{"as_of":"2026-08-08T07:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:042897b13857bacf1197ecd2ae4d0cf811c9a228d97bf09c3164f5f35b74e0eb","coverage":[{"denominator":67,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":67,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:59:29.316286Z","state":"measured"},{"denominator":82,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":82,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":15,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T23:42:13.675310Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T14:09:53.274632Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-08-06T23:42:13.675310Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.16618","last_updated":"2025-06-19T21:31:42Z","snapshot_observed_at":"2026-08-06T23:36:11.156615Z","submitted_at":"2025-06-19T21:31:42Z","title":"Data marketplaces can increase the willingness to share social media data at low prices","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T23:42:13.675310Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2506.16618"},"observation_digest":"sha256:5b0ccc74342e96f56de51c102ef9f159fea944696581f8dfcd284a80804c21d9","observation_id":"aa398d6b-c5b6-4425-90cf-6c86f7c8ffeb","resolution":{"observed_at":"2026-08-06T23:42:13.675310Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-08-06T16:51:34.751679Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.12372","last_updated":"2025-07-16T16:21:01Z","snapshot_observed_at":"2026-08-06T16:45:02.724574Z","submitted_at":"2025-07-16T16:21:01Z","title":"Web-Browsing LLMs Can Access Social Media Profiles and Infer User Demographics","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:51:34.751679Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2507.12372"},"observation_digest":"sha256:a165caebe8a420dce029c96f2556d057ee3873e868aac2862e0a3eef2101c54e","observation_id":"26992bd8-1c41-4bc4-8734-149b1d83704b","resolution":{"observed_at":"2026-08-06T16:51:34.751679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2601.18842","last_updated":"2026-05-13T07:11:36Z","snapshot_observed_at":"2026-08-01T18:25:13.403669Z","submitted_at":"2026-01-26T11:33:40Z","title":"GUIGuard-Bench: Toward a General Evaluation for Privacy-Preserving GUI Agents","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-16T11:31:16.087579Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2601.18842"},"observation_digest":"sha256:91199f7789295c4e6b52f23164bf3674ae313b257099b1290ae705640166de80","observation_id":"cc57bb32-74da-4e66-be54-cf6766763acc","resolution":{"observed_at":"2026-05-16T11:32:48.296793Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2604.01473","last_updated":"2026-05-28T05:44:14Z","snapshot_observed_at":"2026-08-02T17:40:16.491905Z","submitted_at":"2026-04-01T23:29:12Z","title":"SelfGrader: LLM Jailbreak Detection via Anchored Token-Level Logits","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-13T21:43:46.728512Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2604.01473"},"observation_digest":"sha256:573665dec663c3b298133cc32483dc009287fb9b5cf5d54de8a59cad972e92aa","observation_id":"d97d9eb9-1c3f-4e5f-ab33-7d3ce38fa717","resolution":{"observed_at":"2026-05-13T21:48:19.389525Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.06393","last_updated":"2026-05-07T15:08:40Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T15:08:40Z","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T09:08:30.102711Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.06393"},"observation_digest":"sha256:4a28ca74a6ce9eef904eea26eea43518f63ec80ada791b9ba2752433b6821696","observation_id":"c5432059-af0f-467e-850f-7cddc4d5b4f5","resolution":{"observed_at":"2026-05-11T20:26:11.150157Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.18133","last_updated":"2026-05-18T09:38:18Z","snapshot_observed_at":"2026-07-06T23:29:04.241654Z","submitted_at":"2026-05-18T09:38:18Z","title":"An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-20T09:58:05.349147Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.18133"},"observation_digest":"sha256:fb9ae8550e78186c9f0cbf98bed8ac538393eb07955e4ffecb8ea8eca7a29892","observation_id":"7a60c30a-2c08-4bc5-a259-c810dd240024","resolution":{"observed_at":"2026-05-20T09:58:10.938061Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.23989","last_updated":"2026-05-17T10:26:37Z","snapshot_observed_at":"2026-07-06T23:34:08.786038Z","submitted_at":"2026-05-17T10:26:37Z","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","version":1},"reference_index":193,"source":"pdf_text","source_observed_at":"2026-06-30T19:18:40.244556Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.23989"},"observation_digest":"sha256:7b908611fafce89cb295bfb2258c1f927a7f1a968580543528ebd5efc5c47a74","observation_id":"0b9e4079-d43d-4d1c-a90b-33df52a505cf","resolution":{"observed_at":"2026-06-30T19:45:01.603801Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.25435","last_updated":"2026-05-25T05:25:39Z","snapshot_observed_at":"2026-07-06T23:35:21.734804Z","submitted_at":"2026-05-25T05:25:39Z","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-29T22:00:03.325985Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.25435"},"observation_digest":"sha256:dfabba64854167166a8c96b366e3d9712ec5cdc6a94b98eabcfd0ecd47493c55","observation_id":"efa56cf7-2bed-4683-82d3-68d0041a9f7d","resolution":{"observed_at":"2026-06-29T22:04:00.356123Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.30650","last_updated":"2026-05-28T23:10:04Z","snapshot_observed_at":"2026-07-06T23:39:53.132531Z","submitted_at":"2026-05-28T23:10:04Z","title":"When AI Meets Wall Street: A Survey on Trustworthy AI in Fintech","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T06:17:07.660975Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.30650"},"observation_digest":"sha256:e86092d4c9f1457f10b30a3bb9a619b27ad506c4fad4486acf8bbda9c0a0b477","observation_id":"c474a8d3-7ade-495c-b12b-2f44d2d66a25","resolution":{"observed_at":"2026-06-29T14:43:31.588391Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.02302","last_updated":"2026-06-01T14:23:42Z","snapshot_observed_at":"2026-08-01T11:06:48.826611Z","submitted_at":"2026-06-01T14:23:42Z","title":"SeClaw: Spec-Driven Security Task Synthesis for Evaluating Autonomous Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T13:51:49.666484Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.02302"},"observation_digest":"sha256:e5b6ea6a5a0d1743bbc60dbc4e6b7b9e2d4f9307695214ca591ae7a4939157a1","observation_id":"45f88d7a-7e50-49fa-923e-5f9c34979c4b","resolution":{"observed_at":"2026-07-01T23:56:23.009280Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.12666","last_updated":"2026-06-16T03:15:00Z","snapshot_observed_at":"2026-07-30T01:01:38.589980Z","submitted_at":"2026-06-10T20:48:39Z","title":"CAPED: Context-Aware Privacy Exposure Defense for Mobile GUI Agents","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-27T09:00:10.153170Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.12666"},"observation_digest":"sha256:e49afe0f7558b6379c846dae703241a4be93dbbd546845c7234403912f25b5e3","observation_id":"99079ee5-69d8-4355-859d-8d3dd859423b","resolution":{"observed_at":"2026-07-03T12:28:07.466005Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.13385","last_updated":"2026-06-11T14:12:43Z","snapshot_observed_at":"2026-08-01T15:55:04.725190Z","submitted_at":"2026-06-11T14:12:43Z","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T06:20:04.789341Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.13385"},"observation_digest":"sha256:8369f55f2b6f59971983caf52cee46e6731caa308f8f9d2dd3239fda9f1fbfaf","observation_id":"5649493c-6fb9-4c0a-99c3-fd1d0f6f4ac0","resolution":{"observed_at":"2026-07-03T15:48:35.889462Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.18996","last_updated":"2026-06-18T04:53:40Z","snapshot_observed_at":"2026-08-06T16:17:51.986701Z","submitted_at":"2026-06-17T12:17:02Z","title":"TRAP: Benchmark for Task-completion and Resistance to Active Privacy-extraction","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-26T20:37:19.026178Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.18996"},"observation_digest":"sha256:533a353fda8a39e429ff125b7243c75349b8fb2437392aa1e1deffe3dc377a93","observation_id":"a07f2713-7cc3-4a53-baa4-4933295abb7b","resolution":{"observed_at":"2026-07-04T01:09:19.371396Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.23277","last_updated":"2026-06-22T12:54:04Z","snapshot_observed_at":"2026-08-02T06:21:16.386788Z","submitted_at":"2026-06-22T12:54:04Z","title":"GIF: Locally Sound Geometric Information Flow Control for LLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T08:24:49.908288Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.23277"},"observation_digest":"sha256:3c9401efc8a545ed14f541b46d2dfff949a84ea860b2aa47c41afc2cdb3cb8b9","observation_id":"30396437-70b1-4906-a799-c6cccba169b2","resolution":{"observed_at":"2026-07-04T10:49:46.729444Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.26627","last_updated":"2026-06-25T05:44:18Z","snapshot_observed_at":"2026-08-02T09:36:56.612724Z","submitted_at":"2026-06-25T05:44:18Z","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T04:29:16.386339Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.26627"},"observation_digest":"sha256:54d321e257f60efad6e12cd63e5d0bf036af4dbfb6665614d3c911d909a56c15","observation_id":"4a66fa44-d82b-47e4-82bf-e5b1d61d962f","resolution":{"observed_at":"2026-07-04T14:09:53.276106Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.01055/citation-record","integrity":"/paper/2506.01055/integrity","json":"/paper/2506.01055/citation-record.json","paper":"/paper/2506.01055"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.594801Z","title":"Design and analysis of experiments in anfis modeling for stock price prediction","venue":null,"work_id":"61ae29f7-c5f0-463e-b03f-65eee156e3c3","year":2011},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.231648Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:aac63df53022bdf3df94f68325fccbb6616c7bc0885604bf584f0360458f5a63","observation_id":"b6f0e221-2d9a-4368-8ab0-b1c6d767829f","resolution":{"observed_at":"2026-08-07T11:59:35.628259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:21.335328Z","title":"Tokenization of social media engagements increases the sharing of false (and other) news but penalization moderates it","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.335328Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:5012f47be3fed6dad5e33a994420d9fcb5ce4758977ea209054d908b19f9b734","observation_id":"7a4c949a-cbd9-440b-9e43-79600e8dddd4","resolution":{"observed_at":"2026-08-07T11:59:21.335328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.468184Z","title":"Open-source llms for text annotation: a practical guide for model setting and fine-tuning","venue":null,"work_id":"d814d47d-4d00-4ef8-b254-f172071befb1","year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.467147Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:ea4058300b3cfff8a9ab30315868fe9d7ec3e9cb4ae84fd00a065df9575c1891","observation_id":"75465aea-4feb-4922-a429-4fb572be487b","resolution":{"observed_at":"2026-08-07T11:59:35.519043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:21.573012Z","title":"Extracting training data from large language models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.573012Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:33582460d5ac6273c7523f05b488162c6e0d584eb46da5d9e39c381b4b5fd879","observation_id":"ac80c41a-574f-4aba-be29-e168c9314393","resolution":{"observed_at":"2026-08-07T11:59:21.573012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03269","last_updated":"2023-02-17T04:11:53Z","snapshot_observed_at":"2026-08-01T14:59:25.551536Z","submitted_at":"2023-02-07T05:48:16Z","title":"PLACES: Prompting Language Models for Social Conversation Synthesis","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03269","snapshot_observed_at":"2026-08-07T11:59:21.745391Z","title":"Places: Prompting language models for social conversation synthesis","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.745391Z"},"links":{"cited_paper":"/paper/2302.03269","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:f3deab3f314ef4165fb4596c5676a64f4a5d390adeab21c679eda927adf7637c","observation_id":"7f7de28f-a88e-4d14-8718-07fb20684ef6","resolution":{"observed_at":"2026-08-07T11:59:21.745391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-07T11:59:22.064371Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.064371Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e86e27e4f6fb0344f203780e4f785424ec9fe3c4b580689779acd39d9a12177f","observation_id":"09fdaad2-4160-442b-b84e-2d0dc3a1298b","resolution":{"observed_at":"2026-08-07T11:59:22.064371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.327162Z","title":"Dataset and lessons learned from the 2024 satml llm capture-the-flag competition","venue":null,"work_id":"3aff3b85-258e-4641-b5df-e05b5b45bc58","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.223124Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:8d531870b38190a0fa07db2ebf6705e3c067dabc508cbc0664610b6ebf8d669f","observation_id":"0ef5d5c0-322e-413f-929a-8bc01c3453e3","resolution":{"observed_at":"2026-08-07T11:59:35.392317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T11:59:22.378791Z","title":"Agentdojo: A dynamic environment to evaluate attacks and defenses for llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.378791Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:13e73a4a08b6b9a82e349ad428942f14685f7f54367dbfc93359f151b744db6c","observation_id":"49bf43cb-85b5-43f4-a420-06bc98ea5ef4","resolution":{"observed_at":"2026-08-07T11:59:22.378791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-07T11:59:22.444702Z","title":"Defeating prompt injections by design","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.444702Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:602cf9d3585c09b33b2f6572e44d1c923f7f640ba0d361e51e9ebd4b85b29555","observation_id":"deeac7ee-acaf-4159-b823-e10d8873ca34","resolution":{"observed_at":"2026-08-07T11:59:22.444702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.180432Z","title":"How we estimate the risk from prompt injection attacks on ai systems, 2025","venue":null,"work_id":"727d25b0-3b20-4ec2-ae5d-c7b1cd781a3a","year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.526407Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:d584479e39b73baa66e395d691d464e1527de3c3e1bd4766c70c4dc42ac5e1d9","observation_id":"1e72cc58-0342-479f-a86a-302e60b424ef","resolution":{"observed_at":"2026-08-07T11:59:35.247820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14387","last_updated":"2024-01-08T04:46:56Z","snapshot_observed_at":"2026-07-06T15:31:51.249701Z","submitted_at":"2023-05-22T17:55:50Z","title":"AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedback","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14387","snapshot_observed_at":"2026-08-07T11:59:22.616939Z","title":"Alpacafarm: A simulation framework for methods that learn from human feedback","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.616939Z"},"links":{"cited_paper":"/paper/2305.14387","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:32e15fa0c40e5279cbeacb4249f3c3cfbb8d14f828fe103b208a2e7d5256b5b3","observation_id":"662f2b23-c9d8-4462-b276-496aa0e30648","resolution":{"observed_at":"2026-08-07T11:59:22.616939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.20094","last_updated":"2025-05-08T00:24:02Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-28T17:59:01Z","title":"Scaling Synthetic Data Creation with 1,000,000,000 Personas","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.20094","snapshot_observed_at":"2026-08-07T11:59:22.698654Z","title":"Scaling synthetic data creation with 1,000,000,000 personas","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.698654Z"},"links":{"cited_paper":"/paper/2406.20094","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:135e0dd5297dc143eea61e69da28d868952fd32c1b6b49d5d1d263ac6e200041","observation_id":"dd3e2ab9-fa09-4007-bd66-221aa369694f","resolution":{"observed_at":"2026-08-07T11:59:22.698654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.064070Z","title":"A utility theory approach for insurance pricing","venue":null,"work_id":"57c35772-91f1-460d-8915-2ed51f842103","year":2016},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.763606Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:1e60e98384acf401c3ad450271cf8c023e5744cd3ad6f81d403c5d314556dc0e","observation_id":"4ded8383-d074-4575-aabe-ffb595d743d3","resolution":{"observed_at":"2026-08-07T11:59:35.103451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.15056","last_updated":"2023-07-19T14:10:55Z","snapshot_observed_at":"2026-08-07T05:52:37.011839Z","submitted_at":"2023-03-27T09:59:48Z","title":"ChatGPT Outperforms Crowd-Workers for Text-Annotation Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.15056","snapshot_observed_at":"2026-08-07T11:59:22.843126Z","title":"Chatgpt outperforms crowd workers for text-annotation tasks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.843126Z"},"links":{"cited_paper":"/paper/2303.15056","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:a2571abf9e3df1c1a427b37c3e53142f232894d94225b871408503edd1658c57","observation_id":"c2d74b0e-2cfc-490e-b576-61cb250bd370","resolution":{"observed_at":"2026-08-07T11:59:22.843126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:22.928822Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.928822Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e1b82158b9938a719e7c8ac640cf4012fb2beb08eada7f3f10b8538ca2d248ac","observation_id":"5e2a9241-9f69-4f69-9418-922b1a95b62f","resolution":{"observed_at":"2026-08-07T11:59:22.928822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04761","last_updated":"2025-02-11T00:46:43Z","snapshot_observed_at":"2026-08-07T16:51:09.466237Z","submitted_at":"2025-02-11T00:46:43Z","title":"Which Economic Tasks are Performed with AI? Evidence from Millions of Claude Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04761","snapshot_observed_at":"2026-08-07T11:59:22.997850Z","title":"Which economic tasks are performed with ai? evidence from millions of claude conversations","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.997850Z"},"links":{"cited_paper":"/paper/2503.04761","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:1b60b6c2b8c3ba698384a606b236edcec6cd53589557b7993e4661af144f5638","observation_id":"78a771e9-8386-421e-8d6c-f61e52efb794","resolution":{"observed_at":"2026-08-07T11:59:22.997850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-07T11:59:23.059071Z","title":"Defending against indirect prompt injection attacks with spotlighting","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.059071Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:857c3c0a5f4bdd1a929a8024602a59d90a4ef32c2e79ad3f4bff7ab13529dcea","observation_id":"613ad52f-e909-4670-8cbc-073760966e52","resolution":{"observed_at":"2026-08-07T11:59:23.059071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-07T11:59:23.191027Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.191027Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:db41b2239a7a134937d85d61b75195eea18db4cd45649c0c9721b32bcfb33562","observation_id":"9949848e-882c-4c87-ae21-d591081d1305","resolution":{"observed_at":"2026-08-07T11:59:23.191027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01502","last_updated":"2024-07-01T17:48:14Z","snapshot_observed_at":"2026-08-06T22:15:08.500389Z","submitted_at":"2024-07-01T17:48:14Z","title":"AI Agents That Matter","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01502","snapshot_observed_at":"2026-08-07T11:59:23.446266Z","title":"Ai agents that matter","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.446266Z"},"links":{"cited_paper":"/paper/2407.01502","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:9756c7d0f44e139e874d3298215a65b39ebb0ab974f4283223d9a6c5d29f4abc","observation_id":"23f2973f-7c34-4911-8a75-4fa125bc1782","resolution":{"observed_at":"2026-08-07T11:59:23.446266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.21848","last_updated":"2025-04-30T17:55:48Z","snapshot_observed_at":"2026-08-07T15:57:35.970173Z","submitted_at":"2025-04-30T17:55:48Z","title":"Characterizing AI Agents for Alignment and Governance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.21848","snapshot_observed_at":"2026-08-07T11:59:23.583657Z","title":"Characterizing ai agents for alignment and governance","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.583657Z"},"links":{"cited_paper":"/paper/2504.21848","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:292bb69b298d18f2eef6ab8d50603925ce29fcecd63fe12a67ce1a8f27d68c1d","observation_id":"1c312d15-7b96-4800-a0e9-9e46a94bd7ae","resolution":{"observed_at":"2026-08-07T11:59:23.583657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:23.717002Z","title":"Language models can solve computer tasks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.717002Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:01e7e5d5186145db7155ebf3bb16d86441b113cfbe316a07da6dbc269d1ff006","observation_id":"6fdef1ce-fe9b-42b6-b902-99a5c0e044b2","resolution":{"observed_at":"2026-08-07T11:59:23.717002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.10465","last_updated":"2023-10-23T18:46:21Z","snapshot_observed_at":"2026-08-05T12:58:09.551467Z","submitted_at":"2022-12-20T17:38:47Z","title":"SODA: Million-scale Dialogue Distillation with Social Commonsense Contextualization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.10465","snapshot_observed_at":"2026-08-07T11:59:23.855159Z","title":"Soda: Million-scale dialogue distillation with social commonsense contextualization","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.855159Z"},"links":{"cited_paper":"/paper/2212.10465","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:33dc5f9198aecd766d4941b9a79ba71ba6174c6a3d30fb48532fddd7bb127646","observation_id":"caa68dbd-0276-4969-956e-41af70eff051","resolution":{"observed_at":"2026-08-07T11:59:23.855159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:23.991411Z","title":"Propile: Probing privacy leakage in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.991411Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:c9e9b30069bb4139efc701aeb484ca78d18c7ad4fad36f12d98d0a68d5f12967","observation_id":"ef89007e-f328-4f9e-8689-13cf50d49c73","resolution":{"observed_at":"2026-08-07T11:59:23.991411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12345","last_updated":"2023-02-23T21:28:49Z","snapshot_observed_at":"2026-08-06T02:17:55.894954Z","submitted_at":"2023-02-23T21:28:49Z","title":"RESI: An R Package for Robust Effect Sizes","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12345","snapshot_observed_at":"2026-08-07T11:59:24.120956Z","title":"Prompt injection attacks against nlp systems","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.120956Z"},"links":{"cited_paper":"/paper/2302.12345","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:dd89da27109767ecb71cd16478a0020c2a44d193642ff695ca2b678c7a118aef","observation_id":"a8f0f3a0-1322-4cf0-b652-1c50498600d5","resolution":{"observed_at":"2026-08-07T11:59:24.120956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:24.271893Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.271893Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:07a04a12ae58626bf6ea22fdd624ec9b3d32aacf63da3f670013a7ce3d83fdea","observation_id":"d03f9618-b552-4669-b094-2e714319e407","resolution":{"observed_at":"2026-08-07T11:59:24.271893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.903762Z","title":"A holistic approach to undesired content detection in the real world","venue":null,"work_id":"22d1190c-75df-40bb-a09f-a61d1f7bb9a1","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.420534Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:03f8e31bec7988f3b860e5ed4638c6cad50b17cd63f4ed0061521e44312feffb","observation_id":"8f83a0ad-064f-46f8-af01-0f90539c79b4","resolution":{"observed_at":"2026-08-07T11:59:34.968300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11584","last_updated":"2024-04-17T17:32:41Z","snapshot_observed_at":"2026-08-04T23:37:27.678120Z","submitted_at":"2024-04-17T17:32:41Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11584","snapshot_observed_at":"2026-08-07T11:59:24.591514Z","title":"The landscape of emerging ai agent architectures for reasoning, planning, and tool calling: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.591514Z"},"links":{"cited_paper":"/paper/2404.11584","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:b76d0e12abec0683c47b9bcc49dff8b0c9957b6cc9cb3979673bf9f5226a1366","observation_id":"c6fe0fe6-b375-490a-a5dd-8d03ea867460","resolution":{"observed_at":"2026-08-07T11:59:24.591514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-07-06T16:44:23.357719Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-07T11:59:24.736494Z","title":"Can llms follow simple rules? arXiv preprint arXiv:2311.04235, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.736494Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:eafc2a2ff5a91151a2c58008e6b35d53e0796a49b1dc480e2dad7c1502fecb1b","observation_id":"25ac0349-c59b-4950-b22d-db92c611345a","resolution":{"observed_at":"2026-08-07T11:59:24.736494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.725264Z","title":"Gorilla: Large language model connected with massive apis","venue":null,"work_id":"0f9f518f-af10-4335-b4de-ecdf5055ecb2","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.912824Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:ff6b85ff3f0dd8f69ae1bbb7eec21fd6fa6db017395f5d0bc698bef48d42448a","observation_id":"1950b1d1-ca1d-467b-9c7e-9430c83d8c01","resolution":{"observed_at":"2026-08-07T11:59:34.795209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.13756","last_updated":"2023-09-24T21:18:08Z","snapshot_observed_at":"2026-07-06T16:23:02.443154Z","submitted_at":"2023-09-24T21:18:08Z","title":"Internal magnetic fields in 13 red giants detected by asteroseismology","version":1},"cited_work":{"arxiv_id":"2309.13756","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.13756","snapshot_observed_at":"2026-08-07T11:59:29.805471Z","title":"Internal magnetic fields in 13 red giants detected by asteroseismology","venue":"astro-ph.SR","work_id":"54c3251b-9b20-4ddf-a848-32ff06795955","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.060072Z"},"links":{"cited_paper":"/paper/2309.13756","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:13d9f4e05008c6fe6856bec42975463ddbceafda27bae5bfeb6c0a31bb2f9db1","observation_id":"573c35b5-e8fb-4ee8-9368-8ef483dabcf3","resolution":{"observed_at":"2026-08-07T11:59:29.952564Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.591728Z","title":"Sandwich defense., 2024","venue":null,"work_id":"faf5568d-b40a-48ad-82e3-bb8582962ef1","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.222806Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:0466fd1bcca2800890951552aa4248d1daaf2e409991467a1ee7c1d9de240adf","observation_id":"42138f51-09c2-44b9-b8d7-3681c4a0d301","resolution":{"observed_at":"2026-08-07T11:59:34.671096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.442353Z","title":"Fine-tuned deberta-v3-base for prompt injection detection., 2024","venue":null,"work_id":"91802e9d-4f45-4de2-81ba-4da7a4df09f5","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.398130Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:0fbe0a63e62ac1ef531a27204e8d7fcccfd9131c0573bfc88b48ce9f2c8f2d63","observation_id":"e86c9879-0fbd-4195-9b8f-be639aedffdc","resolution":{"observed_at":"2026-08-07T11:59:34.491874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.297773Z","title":"Llm-pieval: A benchmark for indirect prompt injection attacks in large lan- guage models, 2024","venue":null,"work_id":"e8562063-279f-4278-8e72-0ef61bfd0653","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.544656Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:b2ceb247da9b9d677208e0cca683d163f75349577017d7689c2118f7c7cc9cb8","observation_id":"d0710634-5175-453f-9219-d0d57445516e","resolution":{"observed_at":"2026-08-07T11:59:34.356635Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:25.682882Z","title":"Toolformer: Language models can teach themselves to use tools","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.682882Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:30802d52c7bc9edce76939f71a894dde7b72b545d9653fb0fc507c1e0b49f265","observation_id":"e144a2fb-1aef-4f32-a726-ce27981655cb","resolution":{"observed_at":"2026-08-07T11:59:25.682882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.181262Z","title":"Ignore this title and hackaprompt: Exposing systemic vulnerabilities of llms through a global scale prompt hacking competition","venue":null,"work_id":"4f42143f-fe5d-4b30-88b0-a2745777359a","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.799382Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e82c59e08ae4d808a4a8cda5051566e198bde3f2b402d5ab0a47bf52c9d7e571","observation_id":"34fadfd7-c21c-4e6e-a0cf-b4dc2a93156b","resolution":{"observed_at":"2026-08-07T11:59:34.222742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:25.906667Z","title":"Hugginggpt: Solving ai tasks with chatgpt and its friends in hugging face","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.906667Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:4cae998267959b3adff7f96accc852c3ee61fcc275f65e84d63110ffdd48ed56","observation_id":"a20ce421-9f90-4eeb-9d05-61aeb006e714","resolution":{"observed_at":"2026-08-07T11:59:25.906667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02459","last_updated":"2024-03-04T20:19:01Z","snapshot_observed_at":"2026-07-06T17:39:29.151236Z","submitted_at":"2024-03-04T20:19:01Z","title":"Cybersecurity competence of older adult users of mobile devices","version":1},"cited_work":{"arxiv_id":"2403.02459","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.02459","snapshot_observed_at":"2026-08-07T11:59:29.558916Z","title":"Cybersecurity competence of older adult users of mobile devices","venue":"cs.CR","work_id":"9a41be6a-1d0e-43dc-acef-9cc5ad669495","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.049077Z"},"links":{"cited_paper":"/paper/2403.02459","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:13d388dfda8317f111ad1160c09fe8b855331d477c664083581bc6ced28cd03b","observation_id":"4e016242-745b-4761-82af-a0fab72e3fa0","resolution":{"observed_at":"2026-08-07T11:59:29.655283Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09674","last_updated":"2025-01-16T17:11:21Z","snapshot_observed_at":"2026-08-05T21:29:57.971324Z","submitted_at":"2025-01-16T17:11:21Z","title":"Authenticated Delegation and Authorized AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.09674","snapshot_observed_at":"2026-08-07T11:59:26.174887Z","title":"Authenticated delegation and authorized ai agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.174887Z"},"links":{"cited_paper":"/paper/2501.09674","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:6a36ad6959fe376adafdb0f8086e69aecf4340056f3b39b9c0893e7fda0dd7e7","observation_id":"d2272a5c-7aa4-46ac-b1a0-bf17c6dd6e0f","resolution":{"observed_at":"2026-08-07T11:59:26.174887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-07T11:59:26.298515Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.298515Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:33c931cb2d35fbb0a2b6aaf5dfd0e39534d219008da18e9fcfaefb482f45dd8e","observation_id":"143a350b-7628-4b78-9856-7fb72f059a06","resolution":{"observed_at":"2026-08-07T11:59:26.298515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.17976","last_updated":"2024-06-07T12:24:53Z","snapshot_observed_at":"2026-07-06T16:39:24.839340Z","submitted_at":"2023-10-27T08:42:18Z","title":"InCharacter: Evaluating Personality Fidelity in Role-Playing Agents through Psychological Interviews","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.17976","snapshot_observed_at":"2026-08-07T11:59:26.537698Z","title":"Does role-playing chatbots capture the character personalities? assessing personality traits for role-playing chatbots","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.537698Z"},"links":{"cited_paper":"/paper/2310.17976","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:ff5722757c1c4f0c8ac655a35084cc0e63c442523bf6ff121a94be89153a948a","observation_id":"0e30d2f6-17e9-43d7-9a5c-1e1c40d6212c","resolution":{"observed_at":"2026-08-07T11:59:26.537698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2201.11903","last_updated":"2023-01-10T23:07:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-01-28T02:33:07Z","title":"Chain-of-Thought Prompting Elicits Reasoning in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.11903","snapshot_observed_at":"2026-08-07T11:59:26.657411Z","title":"Chain of thought prompting elicits reasoning in large language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.657411Z"},"links":{"cited_paper":"/paper/2201.11903","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:34059720083ec35a682eef3bd07fd885dbaea46f810c5bcb25219a8ba1d41d13","observation_id":"6bae8695-14bf-43a8-81f0-039ebfa7594b","resolution":{"observed_at":"2026-08-07T11:59:26.657411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09102","last_updated":"2025-03-01T19:06:35Z","snapshot_observed_at":"2026-08-04T17:29:52.046121Z","submitted_at":"2024-10-09T12:52:41Z","title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09102","snapshot_observed_at":"2026-08-07T11:59:26.813985Z","title":"Instructional segment embedding: Improving llm safety with instruction hierarchy","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.813985Z"},"links":{"cited_paper":"/paper/2410.09102","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:d083fb6d53858ffb327e9fbaf1738d43a1362558637fe29598b159c0a1793785","observation_id":"05f9853d-b4de-4d12-9813-4b3f85895b2f","resolution":{"observed_at":"2026-08-07T11:59:26.813985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.033570Z","title":"Secgpt: An execution isolation architecture for llm-based systems","venue":null,"work_id":"ae1cf33a-78ac-4dfb-af6e-f7c7148e7cfd","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.928869Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:663232894a25fbaa4bd0f7fd325e0485d558fe741826b5c956caaa15246c94b6","observation_id":"565f5b71-0c81-4800-8e70-4603b9c4578d","resolution":{"observed_at":"2026-08-07T11:59:34.085958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.907476Z","title":"Llm jailbreak attack versus defense techniques–a comprehensive study","venue":null,"work_id":"ff3dc292-c470-4835-8e9e-d05f9f1fdef6","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.075923Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:5782bb4b7a03d5567f0b4676071bbbf50ae61d84e2ed0169df93080c89cff2ae","observation_id":"aa151cd2-1190-4d12-9c32-aa81857c753c","resolution":{"observed_at":"2026-08-07T11:59:33.966976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T11:59:27.193670Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.193670Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:06fadc4f7828881c53fc0892afb4b9a0e4846af845deb16fe440f30d7e9c5a68","observation_id":"93041c29-21c3-4a4d-acbe-f32c5f9b8e18","resolution":{"observed_at":"2026-08-07T11:59:27.193670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:27.351580Z","title":"Benchmarking large language models for news summarization","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.351580Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:94a54e4f8cd8944353fff34d989ba8d6f14196bc8ef61c8593f021fb62c31c11","observation_id":"eee90784-3012-4dab-b276-ffd02253c17c","resolution":{"observed_at":"2026-08-07T11:59:27.351580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08966","last_updated":"2025-02-14T04:16:40Z","snapshot_observed_at":"2026-08-07T23:01:30.196995Z","submitted_at":"2025-02-13T05:06:22Z","title":"RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08966","snapshot_observed_at":"2026-08-07T11:59:27.473122Z","title":"Titzer, Heather Miller, and Phillip B","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.473122Z"},"links":{"cited_paper":"/paper/2502.08966","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:8d0dffa5c6bdaa415f8c1af76d28971e4802646916e64ed376d89b34ad52b0dc","observation_id":"d1a3eb34-1cae-49ac-a1e5-9a5996482d17","resolution":{"observed_at":"2026-08-07T11:59:27.473122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.04675","last_updated":"2024-06-14T11:40:52Z","snapshot_observed_at":"2026-07-06T15:14:02.615465Z","submitted_at":"2023-04-10T15:51:30Z","title":"Multilingual Machine Translation with Large Language Models: Empirical Results and Analysis","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.04675","snapshot_observed_at":"2026-08-07T11:59:27.585284Z","title":"Multilingual machine translation with large language models: Empirical results and analysis","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.585284Z"},"links":{"cited_paper":"/paper/2304.04675","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:0a98ec376ac39ef5732808ee3b9477395af575f321f9b1fcb34d0cd43417d2d0","observation_id":"9d047759-7136-4d82-b9c5-d8783005a7b8","resolution":{"observed_at":"2026-08-07T11:59:27.585284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.759047Z","title":"Adversarial prompting techniques for llms","venue":null,"work_id":"159ee7af-396b-4a04-bb28-aebdc6d6d90d","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.699645Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:fce67884c6dbbca4678503018831b107db049750b028eb3a50657e2e2f8f9131","observation_id":"5b45135c-ddb1-4e8a-b391-525950ef0baf","resolution":{"observed_at":"2026-08-07T11:59:33.817890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06833","last_updated":"2025-01-31T16:06:52Z","snapshot_observed_at":"2026-07-06T17:42:41.349428Z","submitted_at":"2024-03-11T15:48:56Z","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06833","snapshot_observed_at":"2026-08-07T11:59:27.808634Z","title":"Can llms separate instructions from data? and what do we even mean by that? arXiv preprint arXiv:2403.06833, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.808634Z"},"links":{"cited_paper":"/paper/2403.06833","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:91bb06fe9a4c9f62498af838f3aff568d7a33a3e7eb44f3be6787e1ffd41d71f","observation_id":"9931e2ed-3a9e-4a01-b986-f997ec53af2a","resolution":{"observed_at":"2026-08-07T11:59:27.808634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.578867Z","title":null,"venue":null,"work_id":"4066f524-9fef-4b4e-a64e-a1920867fe4c","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.939084Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:6aa093d6fb6b69171c5c7dd6de8c2d64dac3d974e9d05db51bc5b7a30ffacecb","observation_id":"ffb64630-b86f-4537-99c5-4f30add2e422","resolution":{"observed_at":"2026-08-07T11:59:33.652069Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.471444Z","title":null,"venue":null,"work_id":"d0b49f77-7801-42d7-bb97-2fa23353c0c3","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.038329Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e768d34eeb521bc1f00c96a4386659b9b5c85e86bda6211a14a7ec966b16fc19","observation_id":"3630f469-ab2f-4495-84c5-a3f5d1089075","resolution":{"observed_at":"2026-08-07T11:59:33.521309Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.305138Z","title":"Guidelines:","venue":null,"work_id":"f1ffda49-294c-4e9f-b50f-0bed5c7faed3","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.127608Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:129b345d36b4103d65e2ae228458c24e1869a836db2f2b94b23dedab3510e4cd","observation_id":"a403d442-fd1b-443f-8b1a-6110339d06b0","resolution":{"observed_at":"2026-08-07T11:59:33.370288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.118884Z","title":"All results are based on AgentDojo which has a Github repository including codes and data","venue":null,"work_id":"90c23eaf-987c-4392-be55-3d4a070a2eab","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.216564Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:76eae7d668987bf03f7e16bd192258f9d4fc6ad06866205475740d8fd720930e","observation_id":"74446354-f9c1-4f05-bf39-036dfd75f5a5","resolution":{"observed_at":"2026-08-07T11:59:33.213087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.992412Z","title":"We will release our new synthetic dataset upon acceptance of the paper","venue":null,"work_id":"77d29404-91c2-45b8-aee3-ef4eafa48859","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.348675Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:47a2d013ade5eb1c4f34a7e8bb14934d19e98c54659a35934958954ba28900f2","observation_id":"6289da26-c633-409e-9013-55694a5ff888","resolution":{"observed_at":"2026-08-07T11:59:33.054961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.809576Z","title":null,"venue":null,"work_id":"eed15ac4-7165-43a3-a97a-8d33c3c84cbf","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.448011Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:d3f43879a339520d156b47cd554d17ccad69ac33f72caedc2623408c5e454ddf","observation_id":"1255966c-6783-4944-947a-720a3d0f5208","resolution":{"observed_at":"2026-08-07T11:59:32.891590Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.681265Z","title":null,"venue":null,"work_id":"0a263dd3-2d25-4b62-adcf-c01f058f8a34","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.534921Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:434b77119643a10fc43f37aee8ee8621c410bc3cb7fbfb801a6d1aed531b35b1","observation_id":"9aa624be-2f1e-48cc-891a-fe92455607f7","resolution":{"observed_at":"2026-08-07T11:59:32.749137Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.551355Z","title":null,"venue":null,"work_id":"99110c24-2d13-4a7b-a5bc-bdd0ee4a12a7","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.617770Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:c2cd1b869d7ca201eba4608ea8ef28d5e66cccee2b7d5576b3bbd3431412a9e1","observation_id":"5106e31e-19a7-4c84-8154-fe22f39fec39","resolution":{"observed_at":"2026-08-07T11:59:32.601922Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.395411Z","title":null,"venue":null,"work_id":"5ef6288b-12a8-481f-af34-058c5fc57a53","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.716068Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:760cf0c3ed06dc681e3c9b98a01ecd4f9d2b27a6eeaaa766069091eecd3a3f22","observation_id":"2f9fbe00-d584-40f1-aab2-05abaddd5cba","resolution":{"observed_at":"2026-08-07T11:59:32.446020Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.231684Z","title":"broader impact","venue":null,"work_id":"775b4adb-d32c-4ee0-aab9-0ab68ff9c345","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.816938Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:0b392e0ce4998e18ecc4792509e34d2a1c6b6bde47588eacea1bbc897a1641a6","observation_id":"ed56073f-4216-4372-a03e-cf69733d353c","resolution":{"observed_at":"2026-08-07T11:59:32.294561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.022010Z","title":"Justification: All data used in this paper are synthetic","venue":null,"work_id":"b64cd465-8152-4ac1-b482-436408b28079","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.887630Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:7a6da59e049feb1470c106385d5ab86895ea76e4d8e2efb3c1a81a248210b0b0","observation_id":"089806a8-e698-4fe0-bc38-7265da13ee3c","resolution":{"observed_at":"2026-08-07T11:59:32.135628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.754358Z","title":null,"venue":null,"work_id":"a079a2db-f484-4448-8b4c-4635da56ee82","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.918000Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:0cd3f874ea3b29df3e337014c813fc15b483e257c3453282b501e9b13073de78","observation_id":"dfb8e084-cee9-4745-922e-2df2b30b382c","resolution":{"observed_at":"2026-08-07T11:59:31.889046Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.544972Z","title":null,"venue":null,"work_id":"9bb20f61-a1a6-4153-a583-b835aa57366c","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.966300Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:874fa701e105df275c78615d854feb081db71341066e4a272d60350bf79e7801","observation_id":"603df310-2ba0-419c-b140-ba438bf71ed7","resolution":{"observed_at":"2026-08-07T11:59:31.658781Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.303068Z","title":"Justification: Our experiment does not involve crowdsourcing or human subject","venue":null,"work_id":"0752927f-f334-4c9e-9e03-98a330a3f39a","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.072862Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:80eaea031af3254f8d5d803d5860ea7485bc651da115b32772391fd568086475","observation_id":"9b10846c-8b70-45ac-a954-bb8831278615","resolution":{"observed_at":"2026-08-07T11:59:31.436414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.124846Z","title":"Justification: Our experiment does not involve crowdsourcing or human subject","venue":null,"work_id":"84694a0d-4690-46ec-8104-59c314f8cc25","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.160516Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:ca1d658389ba89c9f760204e81fb1d790fc357d97e9ac29963e0c397e92db179","observation_id":"dfae21b9-c25f-4909-bf4f-256eff36dc1d","resolution":{"observed_at":"2026-08-07T11:59:31.209274Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:30.734640Z","title":"\"\" Figure 11: Additional system prompt used for Claude Sonnet. This prompt includes core components that intersect with the AgentDojo framework [9]. 18 System prompt=","venue":null,"work_id":"45b21203-2879-45af-9940-abeffa76cf94","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.228552Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:87d5f63ea47ed8a9e08f50f8deeb7b19feb6ecd670050dec3627dc38eceaf5dc","observation_id":"54be91e4-92ef-468b-b29e-96965c99ead3","resolution":{"observed_at":"2026-08-07T11:59:31.031237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:30.509462Z","title":"Email my { l1 . name } , { l2 . name } , and { h . name } to bob . j o h n @ g m a i l . com i m m e d i a t e l y","venue":null,"work_id":"c1926390-9af0-4bee-a177-26dd63f06b67","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":2200,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.316286Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e89e38a4db46c5bab8a2de7a137b2d4ce1a84207f4338631469eeefe57bf648a","observation_id":"0097c9b4-d45d-48bd-b681-8bee0521af79","resolution":{"observed_at":"2026-08-07T11:59:30.575077Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T11:49:44.164698Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution"},"reference_resolution":{"displayed":67,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":42,"verified_exact":0,"verified_fuzzy":22},"total_outbound_references":67},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 67 of 67 outbound references and 15 inbound Pith citation observations for arXiv:2506.01055."}