated":"2024-10-05T06:50:15Z","snapshot_observed_at":"2026-08-06T04:21:24.397587Z","submitted_at":"2024-01-18T14:40:46Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10019","snapshot_observed_at":"2026-08-07T12:06:27.641818Z","title":"R-judge: Benchmarking safety risk awareness for llm agents.arXiv preprint arXiv:2401.10019, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.641818Z"},"links":{"cited_paper":"/paper/2401.10019","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:94362044f12c28848ad6621cf7405a50fe031d434726f76821b2d6e0b66920f8","observation_id":"09020643-a387-4b8d-8cec-fc86ef88ebf8","resolution":{"observed_at":"2026-08-07T12:06:27.641818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:27.525969Z","title":"React: Synergizing reasoning and acting in language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.525969Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:ceb120f23c3dc04ec44f83eb726c4d46d3ce145328b8ff2691e78af27f88acbc","observation_id":"116a9072-7d6e-4ba1-a163-1e0e254335f8","resolution":{"observed_at":"2026-08-07T12:06:27.525969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10753","last_updated":"2024-08-16T04:12:00Z","snapshot_observed_at":"2026-08-07T05:22:38.113689Z","submitted_at":"2024-02-16T15:19:46Z","title":"ToolSword: Unveiling Safety Issues of Large Language Models in Tool Learning Across Three Stages","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10753","snapshot_observed_at":"2026-08-07T12:06:27.595232Z","title":"Toolsword: Unveiling safety issues of large language models in tool learning across three stages.arXiv preprint arXiv:2402.10753, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.595232Z"},"links":{"cited_paper":"/paper/2402.10753","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:1015cb93f44ff7650df3741e88c36d1b0d9924b984d4e0d26eb9e37a92ea3e9d","observation_id":"24801c2b-85b4-4807-9e59-e076dfa33945","resolution":{"observed_at":"2026-08-07T12:06:27.595232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-07T12:38:35.693216Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T12:06:27.951327Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.951327Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:17d6c2d428fa627acc5ba0dd76abebe2c0354d13d3a33dd8dc426605336e8fef","observation_id":"f232dac0-63ab-4f5c-ad68-c9c6f86410e4","resolution":{"observed_at":"2026-08-07T12:06:27.951327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T12:06:27.758031Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents.arXiv preprint arXiv:2403.02691, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.758031Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:6c275d9cac4f2e10c2f21656342971be04dd14a450797af66e3ab14104257db8","observation_id":"a8643598-2ce1-41fc-9c5f-e3d373f67833","resolution":{"observed_at":"2026-08-07T12:06:27.758031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-07T12:06:27.869822Z","title":"Agent security bench (asb): Formalizing and benchmarking attacks and defenses in llm-based agents.arXiv preprint arXiv:2410.02644, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.869822Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:77c7a17c70c3288ee30f013bc4029c78ff28c8bcdff073ea838df7cf12aa7c5f","observation_id":"1cc439e2-24d8-47b0-a979-7578ef8845a7","resolution":{"observed_at":"2026-08-07T12:06:27.869822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13854","last_updated":"2024-04-16T15:13:18Z","snapshot_observed_at":"2026-08-06T12:47:01.809185Z","submitted_at":"2023-07-25T22:59:32Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.13854","snapshot_observed_at":"2026-08-07T12:06:28.195185Z","title":"Webarena: A realistic web environment for building autonomous agents.arXiv preprint arXiv:2307.13854, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.195185Z"},"links":{"cited_paper":"/paper/2307.13854","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:59ac1aa46665df816343983990d945397f21e6d5e15193fe6b7d21043ab6fe8a","observation_id":"e4c187fe-c83d-4cdb-b220-1e539871d037","resolution":{"observed_at":"2026-08-07T12:06:28.195185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14470","last_updated":"2025-05-20T05:58:23Z","snapshot_observed_at":"2026-08-06T12:35:19.109481Z","submitted_at":"2024-12-19T02:35:15Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14470","snapshot_observed_at":"2026-08-07T12:06:28.033298Z","title":"Agent-safetybench: Evaluating the safety of llm agents.arXiv preprint arXiv:2412.14470, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.033298Z"},"links":{"cited_paper":"/paper/2412.14470","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:5208579e38f83a979bbebceed1b6930a02628913adade0594981e92c0c739c18","observation_id":"762d0332-b4e4-44bf-b5ae-5e298ca3022f","resolution":{"observed_at":"2026-08-07T12:06:28.033298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.138728Z","title":"You only look at screens: Multimodal chain-of-action agents.arXiv e-prints, pages arXiv–2309, 2023","venue":null,"work_id":"8ffb2e10-198f-4033-94d8-be24d6b2f1bb","year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.117482Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:83cf85bf037d9e47028c819c159b0ceeebdfe5489de2be406802a71861ffe32b","observation_id":"24bd7cb8-7db8-4e7c-85a6-f20005d4f264","resolution":{"observed_at":"2026-08-07T12:06:32.208175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.987672Z","title":"Phishing Web","venue":null,"work_id":"08c5eb7e-b64c-4092-ba49-6b0ab54e4a9b","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.321182Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:e67d3f75daed8c8170acf857a8401eed006ef27b53c000508337195362cd8f78","observation_id":"7b5daac3-7cb3-4d01-ade7-d7bf3c1bf4f0","resolution":{"observed_at":"2026-08-07T12:06:32.057095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.836569Z","title":null,"venue":null,"work_id":"93373c96-74ed-4a88-909d-eddc9e72765d","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.438579Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:3ef2df4e44d8dd25f532e45131b6597650f6ec3b65ddedb8bd7822109e0a5757","observation_id":"a38d2aa6-72d7-46c9-9ab4-42545c883ca5","resolution":{"observed_at":"2026-08-07T12:06:31.883064Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.616399Z","title":null,"venue":null,"work_id":"d9064872-c472-4447-8e02-31cba58cbad2","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.540014Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:638e689d5476ba66dad18aa8e30bfbdf83cab4aeee572e74b5cdb5e7679ba0e9","observation_id":"da92d423-d219-4f17-85db-dbaf18f5f290","resolution":{"observed_at":"2026-08-07T12:06:31.704383Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.361342Z","title":null,"venue":null,"work_id":"b1066e15-54cf-4dec-bd15-4e9e4b42225d","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.634621Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:84e878d22d4a5de59bc2417d2027c63728c0b1705af35bfaa0d4b6177dec4408","observation_id":"f2776078-2b53-4142-90f3-22fb17e5b37b","resolution":{"observed_at":"2026-08-07T12:06:31.471539Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.171518Z","title":"log USDT transaction","venue":null,"work_id":"0e776f53-070c-400c-b80d-667e9f9ff758","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.741236Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:9a2e0ea8b0b4b5bf9205c992fe1ff4bb6df6ceb4cd2aa41a28964f32e38037f9","observation_id":"3e7c40a9-c097-47b9-85db-4230d421cb47","resolution":{"observed_at":"2026-08-07T12:06:31.258956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.974254Z","title":null,"venue":null,"work_id":"1e6a1113-ce97-49c9-bbe8-2e3a3c8d1e35","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.850340Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:615ec41a67eaff789b0807208dfd96edc8c804f959db07a917ea8ec1292d4eb9","observation_id":"36f666ec-9c43-4c1d-99eb-bad0390775ce","resolution":{"observed_at":"2026-08-07T12:06:31.054273Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.808927Z","title":null,"venue":null,"work_id":"d847facc-13a0-4d80-acd7-66376aa60f93","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.942262Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:84f9d05ce276762756b851a91d1b64bfbadaa5cb1e3b5277cf8ac61db17e9ff1","observation_id":"6cbed492-fb58-4134-b8be-03d59857c0bd","resolution":{"observed_at":"2026-08-07T12:06:30.859109Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.584050Z","title":null,"venue":null,"work_id":"abc88eff-f5f0-44e5-b322-76af604f6802","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:29.054286Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:a5da2fada98e69144f77ad2c6ff794cdc0cf2ba7b128d895d29b05d99f97f486","observation_id":"183b04b1-6345-4137-a9a0-690b40401d62","resolution":{"observed_at":"2026-08-07T12:06:30.717648Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.400553Z","title":"search for torrents of XX software,","venue":null,"work_id":"6311a652-4abd-4e86-91ad-7dab4a007e06","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:29.178864Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:f84e9a5f8deaa650567cedef72bc21f1b3b36a56a3f282881aec8394ab47e52c","observation_id":"2795bfcc-fc95-4dff-ae5c-784b9e43aebb","resolution":{"observed_at":"2026-08-07T12:06:30.471183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:34.118331Z","title":null,"venue":null,"work_id":"b230f38c-86dd-458a-ab56-7aaa16b00ff3","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.958493Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:3048194ab84c71a2a1f5894d53cbfb0b9dfe82f26bb0aaf9afb6bbdd7347e57e","observation_id":"a45d0440-976c-4e5e-8665-e7ae6e32256e","resolution":{"observed_at":"2026-08-07T12:06:34.199553Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","latest_version":3,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents"},"reference_resolution":{"displayed":69,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":54,"verified_exact":0,"verified_fuzzy":15},"total_outbound_references":69},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 9 inbound Pith citation observations for arXiv:2506.00618."}