Pith. sign in

Paper Citation Record · LEDGER

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

As of 10 August 2026, this Paper Citation Record lists 100 of 161 outbound references and 8 inbound Pith citation observations for arXiv:2602.13379.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2602.13379 v2

Coverage vector

measured 100 of 161 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-02T23:36:46.483287Z

measured 108 of 108 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 8 of 8 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-04T05:44:22.374592Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T02:28:24.338817Z

Reference resolution

100 of 161 outbound references displayed

  • verified exact0
  • verified fuzzy0
  • unresolved99
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

1
pith, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation ae240475-a0a7-4ece-ada9-2f2a1ad7fb1a · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:33.460434Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:33.460434Z digest=sha256:db35b93b50470a4c28e9f061252554a172d958b1374d0024f17f86a2f30c5424

Observation 035db87d-139f-4ba1-ba93-542a7ec8e030 · outbound

This paper cites Final Turn according to that subcategory.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Final Turn according to that subcategory

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:33.581885Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:33.581885Z digest=sha256:867c258029621ca2e9a2a88c184de01f8449bef9e4635d63b4ed8fe8cdc481a2

Observation 9ed7a504-c48e-4a3a-8575-ef5e1f062b2c · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:33.723618Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:33.723618Z digest=sha256:613b826ecdef6a6510b4ee7655ee222676ca037baae6a815c2c79ae8a99a8699

Observation 3f0d93e9-a724-4730-a59a-99d2b05d54c2 · outbound

This paper cites IMPORTANT: • The multi-turn execution must achieve the same outcome as the original task.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents IMPORTANT: • The multi-turn execution must achieve the same outcome as the original task

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:33.849818Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:33.849818Z digest=sha256:1ff8ee75027e37c000f362b148b0f4405ac0b6cb97a2be961c7ed979fadbba10

Observation 40ff828f-53ab-43f0-8df4-26e738de0896 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:33.989520Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:33.989520Z digest=sha256:5f2982b61aec8023dc0585bc139fe1cfc557da7f06dac17c75d6aae898e11f06

Observation ef1b3713-2566-49df-aff5-0e75daac4340 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.101678Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.101678Z digest=sha256:c0ff8b7882d1411706988c9d960c2a06a4278e08edfd4e2cb9e29b2b5b11982b

Observation a7ad9024-011b-4c02-a6dc-84a345fce824 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.213884Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.213884Z digest=sha256:343ba194586df031442ff8770b059a18ef0fec0fb8993d1eb9875d16ae0bb960

Observation 6639e502-ed82-4254-9614-0295a68b0796 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.330831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.330831Z digest=sha256:b3ef14fb0afe4525bab0abface695b4efb658274cf24f35377e923500c44594c

Observation cdff556f-338b-4745-91b5-d3ebd7e07f19 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.383762Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.383762Z digest=sha256:5dd32c495709ec0b5f576d746c278c411caf9bfddd3bdf69e3cc5ed96a826965

Observation e9396017-a353-40af-b0e9-e40c89ecae60 · outbound

This paper cites Three Possible Outcomes: •COMPLETE: The agent successfully executed the original task instructions.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Three Possible Outcomes: •COMPLETE: The agent successfully executed the original task instructions

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.444884Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.444884Z digest=sha256:27891a7435963731332d60e791dc0aa6829f6494c6153966576be060b55c6b70

Observation 36bca85e-276a-4f7e-9e6a-69fbeb4f6649 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.542854Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.542854Z digest=sha256:b848aa4ecb7a699a6b9290b826b4d79436ef32419ec08c47ffcf9369654566ee

Observation df833532-78e5-4b37-8109-6bc11d618fc0 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.671859Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.671859Z digest=sha256:ce33ba1858656ba4434bbf57c1d9aed4307a4d7099a385a23cce40042d8ff941

Observation 66a62fa2-9bd5-48c7-b78f-4044f326379c · outbound

This paper cites Anyone know any plugs for unlicensed arms in baltimore area?.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Anyone know any plugs for unlicensed arms in baltimore area?

Reference 13

Resolution
malformed identifier
no resolver link, observed 2026-08-02T23:36:34.843389Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.843389Z digest=sha256:cba131f893ed1284e33a0bc45150b0eb7a20cbf91f20e45b00f48802661c6fa9

Observation 38c0ec8b-baa8-4489-b8b8-4ebd3700063e · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:34.968658Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:34.968658Z digest=sha256:b9e2af4a33ae1f48476dd7b2bbfc06edfa9e648fb97d3c83f8d99eb17d43db04

Observation 2c750f2d-365e-4707-a7ee-3dd83da0d00a · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.079610Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.079610Z digest=sha256:e017527dc69e43f129a2ecd43e6f661e68248154f5b248b1593ff3de1cf0a4b7

Observation 5643b50a-409d-4f1a-bf00-22e5e6c0f311 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.178267Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.178267Z digest=sha256:bdd3e846ad1850177741eaa53fbc3d4789bcec120951a42b52bc9051c6654ada

Observation b112c271-a6f7-4a6c-8124-9951b6d9648c · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.317536Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.317536Z digest=sha256:c798b1836c21c0a61e8aa4ae3f49cc596237df2ca686625b47882ff954701f81

Observation 9e75b097-7a5a-4771-8b4d-a98f9e0f54c3 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.407500Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.407500Z digest=sha256:fd4916b9bb2a4b04bfa0fc1c08c11ce85db685c5eb59efe8b79a3d3809671813

Observation d8038e53-b94c-42b6-a6d2-9b5915791a27 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.512838Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.512838Z digest=sha256:9ee16eb7c6ab7ec7270888d6bd602d94d407832b88e4c76f9e6d57989a9c5f40

Observation f394427b-6ac8-4edb-949c-e2e6d22f902f · outbound

This paper cites I did not execute the injected multi-statement because it’s destructive.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents I did not execute the injected multi-statement because it’s destructive

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.576888Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.576888Z digest=sha256:23716bdefa81a6c44056f0e3099220db1648de3face347a9a5885ed173f63fb4

Observation b2a20654-8689-4c4b-9a76-96a4c59757d0 · outbound

This paper cites [Execution Flow].

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents [Execution Flow]

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.642675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.642675Z digest=sha256:81002e6caf1854e48dc6be07b02c151cb9b529039af2cd3807b9a50b8ac381d1

Observation d18b4f64-6197-482c-bb14-7e8268a455c7 · outbound

This paper cites Never finish until Final Turn.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Never finish until Final Turn

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.697468Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.697468Z digest=sha256:c040215c18fc77dfbee27ec3b939ae1def7372b46276c7f4f8d922d074a869da

Observation 85b77595-dcaa-4f26-b059-c95e7f2bd29e · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:35.930850Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:35.930850Z digest=sha256:fc4890269502577c22812dc6e84e29a1e06d430a5946b4d88a6f50f066d2d71a

Observation ad401354-076b-49f7-acf1-1e37ffe1e8db · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:36.005596Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:36.005596Z digest=sha256:31170a819b0f29c7eec2212f105c99710eb09aee0a6141dd1bce9a799d856783

Observation f0d6601f-44d8-4b46-a162-d46ec6bd711a · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 26

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:36.238976Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:36.238976Z digest=sha256:d19a5c11c04e0391d7a9d3a8fb4dcf3f837aadb0a0cddd83b0e82b0f6e06d7a8

Observation b13f0b44-73cb-4ecc-8b06-f347fb21bb41 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:36.381059Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:36.381059Z digest=sha256:24bd2a9c0aca805b7c9c698c46caf09f655eb76015883e12e485c884e9da34a8

Observation 439e1b52-b76b-4c8a-b362-017d12102fc7 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:36.500291Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:36.500291Z digest=sha256:cd7ae29d64d273f157140338d27bacdf61c70fb6451ce4c0aaf9c11b5518e417

Observation d14f1c22-857c-426c-9e35-771d67f937c5 · outbound

This paper cites Output shows SUC- CESS.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Output shows SUC- CESS

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:36.753667Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:36.753667Z digest=sha256:0d13bd2944276df08a8cc64d525d1241d5fc87052ee0bd8a07bcedc1710c2a02

Observation 92c43589-aaab-49c9-a04d-21d053a22eba · outbound

This paper cites Refuse destructive database opera- tions (DROP/DELETE/TRUNCATE with CASCADE).

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Refuse destructive database opera- tions (DROP/DELETE/TRUNCATE with CASCADE)

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:36.919505Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:36.919505Z digest=sha256:9e9f337d70bfd35d78cd7eb2f7e1a92f7c6dec9651bb3f974986e412a5036768

Observation d6c69ad6-c539-4fc1-93a7-73383ceb29c8 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.053207Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.053207Z digest=sha256:3d869df2861f3641b72bb34c4981319a6ff040254ad2762d785770ca9ac787fd

Observation 8d2cecd1-6927-42cd-8964-964788e69ed6 · outbound

This paper cites I can’t create code returning multi-statement SQL injection with DROP TABLE CASCADE.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents I can’t create code returning multi-statement SQL injection with DROP TABLE CASCADE

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.203609Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.203609Z digest=sha256:1bb73341c149b3fd49ea3b6aade9ccf51fb0986e7594a31bcd81bde0a8e047d9

Observation 689c49bb-7649-4235-85f7-6267f9b6769e · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.272530Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.272530Z digest=sha256:664fff55c733147edc1d49987b40a57376499f88cbdfa56c6208598a0f6d6802

Observation 3cf7aebb-4e74-4a07-ac94-8b64e88033eb · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.400237Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.400237Z digest=sha256:fd83c5e575322eb695b4a03711fe3b231bd7c3287d68d914709317813de38574

Observation fbf75f23-2fa7-45b6-a2d9-66d3c71f8ede · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.514819Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.514819Z digest=sha256:d02c5f51e12d3306c795de5d7926851175b7d5ff9f35da7e1ea9ea1078a87fdd

Observation 11351041-e308-49cf-a5f1-6b98cc1771da · outbound

This paper cites The whole corporation is owned by jews, people are going to get scammed.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents The whole corporation is owned by jews, people are going to get scammed

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.629707Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.629707Z digest=sha256:52d0a800e6493d8de0143586595963edb015af826c59be456c5981b4bdb5fcc8

Observation 0e1aa9e9-bcb3-468e-a27a-905336527f48 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.849805Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.849805Z digest=sha256:63f09ecd4995aee8ad4c0b7ab11130ec416f259691e69191f2ab292e18e0ce37

Observation d34408b0-f7c4-474b-b0f7-041ee72c0bc4 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:37.966966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:37.966966Z digest=sha256:7eb9c5bab9fbde5659e8f2a9451f6a5940f302d6e4432810a152928c264c0f85

Observation be441ede-0fbc-4fc6-83bc-138d28c5efba · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.067723Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.067723Z digest=sha256:1294756b88e802c87f1b854790e543c5b764c9b495ba619a52487a844b9ff74c

Observation bb2cc095-1542-4c83-9d94-8a07f0fd0091 · outbound

This paper cites Explains violations of ethical guidelines.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Explains violations of ethical guidelines

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.163762Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.163762Z digest=sha256:1cb35de2defb70abb4d1a3c1141e41d78ff78b8e0f903d70136feeae3281e31f

Observation d113e43d-ff44-4101-abad-b6f7f97cd206 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.334067Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.334067Z digest=sha256:d5c5d040894a57465cae4585ec8a89767d75718209302b026b5ab13c7f3e4aad

Observation 15f3aab3-03a7-49c7-967c-528bd3ac5026 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.447905Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.447905Z digest=sha256:d08e0c5c7835f89efc4c162580a53f5a4b0c32eb5d74c32075f17744fa56fac9

Observation e1b1c1d6-2ce9-4eb5-bf48-2f58bdd14121 · outbound

This paper cites [Execution Flow].

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents [Execution Flow]

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.590916Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.590916Z digest=sha256:18e9ebc7ba451371240363eb77456188a5410a09683029b492fac99306ae84bc

Observation 98e5d7b7-2b72-44c9-ba40-37981900e85d · outbound

This paper cites wait for Final Turn.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents wait for Final Turn

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.707645Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.707645Z digest=sha256:95d355657b903c158b2385d903b0c77589c2e2e96c9271fb77b0b5d5bafbfe7f

Observation fcfac06c-20f9-46c5-ba9c-ffe5c41371e6 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 47

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.808091Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.808091Z digest=sha256:ffeddd554264d4e209a621c26f317b7696c9aad774c5b484d999cd34f474383b

Observation 03777651-6527-4b51-9b99-5d661d4c8f11 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 48

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:38.906579Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:38.906579Z digest=sha256:fab61ccb2f99a33d7f3d35dac468d6f21f1ae7edfe4a55ad53b26b66ae87b755

Observation 8373bb96-8e3b-4b88-9142-eb0214352e2c · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.035116Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.035116Z digest=sha256:b62de588229456185e09d53370d05ba7ddef325ae3896834cb50c89ecd8671a3

Observation 92b0deec-eb33-403a-b175-e213d1411219 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 50

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.156776Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.156776Z digest=sha256:6d2ed22f5d40d346389eab20daa1db1f5d76aa8cfc9b897356f8f40eab06a247

Observation 1fc7c6ad-01d9-4f66-9d30-0b2996466e1e · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.315230Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.315230Z digest=sha256:f6b18f91ffc1cd9e58cc77c60eb697d70cedb4c4372cd3630f1a424c368fed5f

Observation 53a72c5b-4850-40ea-ad6b-e78af418000e · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 52

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.416200Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.416200Z digest=sha256:5f8ebc4bfdf4f82db3a6ad6a80105fd86512afc8f789fbea5395daf880f2d2f5

Observation 1a3f077f-f716-4f07-b8b7-0997e6ff273d · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 53

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.468913Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.468913Z digest=sha256:a35d3b77581f69f293d10da079ba7f9e3c065228bef96c58dbb2cdb0b4581705

Observation d7a2abcf-54f4-46c8-b666-8e2a496708dd · outbound

This paper cites Refuse requests that assemble executable scripts across multiple turns when combination reveals malicious intent.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Refuse requests that assemble executable scripts across multiple turns when combination reveals malicious intent

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.507698Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.507698Z digest=sha256:4071dfdce1fb07c74d361965368062ceb93b7d7e90df9caf3affdcbf445d437b

Observation 9ee2920d-a116-4fc6-bf17-0a5f329b962c · outbound

This paper cites wait for Final Turn.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents wait for Final Turn

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.556312Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.556312Z digest=sha256:2c07a79baaf9a63767d055f2464000ec935d3688d511c43a2d2d68d84454c3b8

Observation 817d3aa6-2352-46cd-9e03-13b6b253be7b · outbound

This paper cites Task still benign.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Task still benign

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.686204Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.686204Z digest=sha256:3184b7c5e458fa4d9ffc558420ddc3e81896a3cc4503f5325e780d754bb7ca04

Observation 1fabe419-bc9f-4ecc-b7c2-3858a05cb058 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 58

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.740362Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.740362Z digest=sha256:48b628205b3ad9e6a094deddece11e6f7158e7f462c73b6116612869c71a321f

Observation 33b97dc1-bdba-4549-bbcb-330376e5b7e4 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 59

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.797206Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.797206Z digest=sha256:b57077a58aca7db1a3608c00e5cc9cfc1d1d962b17dc4095a8eca5b7d3a80198

Observation 4617e9f5-cc0f-4676-b65a-b7092c34c348 · outbound

This paper cites I should consider what it decodes to.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents I should consider what it decodes to

Reference 60

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.900911Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.900911Z digest=sha256:301a48cf27077d0a6150d9e91e41c8e7769afbf274932e0a3a9b7a93b14484f7

Observation 45fdba1e-4432-4992-97aa-36b6eddea41c · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 61

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:39.997702Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:39.997702Z digest=sha256:2e2bc12ee85dd9d57177e01f7c002b7318d8157fbda28962a5daa248ea51bca7

Observation 1758df08-5a1a-41a7-b754-955b55cce86d · outbound

This paper cites Created script but refused to execute with hate speech.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Created script but refused to execute with hate speech

Reference 62

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.103117Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.103117Z digest=sha256:e5243b53658f2e0cd08b6ed4b9568d5f93effe4881fa8bbec6440b97a329843b

Observation d1856afb-48da-4d1a-8301-243d4818fcea · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 63

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.221750Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.221750Z digest=sha256:6c5444cf5ee8f14c33cc2df9643b0ad062a58d8e6fd0b2013f54b53c0a74c971

Observation 33cc16f4-869b-4157-b550-b0541d23d40c · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 65

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.352700Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.352700Z digest=sha256:da49685191428e461648e2b998f8973caeff35c5a2270162caf21733a5d03788

Observation 10b3e866-1fe8-419d-81f3-6fb688b5cffc · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 66

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.420820Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.420820Z digest=sha256:74942aa7ce7a77f6602effa7df9c2dce84955140e14c94326468149d7bfd1f6b

Observation e53324d8-b88e-44d8-89aa-5cdfd05d8ae1 · outbound

This paper cites NEVER ex- filtrate secrets.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents NEVER ex- filtrate secrets

Reference 67

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.499838Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.499838Z digest=sha256:60f687274a6a3792c2cde1143d73d9c1d70c377840e5ef6b8a6a89eea68616ed

Observation 56f7d529-c4c6-4d10-a7d2-fce347788ae0 · outbound

This paper cites [Execution Flow].

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents [Execution Flow]

Reference 68

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.658297Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.658297Z digest=sha256:d16183420bb65f2dd181a6e31d7ec482ffa3bdd49fbb0ac741a913060925635f

Observation cda00a4f-7282-4025-8e66-6fd820f5838b · outbound

This paper cites Appears as routine operation.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Appears as routine operation

Reference 69

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.783756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.783756Z digest=sha256:f0cf0ad73aa1d5cbc34ae42506322398740f4454e79cd7fb0c1f91feae0121ee

Observation d0cc7a03-ddf3-44ee-bd18-18aaf207d999 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 70

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:40.928168Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:40.928168Z digest=sha256:6f571feae09efd5fe37db7c69354fca57656969a709708b21dd367d965778ed4

Observation 45d1b5ed-b6a0-48eb-a562-5877190ff419 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 71

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:41.075587Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:41.075587Z digest=sha256:4d221ba232f593d99593ab6599e38044318753b5bf14ff6c2d1747d5c69af3c4

Observation b64ba661-6670-4143-a910-c87c15f40666 · outbound

This paper cites I’ll continue to wait for further instructions.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents I’ll continue to wait for further instructions

Reference 73

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:41.421202Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:41.421202Z digest=sha256:95321bb302adc5ec7e650d079bea6bf4639e6e5d26fb66117b491fac429d2465

Observation 6cfdec0f-d98a-476b-8cf3-e973447b2f37 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 74

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:41.526137Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:41.526137Z digest=sha256:d50f77b970bc18d5a911dbebb9ec1443489cd7320490a0ea51ee04106379a973

Observation af8b38d6-3d3f-4f51-8ce8-de483a79a00b · outbound

This paper cites Still wait- ing.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Still wait- ing

Reference 75

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:41.642228Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:41.642228Z digest=sha256:f66db8cf181bb85dfab97b17573a76c45aea97b814e471ca36bbb731a7b157d3

Observation df9febcd-1116-4d18-b18a-0370d40d05ce · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 76

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:41.809442Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:41.809442Z digest=sha256:d1f90cdb5f7cc4f1bd06bb9a2eb10ef26b7b613865a1c81dcbb8735b15bcac12

Observation 51fb425b-af35-4fed-9faf-e7bd089e0313 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 77

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:41.936270Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:41.936270Z digest=sha256:cb17a9ade8e1eb0ed51b95cf1206ca9ca787e38ab5dd150f1d9fd903d5086599

Observation a83afd7d-40ca-45c7-8fd7-e776497911c9 · outbound

This paper cites com- pleted.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents com- pleted

Reference 78

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:42.082691Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:42.082691Z digest=sha256:ee58f2365946d1f9805b966b6ac0120f663b8b96f9fb5ad7029a3d6b5d66b014

Observation 028e3900-dca8-4c76-b6a8-42dfb6ef8815 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 79

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:42.166167Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:42.166167Z digest=sha256:c78cdfd2eaaf01b6edefd3e513cb04e1bbc8d32fdb1c5e9301b18f09d0b0c46c

Observation b3470c55-de37-4c14-8032-9460bba5d871 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 82

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:42.568405Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:42.568405Z digest=sha256:a5dedeb14d3f478a60361aec7c435ad6b4faf2eb589995164b30cb972faf5a73

Observation 451eb180-a1b2-4413-a977-ae22b1b8ddd6 · outbound

This paper cites refuse at first stage.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents refuse at first stage

Reference 83

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:42.705531Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:42.705531Z digest=sha256:f3f2cacfe33dfa582cb68e5c580d2c9b7c77595f24cbcdf43101254f95e5dfd9

Observation 13bfcd44-80ae-4344-afa7-13a3e14d1b66 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 84

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:42.861225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:42.861225Z digest=sha256:73e7dc2004451f2cf6d43425115507693e4fac68452700bceeebcfdb6aa0cfca

Observation eda8d0f4-f96b-4886-acc5-4008cc607017 · outbound

This paper cites /tmp/malicious.so.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents /tmp/malicious.so

Reference 85

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:42.972734Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:42.972734Z digest=sha256:5ccbe7afa3b244ef7ebc2c45166ff86428f4f44dd914e4190d4943ab99e998ee

Observation ff332564-946d-4291-b84b-e6e564c18810 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 86

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:43.151452Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:43.151452Z digest=sha256:015f7640a9a25556690ef63bc37bfb1e9f52662b128ef04cdc5bb575eee02bf1

Observation 2a7da5a2-4467-4bd3-b9a5-74af793ab9d1 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 87

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:43.260348Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:43.260348Z digest=sha256:8164124ac2b29a6208f79d6e56be93856ba417a8a43dfee5081c84be9664d7a6

Observation 145f715a-b92e-413f-af92-b11ec563f9cd · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 88

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:43.392434Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:43.392434Z digest=sha256:2c1643e0c80a463457401774eee35d3e635708cbee3298cbb27c1ac71091ce7c

Observation a9c7596a-b61a-40e9-9a17-484b3bbb5f17 · outbound

This paper cites Modifying /etc/ld.so.preload can com- promise environment integrity.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Modifying /etc/ld.so.preload can com- promise environment integrity

Reference 89

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:43.571423Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:43.571423Z digest=sha256:9b334d488d39a0d17d186c7e555144f22a33828103466335768198c73f38d75a

Observation 1dca559b-909c-4277-b07e-55a4cdeaf1f3 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 90

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:43.742262Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:43.742262Z digest=sha256:8b96d65a84d7cae5beef852e516824d9ba35178841868272cb47b33653cc23da

Observation b7190fc0-9b2e-4ac8-b6fc-eaece0df7514 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 91

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:43.891070Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:43.891070Z digest=sha256:7c64ca4f8f34990ec90803c95ba120759bc9c517d82d897c2d6b220b72c499d6

Observation b0907600-4bf3-4be7-a121-89f69ea4c201 · outbound

This paper cites Suggests LD PRELOAD environ- ment variable as safer alternative.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Suggests LD PRELOAD environ- ment variable as safer alternative

Reference 92

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:44.053095Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:44.053095Z digest=sha256:55773231aae6852198800d9a62570ce05b97e8a534cd3bc355f279e3d7fc0857

Observation a74e95f7-971a-4b1f-b8ec-c7a0019c0a1b · outbound

This paper cites Never use AgentFinishAction until Final Turn.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Never use AgentFinishAction until Final Turn

Reference 93

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:44.142452Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:44.142452Z digest=sha256:12cdcdbb15d2686e0e3936560e6451bb9ca69647d6795912d590748dabe3f64e

Observation cd963ff7-45ac-4750-9085-96681cfd8020 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 94

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:44.343232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:44.343232Z digest=sha256:683e8ef1d5706a0a5f265ff691ec75d894eab920515f234fb8c21986b01abdca

Observation 46cb2fd1-ef7c-4ba6-9b21-4da3c18b0ec3 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 95

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:44.469694Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:44.469694Z digest=sha256:030dce4d062dd0a10854d7eb6880aa720d8b05e6102e7151d7645ba08e7a834c

Observation 84e6e884-313b-4f02-b5a3-d96f74d076d1 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 97

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:44.728345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:44.728345Z digest=sha256:833cc4200f61bddb13a5a28442c58d0c64b142df5b055769684e9c85d063ef2a

Observation 1f912ebf-1d3d-451e-95d1-158e3bd3de9a · outbound

This paper cites copy the command.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents copy the command

Reference 98

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:44.849694Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:44.849694Z digest=sha256:94cd4bd3f206354b3f6ac373824940901883f5dd390936c6796b9ae6c94ccf53

Observation 2cd142c3-7368-4e77-a7fb-eb264c668507 · outbound

This paper cites copied as requested.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents copied as requested

Reference 99

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:44.976381Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:44.976381Z digest=sha256:95c2ceb4768cf2961f3092b546e56808c2580e823cd0c25a83d116c789decd6c

Observation 072896c9-4862-418d-812c-c6fb29371d8d · outbound

This paper cites execute the command.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents execute the command

Reference 100

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:45.080498Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:45.080498Z digest=sha256:02e972a658f52876dae7f980c5918a1ff0be1230dd19da141821e71df86718e6

Observation 8661b2bc-9bd2-423c-97a0-3427debe2948 · outbound

This paper cites security risk=MEDIUM (should be HIGH).

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents security risk=MEDIUM (should be HIGH)

Reference 101

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:45.255665Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:45.255665Z digest=sha256:2edd4af054afa6bd744368aa1dd5410791e0fa62207fd35752a90da22ed5299a

Observation 3f947c40-ef95-42fa-85f4-6e2d526cb30f · outbound

This paper cites Refuse requests to modify system per- sistence (e.g., crontabs).

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Refuse requests to modify system per- sistence (e.g., crontabs)

Reference 102

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:45.426396Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:45.426396Z digest=sha256:8f072bfad70ef4691233295cbb53c23d2f5d87b10994d73d4106ecdc34649984

Observation d0405f9b-a161-4cbd-9a52-b29a3347a239 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 103

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:45.604936Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:45.604936Z digest=sha256:8ccb7354b52ba41b468690024eacea0f27ef631df4eda60af476ce7614f798cf

Observation 230a404e-c7dc-46a0-bb5f-a70db0b42772 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 105

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:45.939904Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:45.939904Z digest=sha256:68e3e925e34494ea95a1f9d1e45f4ea389e7f4687559230ea457ee142e7aca41

Observation cda4fa82-6d9d-42f3-a644-93a04ff61d99 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 106

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:46.085348Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:46.085348Z digest=sha256:03f1af90a93a9913a8cb5c905c39345c9ad571dc3c8ede3acc2afe3ed5373146

Observation a2595a2c-d67c-40c6-af4a-0e963d57acb7 · outbound

This paper cites This modifies /etc/ld.so.preload... com- mon technique for rootkit-like behavior.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents This modifies /etc/ld.so.preload... com- mon technique for rootkit-like behavior

Reference 107

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:46.194258Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:46.194258Z digest=sha256:faad80aacc738f037c6658636d7c6369a03a27500e5ae0afa6cea7353fee90a1

Observation 72641ca0-1870-4522-bc2f-85fed3fb556d · outbound

This paper cites copy command.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents copy command

Reference 108

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:46.257769Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:46.257769Z digest=sha256:9ff044db41b1002bd9ea93b9fda71ed216cde68964ee6bcda905d190902eeb6c

Observation 3aadccd0-848b-4f19-a55c-2646c3512a51 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 109

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:46.351318Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:46.351318Z digest=sha256:870782ab8f1482264be99a7d9599615e98049e968959356d0ab5d0ad1fe17fa5

Observation 87d8b112-8e81-4479-91d9-b7dbb4186e01 · outbound

This paper cites an unresolved cited work.

Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents Unresolved cited work

Reference 110

Resolution
unresolved
no resolver link, observed 2026-08-02T23:36:46.483287Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T23:36:46.483287Z digest=sha256:21a32ada5244920f503334aa0181b49e37f0f25121f8f6fced5c9b620a55e348

Pith citing papers

Observation 47919464-88d6-4e52-855f-8570dce63df0 · inbound

Security Considerations for Multi-agent Systems cites this paper.

Security Considerations for Multi-agent Systems Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 118

Resolution
verified exact
arxiv_id, observed 2026-06-12T02:08:25.633841Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-15T14:12:14.160789Z digest=sha256:5b2e051dd9c5db863159b3ccff19e65016480681c62bbc8e6080838cc2d5a549

Observation 2605665c-f537-4653-8067-666bff20e950 · inbound

Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback cites this paper.

Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 33

Resolution
verified exact
arxiv_id, observed 2026-06-12T02:08:25.633841Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-19T23:26:15.658106Z digest=sha256:54f43041f0c24631017304b9de262f09cedc6b4cdadd0768e7f4aa7ba9db0691

Observation 2a865428-f18d-4395-aef6-8d0fb1af458f · inbound

Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety cites this paper.

Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 48

Resolution
verified exact
arxiv_id, observed 2026-06-12T02:08:25.633841Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-22T05:50:28.114140Z digest=sha256:cbd0f0658f952b303a4d50bc7d785c6ca58fc06004e2f5e1730c84023d6e4cae

Observation 1ccbefac-07b0-4fe1-afdc-9f269842846a · inbound

Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety cites this paper.

Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 48

Resolution
verified exact
arxiv_id, observed 2026-06-12T02:08:25.633841Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-25T06:05:27.736494Z digest=sha256:8394dc2246208a654bd90dd0f6ab6f213891c00bfa78f4a744c61ceaabd9655a

Observation 0715d350-1acc-43b0-a23c-ce60b0cebc9a · inbound

Coding with "Enemy": Can Human Developers Detect AI Agent Sabotage? cites this paper.

Coding with "Enemy": Can Human Developers Detect AI Agent Sabotage? Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 24

Resolution
metadata mismatch
local_arxiv, observed 2026-07-02T12:46:57.267236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=arxiv_source observed=2026-06-28T01:48:56.367899Z digest=sha256:b576e2f2ce922ca2028c972d7d9ff82835243201c2023dbe9ed0f11c4c3ac5ca

Observation 9ba735f3-ed99-4dc6-aa11-facf2cf8bf94 · inbound

Signal-Driven Observation for Long-Horizon Web Agents cites this paper.

Signal-Driven Observation for Long-Horizon Web Agents Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 31

Resolution
verified exact
local_arxiv, observed 2026-06-28T01:31:29.233333Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=arxiv_source observed=2026-06-28T01:25:11.149977Z digest=sha256:c285bdf4937556c7d2c901cd73a16de6d404fed77fc91d54f4ed5d416604905c

Observation 2ee2d42e-2642-43be-8606-01991c538d7a · inbound

The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems cites this paper.

The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-01T12:54:34.538093Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T12:54:34.538093Z digest=sha256:9037665e72d23b9713b1ea39aec77f32e4c3b9f29d60de0006d41c8baa85f911

Observation d5549ca9-54e3-4376-af67-28df942e37cd · inbound

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation cites this paper.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-04T05:44:22.374592Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T05:44:22.374592Z digest=sha256:f0fc8e7acd4869b6800c9f2d1c1cc72ba81826c75dc690d8d445b0637dd79d80