{"as_of":"2026-08-05T01:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9cb931ffef47908967a4d7c122d4d39e77f9e80b3768d2e25e865af8c93e0ceb","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T10:45:20.111398Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T15:17:29.479184Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-10T12:15:01.137692Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"cited_work":{"arxiv_id":"2601.10758","doi":"10.48550/arxiv.2601.10758","metadata_source":"arxiv_reference","pith_arxiv_id":"2601.10758","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":null,"venue":null,"work_id":"0963eb06-02d3-4d57-bd96-4c6d86d78d44","year":2026},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2601.10758","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:900f626876a6f99d2099d7b7081e028a4816446b9fd90c0a1160a39119210556","observation_id":"a2dc1e2f-60d3-43db-afbf-9d19f0fdb259","resolution":{"observed_at":"2026-07-07T03:18:52.400858Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.10758","snapshot_observed_at":"2026-08-02T15:17:29.479184Z","title":"arXiv preprint arXiv:2601.10758 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-02T15:17:26.339645Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.479184Z"},"links":{"cited_paper":"/paper/2601.10758","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:3894f0ce71277cb9702eb42028a3b4797db97240acf7b5f00383febea4bfd781","observation_id":"434c2944-cfc8-4d31-83f4-cebc5b6a34f8","resolution":{"observed_at":"2026-08-02T15:17:29.479184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2601.10758/citation-record","integrity":"/paper/2601.10758/integrity","json":"/paper/2601.10758/citation-record.json","paper":"/paper/2601.10758"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:15.835365Z","title":"Security and Privacy4(4), e159 (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:15.835365Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:a3b1c22ffecdc36913e4d64458c09716504e1da9b41c32c2208a6cd7f341a756","observation_id":"e432f370-e493-4995-89d7-62900a34e679","resolution":{"observed_at":"2026-08-03T10:45:15.835365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-03T10:45:15.947776Z","title":"arXiv preprint arXiv:2212.08073 (2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:15.947776Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:fae208289e2a5ba4269136bfa22b9d6d018e3ac8df2640c4a115009bf0750a9e","observation_id":"35ecfa6f-2d8d-489f-ac22-73d674ff82be","resolution":{"observed_at":"2026-08-03T10:45:15.947776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.101607Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.101607Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:1f797de260d27dbcf37491b762e5342b4f285ac9617c23270ece63d4b9556afb","observation_id":"d11f8b85-1555-4fa0-8c3b-44052593c3c5","resolution":{"observed_at":"2026-08-03T10:45:16.101607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.246142Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.246142Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:140486bf2f147675dba93afc109fcb1fccd45528c24c98844bbcfce687060638","observation_id":"c9098b25-c8b6-4072-945e-51c76cf128f6","resolution":{"observed_at":"2026-08-03T10:45:16.246142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.407118Z","title":"In: 2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.407118Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:65ff2882d2d18e719615a29a59e50444c0e3c3f5daca975fbd338a6d262c0e81","observation_id":"51fba39d-55d5-47d6-96f6-8093a40e103f","resolution":{"observed_at":"2026-08-03T10:45:16.407118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.550874Z","title":"Advances in Neural Information Processing Systems37, 26814–26845 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.550874Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:5fa4d76209527f258364276afc781296e3d8df619f58fe6981440f07aade4a83","observation_id":"b057cb23-5b13-48f2-a92e-f60277d028c0","resolution":{"observed_at":"2026-08-03T10:45:16.550874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.11368","last_updated":"2025-06-17T06:55:16Z","snapshot_observed_at":"2026-07-06T21:25:08.411184Z","submitted_at":"2025-05-16T15:32:23Z","title":"GuideBench: Benchmarking Domain-Oriented Guideline Following for LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.11368","snapshot_observed_at":"2026-08-03T10:45:16.759066Z","title":"arXiv preprint arXiv:2505.11368 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.759066Z"},"links":{"cited_paper":"/paper/2505.11368","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:97578389d1b39f2450bca75d32b8fdeb007c6904830d497057540a5c888f8323","observation_id":"cc184c0e-2ad2-43d0-bde6-2e5ec1866066","resolution":{"observed_at":"2026-08-03T10:45:16.759066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.981213Z","title":"In: 2025 IEEE Symposium on Security and Privacy (SP)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.981213Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:d27bfb0a4e4e112d825595696a7ff2647cc87b2d3841cefe206f24ec1f0c716b","observation_id":"a7b20850-bce2-4faa-bcba-f59675a3a9be","resolution":{"observed_at":"2026-08-03T10:45:16.981213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.147032Z","title":"International Journal of Human-Computer Studies125, 19–31 (2019)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.147032Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:10a950ff09aec5fe3ddb9d78d5e10bc9dcbf3b214ece1bcf3b590c3cc3393b7b","observation_id":"6ce0185b-63fe-4ab0-9523-f66284bf8351","resolution":{"observed_at":"2026-08-03T10:45:17.147032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.356157Z","title":"In: Proceedings of the 16th ACM workshop on artificial intelligence and security","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.356157Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:fc1abe190453c6c6e88577ea8daa728fbbd37a19341c4da1e2bcfdf9db48a70c","observation_id":"62d9e10d-e54b-47f5-a2cd-8d29de7c77ee","resolution":{"observed_at":"2026-08-03T10:45:17.356157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08567","last_updated":"2024-06-03T14:15:03Z","snapshot_observed_at":"2026-07-06T17:29:34.813390Z","submitted_at":"2024-02-13T16:06:17Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08567","snapshot_observed_at":"2026-08-03T10:45:17.529100Z","title":"arXiv preprint arXiv:2402.08567 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.529100Z"},"links":{"cited_paper":"/paper/2402.08567","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:6bbd61f207f99bc4f224425d7d5477dc9b144d6b884d99d426da4f013428c747","observation_id":"3f916113-a364-42c3-acfc-359bd3e7e16d","resolution":{"observed_at":"2026-08-03T10:45:17.529100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01680","last_updated":"2024-04-19T01:15:16Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-21T23:36:14Z","title":"Large Language Model based Multi-Agents: A Survey of Progress and Challenges","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01680","snapshot_observed_at":"2026-08-03T10:45:17.794251Z","title":"arXiv preprint arXiv:2402.01680 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.794251Z"},"links":{"cited_paper":"/paper/2402.01680","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:e49fe2daf601cc5c9bc583fed722531e8cda3ef18da53c9147ac0126968be58f","observation_id":"8f4a2ed6-0dcf-41d9-9ffd-5b9939ece92d","resolution":{"observed_at":"2026-08-03T10:45:17.794251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.903004Z","title":"In: 33rd USENIX Security Symposium (USENIX Security 24)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.903004Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:c308e7e3ff5152c53926904d57412615af95ad0ccdf54f1d618eafa0077cb5bf","observation_id":"098376b3-d861-4325-b755-dd84821aa5df","resolution":{"observed_at":"2026-08-03T10:45:17.903004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.956036Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.956036Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:83f2e8b599396f8bf38d70d70b6a3b54d3de67f62c08a18d30a0593af09f3527","observation_id":"a6761f49-a15c-48c6-a9b5-fa50afade2dc","resolution":{"observed_at":"2026-08-03T10:45:17.956036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.009539Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.009539Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:766eb7bf1e61035ec070b88f4e257134a1d241e6d79a968fc244492daf105d39","observation_id":"6639fb5e-9397-4c43-9cbe-61c203c042ab","resolution":{"observed_at":"2026-08-03T10:45:18.009539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.080741Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.080741Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:30f2841148b4e3fdc5eb6de13fd170798c6f4487a7aa6be72a0edd94d8345c88","observation_id":"4b0cef02-5cca-4e62-91f4-373d8fbbdd1f","resolution":{"observed_at":"2026-08-03T10:45:18.080741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-07-06T20:35:30.739339Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08586","snapshot_observed_at":"2026-08-03T10:45:18.132433Z","title":"arXiv preprint arXiv:2502.08586 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.132433Z"},"links":{"cited_paper":"/paper/2502.08586","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:0256269fa26b93893cb145e409379f9b7c618e7dc9a85e7fe4d615522c97f8b8","observation_id":"98b32e61-f9b1-48ef-955d-d23a9baee00c","resolution":{"observed_at":"2026-08-03T10:45:18.132433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-07-31T00:57:10.165518Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-03T10:45:18.184723Z","title":"arXiv preprint arXiv:2409.11295 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.184723Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:13a9d83f96ab32dd0a6667089b1373950b97ee0ed36f46df2dcff3aa0f6e8192","observation_id":"6c061f65-f33d-4717-992c-7a16f85f5a6a","resolution":{"observed_at":"2026-08-03T10:45:18.184723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.264083Z","title":"preferences","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.264083Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:cf384cb35670cfa771e75526e3a87381c8556e5d2dc3b5905cc26f9e5803718e","observation_id":"058bcab8-04cb-4988-b4dd-dcaf3433752d","resolution":{"observed_at":"2026-08-03T10:45:18.264083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.320221Z","title":"In: Proceedings of the Extended Abstracts of the CHI Conference on Human Factors in Computing Systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.320221Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:a6bacfea26463a1792cdeceee77369f515c2dc5805cd03c41f001b8ce391ea7d","observation_id":"46489787-664c-4291-8fdb-c4afd4efd556","resolution":{"observed_at":"2026-08-03T10:45:18.320221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.08172","last_updated":"2024-02-21T17:42:32Z","snapshot_observed_at":"2026-07-06T16:18:49.258642Z","submitted_at":"2023-09-15T05:44:08Z","title":"LASER: LLM Agent with State-Space Exploration for Web Navigation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.08172","snapshot_observed_at":"2026-08-03T10:45:18.400841Z","title":"arXiv preprint arXiv:2309.08172 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.400841Z"},"links":{"cited_paper":"/paper/2309.08172","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:8dc84b09a6fd962b457c37b84513afba8d33eb6e7701d260d85b33566b8d027d","observation_id":"7dc61b19-8dca-453a-862e-d1edeeb5e11c","resolution":{"observed_at":"2026-08-03T10:45:18.400841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.511551Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.511551Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:664cdd3413e7b9c3b0fb96a9223885e047a177b84bcf359bb0bb3fe487dd146b","observation_id":"e9a8b1f2-b393-4d16-b0f8-34ebea8da355","resolution":{"observed_at":"2026-08-03T10:45:18.511551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.587713Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.587713Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:54a67290dc09df8eebe8963dc052323b76c190445b7622c10ae82ec30412d9d7","observation_id":"361e6f4e-b69f-43c8-97c5-4fe7c2bf7f9e","resolution":{"observed_at":"2026-08-03T10:45:18.587713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.670577Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.670577Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:338b374cdfe43b2f88754025b8329e0cbaa08f68523f8141608de545a41bdbe0","observation_id":"d3da10df-f534-48ab-a0ad-50638d088d1a","resolution":{"observed_at":"2026-08-03T10:45:18.670577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.726697Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.726697Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:68544674a7957db0b4514c7e1f2c8cd43b3e22a3bb6286c202fa3778dfa1d6e5","observation_id":"597deca6-de6f-47f0-830b-c83d15f3a3d3","resolution":{"observed_at":"2026-08-03T10:45:18.726697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19793","snapshot_observed_at":"2026-08-03T10:45:18.810302Z","title":"arXiv preprint arXiv:2504.19793 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.810302Z"},"links":{"cited_paper":"/paper/2504.19793","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:149d1556ec572c7f284e127086553e1f74ad52913c487735326377886381d78a","observation_id":"2f75cb55-b457-4355-98b0-7f1fa8ccec48","resolution":{"observed_at":"2026-08-03T10:45:18.810302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.863024Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.863024Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:2db0a7837fb706de99bd0df38ae8133da5bc3fa519a8c9d18edf3f6194393af2","observation_id":"0472dc87-c557-4a6e-9bd9-00eb3079e021","resolution":{"observed_at":"2026-08-03T10:45:18.863024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.916271Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.916271Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:7e6458f58f5de8d8eb3d2a3f790ab3cc72b21b019932aeb52275412676ff4bf8","observation_id":"4f96b43a-9645-4d10-a587-a55a8a268b3b","resolution":{"observed_at":"2026-08-03T10:45:18.916271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.042225Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.042225Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:2576589a50d7ca0b8f248b11165835ceadf027ccdf567c88c0323b524f3fc704","observation_id":"d814c3da-89c8-4c9b-9f9f-e3d0789e16b1","resolution":{"observed_at":"2026-08-03T10:45:19.042225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.160989Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.160989Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:73ad0c043497fc76b55dd457fbb71723b080b9949aaeafac11f3edb8d2aefbff","observation_id":"e811ab58-647b-4606-a2f9-ae50bb07fdb3","resolution":{"observed_at":"2026-08-03T10:45:19.160989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-03T10:45:19.283817Z","title":"arXiv preprint arXiv:2404.13208 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.283817Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:192080bd4ff56ef1b4c8c6f1a458cb4c1a3dcbf3123290bf9e6ff5f26c27d9c1","observation_id":"8401c4a0-3dfa-42a8-a3f8-cf7fb49d5618","resolution":{"observed_at":"2026-08-03T10:45:19.283817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.434987Z","title":"arXiv e-prints pp","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.434987Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:22d5e88b2811afa0005ae9df0fe449cdd38bca7097b18e7b9c1e42c2a43580aa","observation_id":"cd74da55-4d1c-4d56-b1a3-9cbab589d6fb","resolution":{"observed_at":"2026-08-03T10:45:19.434987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.491402Z","title":"arXiv preprint arXiv:2510.19207 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.491402Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:24434593b7fb1a4c852cb9ca0705ac958ea38f9b730bb5d1fefee5a8c078d1c6","observation_id":"8c7bc88a-7877-42e1-aa37-ab93341389eb","resolution":{"observed_at":"2026-08-03T10:45:19.491402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.562067Z","title":"In: NDSS (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.562067Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:8b36d0545f4a912638a32f440e16eaac0279e58ecbc7170d5152702280f475e9","observation_id":"57c7835c-cd00-4931-b37f-e1bede23007f","resolution":{"observed_at":"2026-08-03T10:45:19.562067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-03T10:45:19.642964Z","title":"arXiv preprint arXiv:2410.17401 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.642964Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:2bc77cce472f76d1c77c141935683357242129d1912c5f77f9e30e3898241049","observation_id":"b149cb52-69c8-4166-9817-38d256c2f88f","resolution":{"observed_at":"2026-08-03T10:45:19.642964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-07-06T18:23:31.520359Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-03T10:45:19.715096Z","title":"arXiv preprint arXiv:2406.00083 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.715096Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:0e79adac784790052b0dc1bc66fe4946dbf27539b608eda1aad42b9336ce672a","observation_id":"bc236d1a-094c-4300-ab84-70e0ffb8542c","resolution":{"observed_at":"2026-08-03T10:45:19.715096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.729446Z","title":"In: Companion Proceed- ings of the 32nd ACM International Conference on the Foundations of Software Engineering","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.729446Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:a383284c019f335d7151050c2c09a4de4c4fb1098d627ea58183ec1fc9de20f9","observation_id":"3e346707-b1c3-48ab-809d-c875c1760100","resolution":{"observed_at":"2026-08-03T10:45:19.729446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.808251Z","title":"In: Proceedings of the 2025 Conference of the Nations of the Americas Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.808251Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:8b35f174704742d66e4a9546e3a1c309105f0b097415fa66d288343c9212abbc","observation_id":"b4b7f5e4-10c7-4788-bf5b-7202886e1e6b","resolution":{"observed_at":"2026-08-03T10:45:19.808251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.950155Z","title":"IEEE Transactions on Dependable and Secure Computing21(6), 5242–5258 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.950155Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:28bdc6553b10a80ab8ed33cdd9e3752cab6d17b6610cb56fdec261aab6228079","observation_id":"06375c20-1ee5-4c50-981b-d6730bdeb901","resolution":{"observed_at":"2026-08-03T10:45:19.950155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:20.111398Z","title":"In: 34th USENIX Security Symposium (USENIX Security 25)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:20.111398Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:8daaa3afa5079b4bc9ebd2dd7f7344be68bc108090ca1b23fb872d7fa55ca142","observation_id":"d6a0271f-1b66-4b1f-afef-b937aaeeb5af","resolution":{"observed_at":"2026-08-03T10:45:20.111398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-03T10:45:15.140516Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":40,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 2 inbound Pith citation observations for arXiv:2601.10758."}