{"as_of":"2026-08-05T07:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c278f0560f52d2d300da5b1ee885080608f86bb66f35a39cd7a45b5e910b8364","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-19T06:14:52.902631Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T19:04:10.482234Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-06-30T16:24:55.077325Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:cf8a49c73e35fb9cdf7466955164e1d33387151bc6aa63b225c8cfe9aa421905","observation_id":"06f52ec1-d2a8-4114-9e2c-e057b8fb0289","resolution":{"observed_at":"2026-05-18T03:42:22.495392Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-08-02T19:04:10.482234Z","title":"385 + 898 = 1283. Comparing options: A. 1265 B. 1331 C. 1314D. 1283 (correct). The correct answer isD","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.03824","last_updated":"2026-06-16T16:15:15Z","snapshot_observed_at":"2026-08-03T03:03:33.884371Z","submitted_at":"2026-03-04T08:22:02Z","title":"In-Context Environments Induce Evaluation-Awareness in Language Models","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T19:04:10.482234Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2603.03824"},"observation_digest":"sha256:68e4a506b7a1f7815401ea6e659bac3b8a4d6a041dd025cc8b4dedf540403e04","observation_id":"4c7adf36-5681-4b0d-bef7-0b7067dbadc1","resolution":{"observed_at":"2026-08-02T19:04:10.482234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2603.04474","last_updated":"2026-05-11T15:41:00Z","snapshot_observed_at":"2026-07-06T22:47:50.848191Z","submitted_at":"2026-03-04T11:45:27Z","title":"From Spark to Fire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent Collaboration","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-15T16:36:43.330447Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2603.04474"},"observation_digest":"sha256:1a25a82c05f08d1bcfbf2de7dd5dfd5ed5c31e7f175506ee2edae33b57cfa21e","observation_id":"dfefdddc-dbfe-4d1c-a9f0-49f9de60456d","resolution":{"observed_at":"2026-05-15T16:40:10.570454Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-08-02T18:10:38.489000Z","title":"The dark side of LLMs: Agent-based attacks for complete computer takeover.arXiv preprint arXiv:2507.06850, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.15727","last_updated":"2026-07-16T04:17:50Z","snapshot_observed_at":"2026-08-04T17:24:38.885730Z","submitted_at":"2026-03-16T17:55:43Z","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T18:10:38.489000Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2603.15727"},"observation_digest":"sha256:91e4d52e0e94c7178338887ca28c8d603879aad265c3db662341d1ef9d6b88df","observation_id":"d0d3c263-29be-4e78-919e-c9619a8178ea","resolution":{"observed_at":"2026-08-02T18:10:38.489000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2604.08608","last_updated":"2026-04-20T18:30:51Z","snapshot_observed_at":"2026-07-06T22:57:40.773778Z","submitted_at":"2026-04-08T18:19:03Z","title":"Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T17:40:23.128451Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2604.08608"},"observation_digest":"sha256:8460a144e80b62ba776bcb9ef66bc93e153938ffea12bdb189ed27a5c6bcb51b","observation_id":"c47d3a7f-9340-40b8-b508-ed6195b832d4","resolution":{"observed_at":"2026-05-12T01:43:44.211476Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.01186","last_updated":"2026-05-02T01:27:20Z","snapshot_observed_at":"2026-07-06T23:14:29.125042Z","submitted_at":"2026-05-02T01:27:20Z","title":"Trace: Unmasking AI Attack Agents Through Terminal Behavior Fingerprinting","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-09T15:18:43.426681Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.01186"},"observation_digest":"sha256:a873eb43e8e295d5bc9669e9948508f6a265aedff76f66d822de05925ea76def","observation_id":"50097204-7fc3-4e26-b622-a4b80f30e3ee","resolution":{"observed_at":"2026-05-12T01:43:44.211476Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.08460","last_updated":"2026-05-08T20:27:23Z","snapshot_observed_at":"2026-07-06T23:20:43.010758Z","submitted_at":"2026-05-08T20:27:23Z","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-12T01:20:55.221345Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.08460"},"observation_digest":"sha256:7f6971daad7ee9f0b192a53ad18291c09bde2e115ec73ccc2ad33c18d1c78000","observation_id":"d0bce763-1f73-4d17-8b5d-34304f6d1e43","resolution":{"observed_at":"2026-05-12T08:01:33.056687Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.16471","last_updated":"2026-05-15T13:53:02Z","snapshot_observed_at":"2026-07-06T23:27:38.955917Z","submitted_at":"2026-05-15T13:53:02Z","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-05-20T18:08:24.901025Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.16471"},"observation_digest":"sha256:b496fe97c540cb17960fc473a42d6543db6ca0da8e81caf2ad4274b125c24b4d","observation_id":"197e254e-43ce-45c7-a3e3-c171bf6ec994","resolution":{"observed_at":"2026-05-20T18:08:50.492088Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.17830","last_updated":"2026-05-18T04:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-18T04:06:34Z","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-05-20T10:51:19.555985Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.17830"},"observation_digest":"sha256:ef21e5c17176ad33afeb97063486f2a5726531ad03979dcde169bcf88c243e28","observation_id":"a8f796f9-ea66-4e15-9303-92903aa201d3","resolution":{"observed_at":"2026-05-20T10:53:13.416419Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.18672","last_updated":"2026-05-18T17:13:41Z","snapshot_observed_at":"2026-07-06T23:29:29.105126Z","submitted_at":"2026-05-18T17:13:41Z","title":"Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-20T10:21:11.725387Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.18672"},"observation_digest":"sha256:1ffcc62bb14b632c21c7357bec653477f208fc85d8d482fcaee6047f036f158a","observation_id":"577eeaa2-27ca-4173-8c41-697e0d8f93c7","resolution":{"observed_at":"2026-05-20T10:23:12.018634Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.22842","last_updated":"2026-05-12T20:21:47Z","snapshot_observed_at":"2026-08-02T07:12:56.313557Z","submitted_at":"2026-05-12T20:21:47Z","title":"The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-25T00:43:34.500801Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.22842"},"observation_digest":"sha256:d8236a5249c126cabc18db76a3e31d868f720c7ed0cf846b1951e44d4bf40d7a","observation_id":"96398ede-da4c-4607-a5bf-c06d6d184ef8","resolution":{"observed_at":"2026-05-25T00:45:09.327089Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.23330","last_updated":"2026-05-22T07:45:04Z","snapshot_observed_at":"2026-08-02T05:47:41.731065Z","submitted_at":"2026-05-22T07:45:04Z","title":"Security, Privacy, and Ethical Risks in OpenClaw","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-25T04:25:49.102385Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.23330"},"observation_digest":"sha256:68157e74dcc389129e0b8069fa8b993473f2e79ac3f7b918044bfb4022131cad","observation_id":"743652cf-9172-45c2-9560-f8877e37346f","resolution":{"observed_at":"2026-05-25T04:26:37.756524Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.24069","last_updated":"2026-05-22T08:34:48Z","snapshot_observed_at":"2026-08-02T10:17:43.608511Z","submitted_at":"2026-05-22T08:34:48Z","title":"When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-30T16:22:23.857438Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.24069"},"observation_digest":"sha256:c22dec664b62e79384ce11022b4dab34c26f258c0377e0c81564e2d27c02569f","observation_id":"5996c85c-c62c-411a-99a0-7b1406d78edf","resolution":{"observed_at":"2026-06-30T16:24:55.083131Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":"2507.06850","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-06-30T16:24:55.077325Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","venue":"cs.CR","work_id":"b778fe2e-450b-4db5-a099-b4e9d2b60fdd","year":2025},"citing_paper":{"arxiv_id":"2605.30534","last_updated":"2026-05-28T20:10:04Z","snapshot_observed_at":"2026-08-01T16:45:30.193926Z","submitted_at":"2026-05-28T20:10:04Z","title":"Strengthening Polymorphic Prompt Assembling: Dynamic Separator Generation Against Emerging Prompt Injection Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T06:34:52.596684Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2605.30534"},"observation_digest":"sha256:2bf2bcbdd19cc3a158c06b895265cb87411c5391ec2fcf188deaca2de6d649aa","observation_id":"698e63f9-7791-4a65-bcd5-9888e956a7b1","resolution":{"observed_at":"2026-06-29T14:33:31.448440Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-08-01T21:29:54.443698Z","title":"The dark side of llms: Agent-based attacks for complete computer takeover.arXiv preprint arXiv:2507.06850, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.16066","last_updated":"2026-07-17T15:47:23Z","snapshot_observed_at":"2026-08-01T21:29:31.125079Z","submitted_at":"2026-07-17T15:47:23Z","title":"LLM-Powered Agentic AI for 5G/6G Networks: A Tutorial and Survey on Architectures, Protocols, and Standardization","version":1},"reference_index":177,"source":"pdf_text","source_observed_at":"2026-08-01T21:29:54.443698Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2607.16066"},"observation_digest":"sha256:59e754ea3ad5218b49d8c3d30343fdb310e05bd5e553b57b275b957a94fc9a9c","observation_id":"baae2f08-e6e1-45d4-a25d-522419ef8c61","resolution":{"observed_at":"2026-08-01T21:29:54.443698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-08-01T06:04:46.626585Z","title":"arXiv preprint arXiv:2507.06850 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-04T13:13:46.028018Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":273,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.626585Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:0cf4c90ccef5a9a0b44503d670b04f1e214a764e86986cd675617bc7ca61c44f","observation_id":"587919d3-435b-4f41-8ebd-bbfa1a6775ff","resolution":{"observed_at":"2026-08-01T06:04:46.626585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-08-01T00:51:17.248440Z","title":"arXiv preprint arXiv:2507.06850 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26120","last_updated":"2026-07-28T17:48:54Z","snapshot_observed_at":"2026-08-03T22:51:29.375300Z","submitted_at":"2026-07-28T17:48:54Z","title":"Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systems","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-01T00:51:17.248440Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2607.26120"},"observation_digest":"sha256:fd4d236e6b9a8eaa05e6ce82bb120b182bddd7a3b1221aaabdb6eef52379cb08","observation_id":"cb027c41-408f-447f-8fd5-54a79d7df231","resolution":{"observed_at":"2026-08-01T00:51:17.248440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.06850/citation-record","integrity":"/paper/2507.06850/integrity","json":"/paper/2507.06850/citation-record.json","paper":"/paper/2507.06850"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2310.02374","last_updated":"2024-09-25T04:50:38Z","snapshot_observed_at":"2026-07-06T16:27:22.878185Z","submitted_at":"2023-10-03T18:54:10Z","title":"Conversational Health Agents: A Personalized LLM-Powered Agent Framework","version":5},"cited_work":{"arxiv_id":"2310.02374","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.02374","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://www.guardrailsai","venue":null,"work_id":"9d1a0a03-5c6c-4f5b-af92-79ac75950882","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"cited_paper":"/paper/2310.02374","citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:1a4c6fdbe5e5cbbc279447f9f76650e03f78b3c1ebd0b4e5299dfe4dfae58452","observation_id":"923858e0-1e5a-4f01-a2ef-ecd8d1bc8060","resolution":{"observed_at":"2026-05-19T06:17:07.709778Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"agno-agi/agno","venue":null,"work_id":"5c4fa7e7-fc31-49b4-a7bf-e7cbc826c957","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:b9c151bf2f4c05f52355eedb675ac12f1782b98ef4d5482d5a7983356c067a3d","observation_id":"b69c451a-d464-4ef5-889f-629e4baab2b9","resolution":{"observed_at":"2026-05-19T06:17:08.232429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CyberRAG: An agentic RAG cyber attack classification and reporting tool","venue":null,"work_id":"fb243641-b36b-4684-a209-a6f916d7f27a","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:a8f99a3e52fcd3f3a0127ef890465cc70352ec650f066fc269073c7988ea39a9","observation_id":"4c5758ad-9a8e-4b49-af0b-57196462f7ce","resolution":{"observed_at":"2026-05-19T06:17:08.213726Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Langchain, October 2022","venue":null,"work_id":"8b4c76d3-f484-4da3-a39b-199c36e2bf14","year":2022},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:12e97a6733f0cecd555fc5ca90825a5b78f35d2ea99eaf5b160df7def77ab6a2","observation_id":"cfa44b46-f052-416d-a196-2ef12f183c6a","resolution":{"observed_at":"2026-05-19T06:17:08.217942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases","venue":null,"work_id":"6fc4d737-2149-4077-ad76-2574e20a7322","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:2a7a77be7536c8840a514bd221a3e2aafaf0c64b5d0ca49e30eb11b242f5cd0b","observation_id":"3a057573-a53f-459a-8270-cb80830569e6","resolution":{"observed_at":"2026-05-19T06:17:08.209306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Trojanrag: Retrieval-augmented generation can be back- door driver in large language models","venue":null,"work_id":"c4542c55-9b3f-4044-b054-1c5740114962","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:cbba1ac16a5c9d0bad09dad1823602cfa8848cac505faf00fd18cb3ca781dc9d","observation_id":"1b3c24b1-295f-48f7-8fcf-09dbf9377ff7","resolution":{"observed_at":"2026-05-19T06:17:08.222142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"LLM agents can autonomously hack websites.arXiv","venue":null,"work_id":"5cf0900d-b93d-4c3d-b71a-9c406e462fa8","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:9d0c42249beda8e82123caab9d9d6ed6aa8d6f972be0a2179c9c462168cf0267","observation_id":"1e406a86-9516-42e8-9fcc-e0a2b6baf6de","resolution":{"observed_at":"2026-05-19T06:17:08.226524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injec- tion","venue":null,"work_id":"ba66b719-fa4b-492b-9f9d-ebf6536e2ed0","year":2023},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:ee53d523882c76cbfcc442aabc634da43d1996ad27fdb9780d5081578fda7e8f","observation_id":"d60d4242-e178-4b37-a7a0-bb20b95ad9f4","resolution":{"observed_at":"2026-05-19T06:17:08.189274Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":"f52eac7f-a9bb-4c93-bbaf-50c2cb00437e","year":2019},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:dee57ec9a880f12e0b5ab901ef9337d42f2d4e66b6b8bd7ea4e3fd6554dce14e","observation_id":"5235f135-d488-4464-a7b4-9f0313abca6a","resolution":{"observed_at":"2026-05-19T06:17:08.251237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d179f47c-8720-4cd9-8b7e-a486afad66ec","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:d75fa2f3f47e5ba523415d8d2fbcf0ce65e325fed2088c1b7f8a04738751a24a","observation_id":"d746e0c5-8df9-489f-8e68-8b2139b7ceb2","resolution":{"observed_at":"2026-05-19T06:17:08.204353Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing warp agent mode","venue":null,"work_id":"c67e421f-ab32-4d19-8641-8971248f0943","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:5ac85564178e6cb2f928eeb7bffe24e6a9438072698720633bf716b49a5d9617","observation_id":"b073a367-ddaa-453a-828c-6636e15452a9","resolution":{"observed_at":"2026-05-19T06:17:08.199097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Weight poisoning attacks on pre-trained models","venue":null,"work_id":"c49ecc61-8cff-4d8f-8726-696f818ac79b","year":2020},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:0a40a04d4731daeb99ea9c1e4b570dc4c9402f0a997c2a0d4f5baca2f9dd2039","observation_id":"c8f23d51-a5ec-4afa-8962-8f69e757c85a","resolution":{"observed_at":"2026-05-19T06:17:08.237172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"laszukdawid/terminal-agent","venue":null,"work_id":"5e48a07b-8111-45f6-b748-a5cbde8eddc6","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:84253fc868686c318d149dc2be485520fb4d4f8f430e2f71de27338bf936ed13","observation_id":"bd5977d4-e499-4dfc-8736-12bf0039f28a","resolution":{"observed_at":"2026-05-19T06:17:08.093098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt infection: Llm- to-llm prompt injection within multi-agent systems","venue":null,"work_id":"d3bc0ba9-8c3c-4b9c-b5d8-d0aee0309e89","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:ec7bdbf7759d01541e6d4ba00eead67f8a148fa5630ec42781bfb01bedfd3df1","observation_id":"a920d7a5-84c7-4717-baf4-0e12421229b2","resolution":{"observed_at":"2026-05-19T06:17:08.096678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Retrieval-augmented generation for knowledge- intensive nlp tasks.Advances in neural information processing systems","venue":null,"work_id":"cf315c2f-6f62-45f3-93f3-d46dbcc7e4dc","year":2020},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:d9a2ce9d19d9c97f3a748d8a3806e040d40cc70dcdec330cb6fe0e0f223010b6","observation_id":"eff50a72-80ae-40e2-9b34-9af067c30992","resolution":{"observed_at":"2026-05-19T06:17:08.103568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Commercial llm agents are already vulnerable to simple yet dangerous attacks","venue":null,"work_id":"f8d0b6c6-dd22-48f4-af64-edb5dd75ad1a","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:dcb06159c52bfd231e2b7443daaa130b6e3f0c52f8fca3ab7e5cfd62920dd7fd","observation_id":"5883b98e-4660-4b42-98d5-c2f4d9ec9bd3","resolution":{"observed_at":"2026-05-19T06:17:08.183619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor attacks on pre- trained models by layerwise weight poisoning","venue":null,"work_id":"b8f12127-b747-412c-a3f1-38852ce8d27d","year":2021},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:2a61f4a05fee60e4b92190df48dfe5941fb888a249366d493111c0c5e522ffad","observation_id":"3ee17d8f-86b6-4b76-9780-12fa645d9a8e","resolution":{"observed_at":"2026-05-19T06:17:08.193661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":"d2aba33b-dc3d-498c-b0b5-9ffb820c4ee4","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:bb352cc51cbca4c53b77736ce71aae0586554c28ad53bc356c097b927c77ece2","observation_id":"62d2b852-9dc3-4b5b-aa16-a4f6d913f9d9","resolution":{"observed_at":"2026-05-19T06:17:08.176552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.10813","last_updated":"2024-07-28T23:37:51Z","snapshot_observed_at":"2026-08-01T17:51:53.220489Z","submitted_at":"2023-11-17T18:59:56Z","title":"A Language Agent for Autonomous Driving","version":4},"cited_work":{"arxiv_id":"2311.10813","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.10813","snapshot_observed_at":"2026-07-09T00:25:48.578008Z","title":"A language agent for autonomous driving","venue":"cs.CV","work_id":"258c13af-49d8-47eb-b398-bd4e16fb48aa","year":2023},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"cited_paper":"/paper/2311.10813","citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:5895bc9ea60bcfa88ddb8a60e2a298ac744875da8e7b18716311a35b5f588634","observation_id":"1c0fa3fb-989e-4f66-9af9-1266cd560dde","resolution":{"observed_at":"2026-05-19T06:17:07.696033Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"vxcontrol/pentagi","venue":null,"work_id":"3109ba21-991a-44bf-8030-42a1b56c12f0","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:1473cd327e886e13644614d3683af848434f2ca18cfcf0f25a5616afc85499b3","observation_id":"85350ee9-e933-4781-ad20-033c951b12f1","resolution":{"observed_at":"2026-05-19T06:17:08.089624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Lang- Graph","venue":null,"work_id":"5693ceac-2d7b-4499-824a-7e9be68f496a","year":null},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:9a4ac1edada218f58e53b68d193e3f620373a185f81305d3e93a8c875491b35f","observation_id":"91f07c7b-c785-4b3c-a308-81cb9009c437","resolution":{"observed_at":"2026-05-19T06:17:08.150829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Meterpreter — metasploit documentation","venue":null,"work_id":"ed4dd467-69b5-474c-9371-6008bdc938f0","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:4ab2b0429724fabf1c17ecaa68c2b4fb5e72f1b6e64b94525bfa177040769bfc","observation_id":"367c7b63-178b-4ca4-b0ec-3c0bd2e16df6","resolution":{"observed_at":"2026-05-19T06:17:08.256993Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Trism for agentic ai: A review of trust, risk, and security management in llm-based agen- tic multi-agent systems","venue":null,"work_id":"fd11b774-e7c8-48bc-9cda-0b32a8c0ba79","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:02427cac143defa99e5f44987d20cf0ded900542259d7cd4c282663ca371d092","observation_id":"79f8eb5d-155a-4132-a567-6a2c661a3fc2","resolution":{"observed_at":"2026-05-19T06:17:08.155882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Machine against the rag: Jamming retrieval-augmented generation with blocker documents","venue":null,"work_id":"a149c1d3-f4f6-4d82-a378-19cebf044c1f","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:192341ddf7dcacb8b8c79bc3f3d28dcba14a77bded24090433b59f76ee24c29b","observation_id":"c084a304-a7dd-456e-ad01-a2ece0bed531","resolution":{"observed_at":"2026-05-19T06:17:08.160047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On the feasibility of using llms to autonomously execute multi-host network attacks","venue":null,"work_id":"fa58494a-bb59-4ef7-a158-143ec8918fe0","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:1aa070320be64daf72492ced943d7a1be8c57f6d82cb12cd6daf9784d332b73c","observation_id":"501e7aa3-da0a-4907-b262-434e2a85e36b","resolution":{"observed_at":"2026-05-19T06:17:08.172227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentic retrieval-augmented generation: A survey on agentic rag","venue":null,"work_id":"008b9c12-0c1f-4f85-a776-9e38b1cf78b4","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:7e6e8e59bb6ab93f47a494888a4c532875d10359deb6cbeac0187526edbbd742","observation_id":"73dfc683-bcad-49ef-a50f-e17c4d54db67","resolution":{"observed_at":"2026-05-19T06:17:08.246896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badagent: Inserting and activating back- door attacks in llm agents","venue":null,"work_id":"139fca15-83f8-412f-91d3-bd6d2c84ef9c","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:134bb11e9b30ba63f37826675065834d0a7fb55611f51befa2d177b1c5692ef3","observation_id":"33d4deab-44ad-4ee4-8a09-78ea3f3cc409","resolution":{"observed_at":"2026-05-19T06:17:08.241225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentvigil: Generic black-box red- teaming for indirect prompt injection against llm agents","venue":null,"work_id":"24340389-313b-4a44-a599-be976fd69c7e","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:332637aab36675a6c228dc8196dae19d6e7384527d488d213084e1016e65e9ab","observation_id":"41618c24-c1a5-4ddd-8a14-7ca08e55f213","resolution":{"observed_at":"2026-05-19T06:17:08.107694Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wiley, 2nd edition","venue":null,"work_id":"7618435d-8111-4847-b887-dace3c8d9d62","year":2009},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:2e492738482747914264c7678e31c75df4f9a20c9c8e6446f2de23af7bfdddf1","observation_id":"7993b626-8a9f-4a4e-bad0-1bb63b5b9b8a","resolution":{"observed_at":"2026-05-19T06:17:08.136947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.17564","last_updated":"2023-12-21T06:21:11Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-30T17:30:36Z","title":"BloombergGPT: A Large Language Model for Finance","version":3},"cited_work":{"arxiv_id":"2303.17564","doi":null,"metadata_source":"pith","pith_arxiv_id":"2303.17564","snapshot_observed_at":"2026-07-10T09:06:59.093499Z","title":"BloombergGPT: A Large Language Model for Finance","venue":"cs.LG","work_id":"04e9adc6-bece-4ff4-a0f6-e836d88414a7","year":2023},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"cited_paper":"/paper/2303.17564","citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:951d55695f8a2c2bc5b0dd77090a5c379780c8836356cecf80a0011c311611a7","observation_id":"bbd187df-f3e1-425b-af9d-3bc30eecba60","resolution":{"observed_at":"2026-05-19T06:17:07.703169Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The rise and potential of large language model based agents: a survey.Science China Information Sciences, 68","venue":null,"work_id":"f02b4860-82c0-4924-adbc-cdd46faa2974","year":2025},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:07459adf1595bc27b2ecc6bed20f762d563efc4ad0b84a924b1f03ec61c01aee","observation_id":"83269add-8d46-4587-90d8-7f40c1ba9886","resolution":{"observed_at":"2026-05-19T06:17:08.123970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Instructions as backdoors: Backdoor vulnerabilities of instruction tuning for large language models","venue":null,"work_id":"11a7cf0c-7178-4b9a-82d5-44c92f16c6be","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:e5c005cd9c1d47ad6c2031924fc96382c3f12104d228a12064800af272b9f5ac","observation_id":"5151aed2-c0ad-4b75-b584-ce6a6dbb7aa6","resolution":{"observed_at":"2026-05-19T06:17:08.167702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdooring instruction-tuned large lan- guage models with virtual prompt injection","venue":null,"work_id":"8df9fc1c-27fc-495f-adc4-926cd27975ae","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:79d01c39b5bcc5cf3ff6ade40d522d4cb6236d71c9d641bef45a05a05e03ff25","observation_id":"5de5ebce-e28f-42dc-a89f-a8e8a2477c15","resolution":{"observed_at":"2026-05-19T06:17:08.143089Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Watch out for your agents! investi- gating backdoor threats to llm-based agents","venue":null,"work_id":"df8dedba-3556-4436-a2b8-313476adc5cc","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:d7ad768bca0b184aabe4ffd2859f0f6696995481951c79a71a7e4f9af8c05a77","observation_id":"5fe4580d-9f6d-4471-b853-7257e6663011","resolution":{"observed_at":"2026-05-19T06:17:08.263760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-07T17:44:02.395366Z","title":"React: Synergizing reasoning and acting in language models","venue":null,"work_id":"e2cd986a-6ef2-4f6c-a46e-31c084394641","year":2023},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:568e74f038d544a309dc6fd087b219b534807e34fb990ac815c70ff80c0d4405","observation_id":"af1b0de6-ca41-4fc8-808c-dee89a5f9265","resolution":{"observed_at":"2026-05-19T06:17:08.118343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language mod- els","venue":null,"work_id":"33587bdd-1884-4c92-8f43-7614ee4cc9b2","year":2024},"citing_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-19T06:14:52.902631Z"},"links":{"citing_paper":"/paper/2507.06850"},"observation_digest":"sha256:31e5e72c2cb6bc13ea0fd1a8db03be844c349099abd146c51d03ee777e815582","observation_id":"aec1926c-963a-46b3-a048-9fe6fc8c8844","resolution":{"observed_at":"2026-05-19T06:17:08.113526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","latest_version":6,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T09:13:37.321679Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":1,"verified_exact":2,"verified_fuzzy":32},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 17 inbound Pith citation observations for arXiv:2507.06850."}