{"as_of":"2026-08-07T07:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:137f45e0b4ae054ac778d814fdb0d1de177e6ed690b80f1a2e26e5127ee52a7e","coverage":[{"denominator":93,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":93,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T07:06:38.165220Z","state":"measured"},{"denominator":93,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":93,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2510.27140/citation-record","integrity":"/paper/2510.27140/integrity","json":"/paper/2510.27140/citation-record.json","paper":"/paper/2510.27140"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.173387Z","title":"‘hey mum, i dropped my phone down the toilet’: Investigating hi mum and dad sms scams in the united kingdom","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.173387Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:988e9c93d1579729b11ca31cfa0a62b90234d2cc495119d10074c871a0ee8028","observation_id":"310a5515-6355-416c-8f2e-ef6ed69bc748","resolution":{"observed_at":"2026-08-04T07:06:37.173387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.286007Z","title":"Dissect- ing ghost clicks: Ad fraud via misdirected human clicks","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.286007Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:4580bc7353b4a6f72e767f65779c981201e57ac93edd581f8d585a9ad16f7fe4","observation_id":"699ba449-4c43-40a0-8492-1bd65da38e0e","resolution":{"observed_at":"2026-08-04T07:06:37.286007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-04T07:06:37.405911Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents.arXiv preprint arXiv:2410.09024, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.405911Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:da8081209e94e4edcb390c5d0ec93c683fa0f9db200dcad5d082d3a3ba0637bf","observation_id":"1a4ffbcf-013a-404a-8ce1-addc73b53173","resolution":{"observed_at":"2026-08-04T07:06:37.405911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.458396Z","title":"Alipay.https://www.alipay.com/","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.458396Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:0d9f0f4abf013b35c71d7f5738604e4515638f66c008105262b7efbfdffc6797","observation_id":"4eebf578-7e29-4bd9-9a67-81dff3c95de1","resolution":{"observed_at":"2026-08-04T07:06:37.458396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.586404Z","title":"Malvertising in facebook: Analysis, quan- tification and solution.Electronics, 9(8):1332, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.586404Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f6f705b4dde8b028ff96c1cfc3d1ebcae7b7adf0f539516b09f8bc926a882bf8","observation_id":"769a3e91-46c6-4a37-8bae-a21760946667","resolution":{"observed_at":"2026-08-04T07:06:37.586404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.659433Z","title":"Click-fraud monetizing malware: A survey and case study","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.659433Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:36a2311a1794bde9edf2a3f34d259d2e0dc83206826f09d0a2fc4d2a90d1e050","observation_id":"b42fbd9b-b91c-4bfc-b6bf-c196b246aecf","resolution":{"observed_at":"2026-08-04T07:06:37.659433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-04T07:20:43.897179Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-04T07:06:37.731914Z","title":"Evaluating the susceptibility of pre-trained language models via handcrafted adversarial examples.arXiv preprint arXiv:2209.02128, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.731914Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:ed39a57990909775d0636acf8be27e933cad214b608fabf533e7a24e32fafde1","observation_id":"c9883fca-74ed-41df-ad2e-2ea9cc0eb131","resolution":{"observed_at":"2026-08-04T07:06:37.731914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.808700Z","title":"Language models are few-shot learners.Advances in neural information processing systems, 33:1877–1901, 2020","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.808700Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:45a127dd7ce8cb88026b54501653b97db7d1d276170c181a730f43a1aa606f4b","observation_id":"fd2d9a99-948e-4d09-a1d3-46ae37c93dbe","resolution":{"observed_at":"2026-08-04T07:06:37.808700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.820896Z","title":"A large scale study of user be- havior, expectations and engagement with android permissions","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.820896Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:2606f1b5d6988508ea2d68740e572198a75b23811f22b85b8e878ae8b39dfa2d","observation_id":"6a3961a7-4288-4339-9d70-9cb4c9a0a79c","resolution":{"observed_at":"2026-08-04T07:06:37.820896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.865995Z","title":"Spa-bench: A comprehensive benchmark for smartphone agent evaluation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.865995Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:b0526507acdf03f4a95ceeadd20e25d4e0b4dc8cd0672030e637d2fe8cfe82fa","observation_id":"afc194ca-50ce-4f15-b2c8-45761eb90adf","resolution":{"observed_at":"2026-08-04T07:06:37.865995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-07-06T17:27:58.440355Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-04T07:06:37.935210Z","title":"Struq: Defending against prompt injection with structured queries.arXiv preprint arXiv:2402.06363, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.935210Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:8c2513d63f8c501717edb7569bf0a300197e797d880d73bcf45e56738ef77330","observation_id":"97d1c926-8515-46b4-8a4b-58af8219a60e","resolution":{"observed_at":"2026-08-04T07:06:37.935210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.956001Z","title":"Bifocals: Analyzing webview vulnerabilities in android applications","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.956001Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:fa351d0494c7ed6ef976799820efb2cedeacf1316d01832b8a0a16ff8da2f434","observation_id":"a9091b94-22eb-48b4-8f30-978e86cc66db","resolution":{"observed_at":"2026-08-04T07:06:37.956001Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.966247Z","title":"An empirical study of click fraud in mobile ad- vertising networks","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.966247Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:5613e360654172e57cb90dba6f0a0f6b5a1ad8b4f99db1eb36cda73bb306d87d","observation_id":"e908770b-f620-4839-a470-3d5f8b1920ed","resolution":{"observed_at":"2026-08-04T07:06:37.966247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:37.989989Z","title":"Madfraud: Investigating ad fraud in android applications","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:37.989989Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f33f9323817e1a0b43b4615480da11c5c8684f08ce072dcab254331b96eab84a","observation_id":"fa552caf-104e-48b6-8fff-e155093c02f6","resolution":{"observed_at":"2026-08-04T07:06:37.989989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.000471Z","title":"Advancing mobile gui agents: A verifier-driven approach to practical deployment.arXiv preprint arXiv:2503.15937, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.000471Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:934a7df1218bff09dc5c6e56fb16c3772a192fab8a7ac34cfcdd0414bc125936","observation_id":"699d9ddf-8fff-4638-8a05-83a5233affbb","resolution":{"observed_at":"2026-08-04T07:06:38.000471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-06T07:36:52.841128Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-04T07:06:38.002885Z","title":"Defeating prompt injections by design.arXiv preprint arXiv:2503.18813, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.002885Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:64a201966fe2640d58440afc7e094c894cfb94f2c8fa59c17e5dd1d2d7bb0562","observation_id":"fc959d86-7914-4a3f-92e4-a961064ba38b","resolution":{"observed_at":"2026-08-04T07:06:38.002885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.005564Z","title":"Agent- dojo: A dynamic environment to evaluate attacks and defenses for llm agents.arXiv e-prints, pages arXiv–2406, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.005564Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:bd6791d535d1d5c02e76f5f3cc3ae267a3612c4c89cc9ac10117c25950a1b6eb","observation_id":"7305b20a-4194-4769-b0a5-6859adf43956","resolution":{"observed_at":"2026-08-04T07:06:38.005564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.007481Z","title":"Delgado-Soto, J.E.L","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.007481Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:9bbd9d68cdb7661cb2d0f6cfb575b4ab8ea1c1d105bdbbefebea32772f5a8618","observation_id":"fcb273dc-49b8-4a6d-ba7d-90cd7f6f5ee0","resolution":{"observed_at":"2026-08-04T07:06:38.007481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.00993","last_updated":"2024-07-01T06:10:01Z","snapshot_observed_at":"2026-07-06T18:39:20.664293Z","submitted_at":"2024-07-01T06:10:01Z","title":"Mobile-Bench: An Evaluation Benchmark for LLM-based Mobile Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.00993","snapshot_observed_at":"2026-08-04T07:06:38.009250Z","title":"Mobile- bench: An evaluation benchmark for llm-based mobile agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.009250Z"},"links":{"cited_paper":"/paper/2407.00993","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:13d70e3cfd88e53437da4cc618c6ece0f72b757f0c66c1f9279f2cef2aac267c","observation_id":"bf108a2c-87a1-4d0e-ac04-6a3bfc2e3c92","resolution":{"observed_at":"2026-08-04T07:06:38.009250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.011496Z","title":"Fossify notes beta","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.011496Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:7d83f27e5b240184af9af9674332e7d2d52fab3c5f6af19a36233d81d7ab03f2","observation_id":"03cd65a9-4301-4b7d-87f6-ad55c6a55a51","resolution":{"observed_at":"2026-08-04T07:06:38.011496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.013294Z","title":"Fraud- droid: Automated ad fraud detection for android apps","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.013294Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f97837b2f023b415e1a70ca395d6f1894cb5031037228cd0c93b019d7ac32924","observation_id":"d1c35412-5d4c-4fc8-ac02-d46d2beeeee5","resolution":{"observed_at":"2026-08-04T07:06:38.013294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.015242Z","title":"Why eve and mal- lory love android: An analysis of android ssl (in) security","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.015242Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:00748ff63c2878cbc0201b91aa363f62481a034c294c684170cef315d7a2a084","observation_id":"804d0b1e-c747-4dee-8974-c5897a8032b1","resolution":{"observed_at":"2026-08-04T07:06:38.015242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.017253Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated ap- plications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.017253Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:5754ad72374a8f9345abac6bf974e6e486ce2d96bbc3e21fe23d1392f2a4e03e","observation_id":"18322551-6a8b-457e-926c-7323c6fe4b79","resolution":{"observed_at":"2026-08-04T07:06:38.017253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.019243Z","title":"Defending against phishing attacks: taxonomy of methods, cur- rent issues and future directions.Telecommunication Systems, 67(2):247–267, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.019243Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:ad538bc00fd13a40055cf2a91c928b096b214f2f43a596bf122adfb73258e136","observation_id":"04424b68-ee78-4b48-a29d-d030d565ed77","resolution":{"observed_at":"2026-08-04T07:06:38.019243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.021134Z","title":"Medusa attack: Exploring security hazards of {in- app}{QR} code scanning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.021134Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:b53c40a8957131b19a58349fdc150833409d381e34e051cd35f967e949213049","observation_id":"9e790620-dd76-45dd-a521-fbb54978512f","resolution":{"observed_at":"2026-08-04T07:06:38.021134Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.022997Z","title":"Securing llm systems against prompt injec- tion.Online], https://developer","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.022997Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:e1a7b892e2e36801f7fa5fd74bbe1debcfd3046eca3c2cf1c68a6a086d910571","observation_id":"dde38284-d17b-4cf9-a32c-f02a3dd3d49f","resolution":{"observed_at":"2026-08-04T07:06:38.022997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.04482","last_updated":"2025-08-06T14:33:45Z","snapshot_observed_at":"2026-08-06T00:00:28.197248Z","submitted_at":"2025-08-06T14:33:45Z","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.04482","snapshot_observed_at":"2026-08-04T07:06:38.024864Z","title":"Os agents: A survey on mllm-based agents for gen- eral computing devices use.arXiv preprint arXiv:2508.04482, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.024864Z"},"links":{"cited_paper":"/paper/2508.04482","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:341a8197a5a63d55009f33833d50382109953016313e697ea63d5430c4414cc3","observation_id":"99aee33e-018c-48ee-af4e-a307b05b5173","resolution":{"observed_at":"2026-08-04T07:06:38.024864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01586","last_updated":"2024-10-03T22:12:05Z","snapshot_observed_at":"2026-08-06T06:52:40.785580Z","submitted_at":"2024-02-02T17:26:23Z","title":"TrustAgent: Towards Safe and Trustworthy LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01586","snapshot_observed_at":"2026-08-04T07:06:38.027003Z","title":"Trustagent: To- wards safe and trustworthy llm-based agents.arXiv preprint arXiv:2402.01586, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.027003Z"},"links":{"cited_paper":"/paper/2402.01586","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:6def4383e6d81cf2ebf727f7a7b3be6dc5c6c96a1b99aa6dd2f41f5c9c368c6a","observation_id":"6b35ec04-0d94-4e8d-b232-badedc26f76b","resolution":{"observed_at":"2026-08-04T07:06:38.027003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.029117Z","title":"ileakage: browser-based timerless speculative execu- tion attacks on apple devices","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.029117Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:fb30387cf4f6b9b5e9047e165f2fde0023e40931a36cdbc23c8e84142c0ea72e","observation_id":"0e6398dc-a637-4733-a6e0-2f75f01a1e29","resolution":{"observed_at":"2026-08-04T07:06:38.029117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.031025Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.031025Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:3158c500422b57a4d0863fb58dc1d73b964c97fbcd74f3c0a972bdc0239d2cfb","observation_id":"bc260061-43e6-4363-b407-5ae756be8242","resolution":{"observed_at":"2026-08-04T07:06:38.031025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-04T07:06:38.033013Z","title":"Refusal-trained llms are easily jailbroken as browser agents.arXiv preprint arXiv:2410.13886, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.033013Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:cfd8756b9d39f396c56d22a5b2c9b753fad2237e3c39429bdc948590d95278e4","observation_id":"c50f0a73-6ec3-451d-93d6-fc8011508c09","resolution":{"observed_at":"2026-08-04T07:06:38.033013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.035761Z","title":"Deep learning.nature, 521(7553):436–444, 2015","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.035761Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:dfd141b7d8b2ecc1b6612102ce7aa75cfc37da34e399c6b670ac136c235a99c7","observation_id":"911e5dc9-49d3-44b4-92db-cc9c66b639e4","resolution":{"observed_at":"2026-08-04T07:06:38.035761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.20279","last_updated":"2025-06-08T05:39:56Z","snapshot_observed_at":"2026-07-31T03:21:54.450410Z","submitted_at":"2025-03-26T07:08:15Z","title":"sudo rm -rf agentic_security","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.20279","snapshot_observed_at":"2026-08-04T07:06:38.037639Z","title":"sudo rm-rf agentic_security.arXiv preprint arXiv:2503.20279, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.037639Z"},"links":{"cited_paper":"/paper/2503.20279","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:d983b16c62aef2092849cab04c30c1320f46af87dcbbc3e095882fa96882db2d","observation_id":"5f4dad8d-5910-450d-b5f5-65e786669759","resolution":{"observed_at":"2026-08-04T07:06:38.037639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.040014Z","title":"Don’t kill my ads! balancing privacy in an ad-supported mobile application market","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.040014Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:32011100a435f45b0581239915962914592a9b0b743d122dcf055ff28fd242f2","observation_id":"210a4307-8758-4608-ac59-fb2f5a9acbd7","resolution":{"observed_at":"2026-08-04T07:06:38.040014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-07T02:35:55.161197Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08586","snapshot_observed_at":"2026-08-04T07:06:38.041872Z","title":"Commercial llm agents are already vulnerable to simple yet dangerous attacks.arXiv preprint arXiv:2502.08586, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.041872Z"},"links":{"cited_paper":"/paper/2502.08586","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:8a148e4c4925a2059483f284f3ba0711e6dfdac6c0da502fe069fb95d6722a60","observation_id":"e36b5551-e79c-4033-9e44-68fbdd28bc08","resolution":{"observed_at":"2026-08-04T07:06:38.041872Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.043896Z","title":"Knowing your enemy: understanding and detecting malicious web advertising","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.043896Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:48cf4056800b20ef50ad9d2c7d77aae965b94a6c6bf76cd84e1be487b0b2d757","observation_id":"beac10fb-3bc2-42ca-8322-1fe362c96b88","resolution":{"observed_at":"2026-08-04T07:06:38.043896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.045705Z","title":"{DECAF}: Detecting and characterizing ad fraud in mobile apps","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.045705Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:13db210dba5517de1b7c9bd7b94139a1fa5a79644bfcdc7f4632da29fa905144","observation_id":"c6ff12cc-cb1e-4b67-9f72-282fd2f18fdd","resolution":{"observed_at":"2026-08-04T07:06:38.045705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.047700Z","title":"Maddroid: Characterizing and detecting devious ad contents for android apps","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.047700Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:8070bced8743029266d15ba77d28b402da32c31cbc176f91fa96a59f254df3f5","observation_id":"3e6c2a87-6315-4465-837a-8113aa7ede74","resolution":{"observed_at":"2026-08-04T07:06:38.047700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.050185Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.050185Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f59a33ce66bb76d3bc187d5e491fbdf9020b4dbc7af3ef5eb956c92d00af7fb7","observation_id":"e87b3f56-3e5a-4b8f-909d-9501f9c5527d","resolution":{"observed_at":"2026-08-04T07:06:38.050185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.052124Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.052124Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:deb63c88f438c5a40f4aa639cfbcb918c31c3505d2089c9d51899459d946b622","observation_id":"5c07a228-5615-42d9-88b4-b5175bdfd3ff","resolution":{"observed_at":"2026-08-04T07:06:38.052124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.054066Z","title":"Agen- trewardbench: Evaluating automatic evaluations of web agent trajectories.arXiv preprint arXiv:2504.08942, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.054066Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:23411bb29593e8aa8661cc32e5c817e4809fe61eec4376a6a43abce12ebc1a7e","observation_id":"ca4b09a4-c7c3-4696-a862-1dc80ce817fd","resolution":{"observed_at":"2026-08-04T07:06:38.054066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07588","last_updated":"2025-01-17T15:18:41Z","snapshot_observed_at":"2026-07-06T19:30:56.585110Z","submitted_at":"2024-10-10T03:39:13Z","title":"Careful About What App Promotion Ads Recommend! Detecting and Explaining Malware Promotion via App Promotion Graph","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07588","snapshot_observed_at":"2026-08-04T07:06:38.055973Z","title":"Careful about what app promotion ads recommend! detecting and explaining malware promotion via app promotion graph.arXiv preprint arXiv:2410.07588, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.055973Z"},"links":{"cited_paper":"/paper/2410.07588","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:7629d5ff2e4df14b6070067eb217ccf11283e1a5e3ace3556165496849d57590","observation_id":"30373810-42a6-40ba-924e-099ccc24dee6","resolution":{"observed_at":"2026-08-04T07:06:38.055973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.058145Z","title":"When advertising turns nasty.Net- work Security, 2015(11):5–8, 2015","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.058145Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:30c541799f5b83d2ae374411a39fc2ec24e895f16f88a0cbea3597ba94a3af36","observation_id":"c23c29b1-f0d1-467f-a850-c81adff2cc90","resolution":{"observed_at":"2026-08-04T07:06:38.058145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1703.02874","last_updated":"2017-03-31T14:38:09Z","snapshot_observed_at":"2026-07-06T05:32:54.087537Z","submitted_at":"2017-03-08T15:32:46Z","title":"A Study of MAC Address Randomization in Mobile Devices and When it Fails","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.02874","snapshot_observed_at":"2026-08-04T07:06:38.060137Z","title":"A study of mac address randomization in mobile devices and when it fails.arXiv preprint arXiv:1703.02874, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.060137Z"},"links":{"cited_paper":"/paper/1703.02874","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:cb43d6ba48eeb24e2f47e4ed3cbfe25e697b61cc78141b1f68f2b9aa32154915","observation_id":"fa287ee1-605e-462a-8647-772a7aa7f3c0","resolution":{"observed_at":"2026-08-04T07:06:38.060137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.062410Z","title":"The price of free: Privacy leakage in personalized mobile in-apps ads","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.062410Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f98210bf829c7c5a9ad36397a4d07cef6c080b1183af7f6cc0259d5f626b2b99","observation_id":"b0afa7e6-7665-4908-970f-08ef33fb8777","resolution":{"observed_at":"2026-08-04T07:06:38.062410Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.064248Z","title":"Whatsapp","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.064248Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:eb3677706b10c2ca6f6dbac7e23ad2d30ecc200d577c394aa67dae8e736004ba","observation_id":"fcf5328f-4e73-460e-be55-bc68304fa976","resolution":{"observed_at":"2026-08-04T07:06:38.064248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.066347Z","title":"What’s clicking what? techniques and innova- tions of today’s clickbots","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.066347Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:42be68c168fae924d4b786669eeb88f2c9afee86b44876b39eb6ffde3ac849f5","observation_id":"ef328913-b292-42b3-83ef-511f21018122","resolution":{"observed_at":"2026-08-04T07:06:38.066347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.068423Z","title":"Dial one for scam: A large-scale analysis of technical support scams","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.068423Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:8347967f331500fff2e740ade852ebdd080d1e8e40154e1cd509c43574a5c0c1","observation_id":"8a163b47-e7da-491e-9eeb-e80097ff3d55","resolution":{"observed_at":"2026-08-04T07:06:38.068423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.070733Z","title":"Mobile tactics","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.070733Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:d0e6d4098e1d6cd85ae8a8be4a1a7186f30b7be201798703c772b17743835575","observation_id":"f524fa72-2f51-47c5-ba3b-bd6094da5982","resolution":{"observed_at":"2026-08-04T07:06:38.070733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.072635Z","title":"On sms phishing tactics and infrastructure","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.072635Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:c01f058e7c5653fd4014de00f7b851fe2719015174051f9903e3702ee072953a","observation_id":"cc3821ed-ec6a-4d86-838c-d7ebe0b06b50","resolution":{"observed_at":"2026-08-04T07:06:38.072635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-04T07:06:38.074424Z","title":"Ignore previous prompt: Attack techniques for language models.arXiv preprint arXiv:2211.09527, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.074424Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f014b840562cd03423162f76eac68af6eaacaa3602df0489113de6e623a63c73","observation_id":"530c5378-d131-41e9-a941-d5d00217dbf9","resolution":{"observed_at":"2026-08-04T07:06:38.074424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-04T07:06:38.076927Z","title":"Tricking llms into disobedience: For- malizing, analyzing, and detecting jailbreaks.arXiv preprint arXiv:2305.14965, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.076927Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:598c63dbf22a95d47f886e1bdb7bead0ea917a0e5312b452c16b0dd6149c37d3","observation_id":"76ec4a41-819f-4c03-b9b3-8a24fa14a0d2","resolution":{"observed_at":"2026-08-04T07:06:38.076927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.078981Z","title":"Are these ads safe: Detecting hidden attacks through the mobile app-web interfaces","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.078981Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:8176b34af2bbd6596644296c30dde97bd0fb57b1e554caae3d5e4d5979a3b6f1","observation_id":"53c99c5b-a7fa-4781-bdc5-065f59d8fb16","resolution":{"observed_at":"2026-08-04T07:06:38.078981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14573","last_updated":"2025-04-06T20:37:50Z","snapshot_observed_at":"2026-07-06T18:18:39.093732Z","submitted_at":"2024-05-23T13:48:54Z","title":"AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14573","snapshot_observed_at":"2026-08-04T07:06:38.080767Z","title":"ANDROIDWORLD: A DYNAMIC BENCHMARKING ENVIRONMENT FOR AUTONOMOUS AGENTS","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.080767Z"},"links":{"cited_paper":"/paper/2405.14573","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:0055e9a2f13c997f43a9397b3a59007a50d4cc488ed16098b319a9f723ce98db","observation_id":"4168044c-5d3c-41e6-8a3a-d1845437f86e","resolution":{"observed_at":"2026-08-04T07:06:38.080767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.083186Z","title":"Ba- belview: Evaluating the impact of code injection attacks in mobile webviews","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.083186Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:2ddabeeffbdb9fe72cbc23c56e931af678607d600ed3aeaf264da9b98def1f2e","observation_id":"2fd5e405-8914-4acb-833a-e3bdedb018bb","resolution":{"observed_at":"2026-08-04T07:06:38.083186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-04T07:06:38.085299Z","title":"Identifying the risks of lm agents with an lm-emulated sandbox.arXiv preprint arXiv:2309.15817, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.085299Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:0c523cd65e9ff44c19276bb4c29f39fa416618384bb169f3c79cdca4fa853d76","observation_id":"dc5f364a-254c-4acd-b37b-729a53c31945","resolution":{"observed_at":"2026-08-04T07:06:38.085299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.087636Z","title":"Understanding in-app ads and detecting hidden attacks through the mobile app-web interface","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.087636Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:ccce5021885a153a8ebc03a53cce4e62f121cd198d047808295e761e39728dc7","observation_id":"75215638-5e13-4422-9efb-69520a1a0b52","resolution":{"observed_at":"2026-08-04T07:06:38.087636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.089785Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.089785Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:d25ae069c756171b80206d02a0827bfeee139cbbd7eeb07db1d654a9a71d1e35","observation_id":"b70b3c18-cd7f-44a7-ab6b-3e132ac482f7","resolution":{"observed_at":"2026-08-04T07:06:38.089785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.091710Z","title":"What mo- bile ads know about mobile users","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.091710Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:0120fce95283c146322131936024ad6e95446d06cb83f7607dd343c7e09934d2","observation_id":"6d8ce6a7-300b-481b-b0b0-fbb4e6f12f1e","resolution":{"observed_at":"2026-08-04T07:06:38.091710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.093680Z","title":"Scan- droid: Automated side-channel analysis of android apis","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.093680Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:4536feb8cff904514d0b1d98a412d66a7e42c7292fd8770d8042cf85c2511e2d","observation_id":"0fcdb333-3133-4be5-a0ae-beb878d463ec","resolution":{"observed_at":"2026-08-04T07:06:38.093680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.095626Z","title":"Autoeval: A practical framework for autonomous evaluation of mobile agents.arXiv preprint arXiv:2503.02403, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.095626Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:dc856ca7111770b7d458acddc4ae14630a9bc57c991efc476a1075847a8acae0","observation_id":"3e2df3cf-134e-47b9-8a64-ee0b3883b322","resolution":{"observed_at":"2026-08-04T07:06:38.095626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.097448Z","title":"Understanding and detecting mobile ad fraud through the lens of invalid traf- fic","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.097448Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:df7bce03fffdea4f94f81560440b19092b8507531eed9fc08373ddc238ad40db","observation_id":"3e12a5b2-1f8b-4ba3-ae80-550cdf80c428","resolution":{"observed_at":"2026-08-04T07:06:38.097448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.099808Z","title":"Data breaches, phishing, or malware? understanding the risks of stolen credentials","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.099808Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:eb8d33d01f869392ba8ed24c49faedf0ce41c65b1cb8aa3f8aa2ed0e975a9e16","observation_id":"b5c21188-30a4-44cb-924c-ac616e75638b","resolution":{"observed_at":"2026-08-04T07:06:38.099808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.101896Z","title":"Understanding influences on SMS phishing de- tection: User behavior, demographics, and message attributes","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.101896Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:6d44546313d1447ef9210cba6decc8e6009792ae45048ad7fbdd2d98a9ffdc2f","observation_id":"a4870b70-7b04-4b7e-af3a-a73c18c5b763","resolution":{"observed_at":"2026-08-04T07:06:38.101896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04957","last_updated":"2025-03-06T20:43:14Z","snapshot_observed_at":"2026-07-06T20:48:13.849680Z","submitted_at":"2025-03-06T20:43:14Z","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04957","snapshot_observed_at":"2026-08-04T07:06:38.104345Z","title":"Safearena: Evaluating the safety of autonomous web agents.arXiv preprint arXiv:2503.04957, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.104345Z"},"links":{"cited_paper":"/paper/2503.04957","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:62f776ae97a02bf3cc8df2a0991b3687a607a8bf53572c96e94612c102116f18","observation_id":"96ff0790-60ff-4665-9633-7e7b669fbf03","resolution":{"observed_at":"2026-08-04T07:06:38.104345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.106510Z","title":"Vladika, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.106510Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f301a2385c46e23af6f5430b1b833c502c9828c2266f7f382a90d221e3012d10","observation_id":"08d8ff27-a72c-4464-bad1-8c30bc57d3fb","resolution":{"observed_at":"2026-08-04T07:06:38.106510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-04T07:06:38.108715Z","title":"The instruction hierarchy: Train- ing llms to prioritize privileged instructions.arXiv preprint arXiv:2404.13208, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.108715Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:aa581b60dddb20de02a5966031a348ce66aac50ce58151dcca4dc3d4f7803bb4","observation_id":"3a67007b-9e3f-46c9-a6f3-25d611243972","resolution":{"observed_at":"2026-08-04T07:06:38.108715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.16158","last_updated":"2024-04-18T06:53:38Z","snapshot_observed_at":"2026-08-05T03:22:24.562938Z","submitted_at":"2024-01-29T13:46:37Z","title":"Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.16158","snapshot_observed_at":"2026-08-04T07:06:38.110838Z","title":"Mobile-agent: Autonomous multi-modal mobile device agent with visual per- ception.arXiv preprint arXiv:2401.16158, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.110838Z"},"links":{"cited_paper":"/paper/2401.16158","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:bfeab4e2f7314d923d305922d623bf985a87eadee223a5dba5172662f13672af","observation_id":"893ea7e0-223a-4eb8-88ae-7e2c013efb31","resolution":{"observed_at":"2026-08-04T07:06:38.110838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08184","last_updated":"2024-06-12T13:14:50Z","snapshot_observed_at":"2026-07-06T18:29:34.538901Z","submitted_at":"2024-06-12T13:14:50Z","title":"MobileAgentBench: An Efficient and User-Friendly Benchmark for Mobile LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.08184","snapshot_observed_at":"2026-08-04T07:06:38.113238Z","title":"Mo- bileagentbench: An efficient and user-friendly benchmark for mobile llm agents.arXiv preprint arXiv:2406.08184, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.113238Z"},"links":{"cited_paper":"/paper/2406.08184","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:9bf8c9e2588816c30b71ce4710da207cce9b86647e33e93abf8b5b167fbcb566","observation_id":"ef74d904-99af-4f85-aee3-56bbc3fe0d1f","resolution":{"observed_at":"2026-08-04T07:06:38.113238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.11733","last_updated":"2025-01-28T16:58:02Z","snapshot_observed_at":"2026-07-06T20:23:36.052687Z","submitted_at":"2025-01-20T20:35:46Z","title":"Mobile-Agent-E: Self-Evolving Mobile Assistant for Complex Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.11733","snapshot_observed_at":"2026-08-04T07:06:38.116080Z","title":"Mobile-agent- e: Self-evolving mobile assistant for complex tasks.arXiv preprint arXiv:2501.11733, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.116080Z"},"links":{"cited_paper":"/paper/2501.11733","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:04665b4a485715a00497cf023f8cbd0a53078ac0be82e3260ec19d3eacbee092","observation_id":"8f25db0f-8281-408f-8b19-34c60911675a","resolution":{"observed_at":"2026-08-04T07:06:38.116080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.118434Z","title":"The danger of minimum exposures: Understanding cross-app information leaks on ios through multi-side-channel learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.118434Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:d3a47e119d4ee76d92901ff83207c8658799caf1630a92d099efba451cf22711","observation_id":"13b1dfed-95de-4903-ba57-8e0ab1e377c5","resolution":{"observed_at":"2026-08-04T07:06:38.118434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-06T13:25:52.403871Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-04T07:06:38.120540Z","title":"Jailbreak and guard aligned language models with only few in-context demonstrations.arXiv preprint arXiv:2310.06387, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.120540Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:f5a28eed3e94fe719b4c7959b4be4aa872af4c95cd8a515317f721de78503e46","observation_id":"5187e3f8-ddbc-49ef-b93f-23f7013e2313","resolution":{"observed_at":"2026-08-04T07:06:38.120540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.123202Z","title":"Autodroid: Llm-powered task automation in android","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.123202Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:10d11d9d07c6545de4cdeeb1f79e1ff576ea91d375eb3be3c62424efa7b307f0","observation_id":"a7c52400-5df9-4352-bfc8-0d86194a92cd","resolution":{"observed_at":"2026-08-04T07:06:38.123202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.07061","last_updated":"2024-01-07T08:23:47Z","snapshot_observed_at":"2026-07-06T15:15:42.652360Z","submitted_at":"2023-04-14T11:31:56Z","title":"DroidBot-GPT: GPT-powered UI Automation for Android","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.07061","snapshot_observed_at":"2026-08-04T07:06:38.125358Z","title":"Droidbot-gpt: Gpt-powered UI automation for android.CoRR, abs/2304.07061, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.125358Z"},"links":{"cited_paper":"/paper/2304.07061","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:052c3425e5d32cbbea4509607b5f0fd56ad9bd350cd57fcf58d519b26b0794f1","observation_id":"077d67eb-3cee-4220-9fe0-249b7cb1504e","resolution":{"observed_at":"2026-08-04T07:06:38.125358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-07-06T18:33:07.118735Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-04T07:06:38.127507Z","title":"Dissecting ad- versarial robustness of multimodal lm agents.arXiv preprint arXiv:2406.12814, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.127507Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:6f334a43feef00d85a69202ae49042558642fba6dcf6bb15c5bfc2c06cab772c","observation_id":"848eac8b-7613-413b-bd90-4e51f175d1f7","resolution":{"observed_at":"2026-08-04T07:06:38.127507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-07-06T21:26:11.353127Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12981","snapshot_observed_at":"2026-08-04T07:06:38.129664Z","title":"From assistants to adversaries: Exploring the security risks of mobile llm agents.arXiv preprint arXiv:2505.12981, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.129664Z"},"links":{"cited_paper":"/paper/2505.12981","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:87889ba022977bc09f46d9ffc07843e40d361b4d83989e1581d914b4d4a930d7","observation_id":"42f0340d-d8d1-404f-971d-136ec7b942af","resolution":{"observed_at":"2026-08-04T07:06:38.129664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-04T07:06:38.131932Z","title":"Guardagent: Safeguard llm agents by a guard agent via knowledge-enabled reasoning.arXiv preprint arXiv:2406.09187, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.131932Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:2082cb2dddb37bb6b4fc47bd3852467d2bdeae5e7adf651ebade14f148903bf7","observation_id":"be2008a9-e718-4f92-ac24-039d8f74acc3","resolution":{"observed_at":"2026-08-04T07:06:38.131932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.134335Z","title":"Under- standing and detecting overlay-based android malware at mar- ket scales","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.134335Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:d4d8ed685c8065ddac2b34ffe2c80145ea5197669a6452f9dadf51c9e658df38","observation_id":"bd05fd27-4f0e-4221-84b0-9de671b3f133","resolution":{"observed_at":"2026-08-04T07:06:38.134335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.136404Z","title":"{Iframes/Popups} are dangerous in mobile {WebView}: Studying and mitigating differential context vulnerabilities","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.136404Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:5c79b823d70f60155cc51c1352c4b933ca40bd58c9da23519d734fe25d95b642","observation_id":"f6594acf-0b67-49e7-b3e5-98d8357b23cd","resolution":{"observed_at":"2026-08-04T07:06:38.136404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09241","last_updated":"2025-03-12T10:38:15Z","snapshot_observed_at":"2026-07-06T20:51:13.891815Z","submitted_at":"2025-03-12T10:38:15Z","title":"In-Context Defense in Computer Agents: An Empirical Study","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09241","snapshot_observed_at":"2026-08-04T07:06:38.138263Z","title":"In-context de- fense in computer agents: An empirical study.arXiv preprint arXiv:2503.09241, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.138263Z"},"links":{"cited_paper":"/paper/2503.09241","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:549f11182fc6ea85f1247efe27c4d3c4c254d7a8186def1e758e8a30254113b4","observation_id":"685663bc-a762-4cc2-a462-ddb1c8deee68","resolution":{"observed_at":"2026-08-04T07:06:38.138263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.140603Z","title":"Benchmarking and defend- ing against indirect prompt injection attacks on large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.140603Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:b674ce21d031e338cd80530cd763507ca6aebffba4abcbb115a6901283198f83","observation_id":"00ece843-2841-4e4c-920f-741b93f918b6","resolution":{"observed_at":"2026-08-04T07:06:38.140603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.142649Z","title":"Yuan, L.A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.142649Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:7fe14111c73ef3b028b2c1335d23bf2bdf706662614668bae4920f7362f03ea9","observation_id":"ca5295f3-4cd3-4494-800b-26547420341e","resolution":{"observed_at":"2026-08-04T07:06:38.142649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10019","last_updated":"2024-10-05T06:50:15Z","snapshot_observed_at":"2026-08-06T04:21:24.397587Z","submitted_at":"2024-01-18T14:40:46Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10019","snapshot_observed_at":"2026-08-04T07:06:38.144746Z","title":"R-judge: Benchmarking safety risk awareness for llm agents.arXiv preprint arXiv:2401.10019, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.144746Z"},"links":{"cited_paper":"/paper/2401.10019","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:7db27bf8a94d9127169548e6c79d83fdd639f6303b998dfdea70809046e3a5e0","observation_id":"3f281932-5d65-49e8-8d7a-b745b7c28f33","resolution":{"observed_at":"2026-08-04T07:06:38.144746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11050","last_updated":"2025-04-15T10:34:23Z","snapshot_observed_at":"2026-07-06T21:09:40.867591Z","submitted_at":"2025-04-15T10:34:23Z","title":"Leveraging LLMs and attention-mechanism for automatic annotation of historical maps","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11050","snapshot_observed_at":"2026-08-04T07:06:38.146945Z","title":"Yuan and M","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.146945Z"},"links":{"cited_paper":"/paper/2504.11050","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:8447f4288ca3db7459ffae4146d01c9c73fb5d0887986ab85dff0a9182d83d06","observation_id":"a9b566a5-ee7c-4e37-92ae-3a58e6dc53d0","resolution":{"observed_at":"2026-08-04T07:06:38.146945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.149378Z","title":"The dark alleys of madison avenue: Understanding malicious adver- tisements","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.149378Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:52e21569dec4e570779c1ed4f9522c5e0ff9d95e9625a2700a1a11d1b12c1dc0","observation_id":"9a58d006-8bdf-4b43-8c99-d0ca4e8ce987","resolution":{"observed_at":"2026-08-04T07:06:38.149378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.151478Z","title":"Research on third-party libraries in android apps: A taxonomy and systematic literature review","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.151478Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:357292b93141259a34d755e55311e6f02e2bac6bf7cf083c56730881e49cea56","observation_id":"83d778b0-5208-4d57-920a-5873b4caff8b","resolution":{"observed_at":"2026-08-04T07:06:38.151478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.153403Z","title":"Appagent: Multimodal agents as smartphone users","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.153403Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:432c6dcaba789a702a06a6ebc9823710cecbf02939ff7753ada00bc0700d1fbb","observation_id":"9d7ec842-253c-4e49-b352-c27462e692b5","resolution":{"observed_at":"2026-08-04T07:06:38.153403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-04T07:06:38.155316Z","title":"Agent security bench (asb): Formalizing and benchmarking attacks and defenses in llm-based agents.arXiv preprint arXiv:2410.02644, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.155316Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:101f4581b7620baf45f917cf147e87b6a79098ff16010bf99b1505874dc08268","observation_id":"a86d7c8c-49a7-4c9f-af6d-dbf61872b44a","resolution":{"observed_at":"2026-08-04T07:06:38.155316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.157447Z","title":"Identity confusion in {WebView-based} mobile app- in-app ecosystems","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.157447Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:35fa150b3128abbc542db5ec89699cb90741090ac63b56fa7d808da5cd17e22a","observation_id":"78b7bcd3-b282-4374-9897-debc9b60c4f8","resolution":{"observed_at":"2026-08-04T07:06:38.157447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-05T21:14:08.776265Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-04T07:06:38.159564Z","title":"Attacking vision- language computer agents via pop-ups.arXiv preprint arXiv:2411.02391, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.159564Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:78c6e31d5f3f1c06d5ca7ce85401e171ddbbeef0486741b9bc21e752d0761ad9","observation_id":"b93f3110-dcd8-4a69-b6f1-c34dd5be42c6","resolution":{"observed_at":"2026-08-04T07:06:38.159564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.161591Z","title":"Gpt-4v(ision) is a generalist web agent, if grounded","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.161591Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:d315651042dd0aa8eba67d1fa40c8d86afd8ca13498cafc6301a360c9cea2bbc","observation_id":"96a7df1a-d014-448a-80d2-bccedc3905e9","resolution":{"observed_at":"2026-08-04T07:06:38.161591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T07:06:38.163433Z","title":"Moba: A two-level agent system for efficient mobile task automation.CoRR, abs/2410.13757, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.163433Z"},"links":{"citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:8a381cec1a41bc954282cba54e37e043d5754226e1f530d5af64bef7565d2d46","observation_id":"87524caa-95f4-4643-bee0-1bfaf953c421","resolution":{"observed_at":"2026-08-04T07:06:38.163433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-04T07:06:38.165220Z","title":"Send an email to Alice with today’s meeting notes","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.165220Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:b25f71d74405292a8a3288d06ab58ebad81fa682aebfbf6bb0477fa96105b6a9","observation_id":"6210567d-69dd-4eab-8f75-5da1556b6cbd","resolution":{"observed_at":"2026-08-04T07:06:38.165220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels"},"reference_resolution":{"displayed":93,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":93,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":93},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 93 of 93 outbound references and 0 inbound Pith citation observations for arXiv:2510.27140."}