Pith. sign in

Paper Citation Record · LEDGER

A Systematic Security Evaluation of OpenClaw and Its Variants

As of 6 August 2026, this Paper Citation Record lists 7 of 7 outbound references and 10 inbound Pith citation observations for arXiv:2604.03131.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2604.03131 v1

Coverage vector

measured 7 of 7 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-13T19:33:29.341895Z

measured 17 of 17 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-06T06:34:29.942622+00:00

measured 10 of 10 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-02T13:28:34.788050Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-07-03T06:27:42.550738Z

Reference resolution

7 of 7 outbound references displayed

  • verified exact4
  • verified fuzzy0
  • unresolved0
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch3

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation deb0af4d-b62d-4a5c-87c3-82199a938474 · outbound

This paper cites Taming OpenClaw: Security analysis and mitigation of autonomous LLM agent threats.

A Systematic Security Evaluation of OpenClaw and Its Variants Taming OpenClaw: Security analysis and mitigation of autonomous LLM agent threats

Reference 1

Resolution
verified exact
arxiv_id, observed 2026-05-13T19:38:10.666217Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T19:33:29.341895Z digest=sha256:6c965bd493167ea88dc5b838787526eaf60932ae5f21a13f009920aa1520930c

Observation 39da14cd-0775-4e01-b54e-d47514f5694a · outbound

This paper cites Mcp-itp: An automated framework for implicit tool poisoning in mcp.

A Systematic Security Evaluation of OpenClaw and Its Variants Mcp-itp: An automated framework for implicit tool poisoning in mcp

Reference 2

Resolution
verified exact
arxiv_id, observed 2026-05-13T19:38:10.677496Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T19:33:29.341895Z digest=sha256:c0162a3367f4a270d3f3800c2bb9a9c28189fcd136984a41888e51930162ff7a

Observation 58cac9b8-18b8-42c9-ab46-50e941407c03 · outbound

This paper cites Yi Liu, Gelei Deng, Yuekang Li, Kailong Wang, Tianwei Zhang, Yepang Liu, Haoyu Wang, Yan Zheng, and Yang Liu.

A Systematic Security Evaluation of OpenClaw and Its Variants Yi Liu, Gelei Deng, Yuekang Li, Kailong Wang, Tianwei Zhang, Yepang Liu, Haoyu Wang, Yan Zheng, and Yang Liu

Reference 3

Resolution
metadata mismatch
arxiv_id, observed 2026-05-13T19:38:10.674620Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T19:33:29.341895Z digest=sha256:90b946f7b2a26bc18a565764a3b8979b7c7f00536bf383941caa62fe84d85697

Observation e6137066-d65a-4707-a500-e696e436649a · outbound

This paper cites Don’t let the claw grip your hand: A security analysis and defense framework for OpenClaw.

A Systematic Security Evaluation of OpenClaw and Its Variants Don’t let the claw grip your hand: A security analysis and defense framework for OpenClaw

Reference 4

Resolution
verified exact
arxiv_id, observed 2026-05-13T19:38:10.671771Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T19:33:29.341895Z digest=sha256:8b5b0747e2451f86f71f026f0a2e6555f31acee170ae2ba2db506ab59345c71c

Observation dfb04978-7be7-4160-880d-5aa5a5b43610 · outbound

This paper cites URLhttps://arxiv.org/abs/2601.05504 First Author et al.:Preprint submitted to ElsevierPage 20 of 21 Security, Privacy, and Ethical Risks in OpenClaw.

A Systematic Security Evaluation of OpenClaw and Its Variants URLhttps://arxiv.org/abs/2601.05504 First Author et al.:Preprint submitted to ElsevierPage 20 of 21 Security, Privacy, and Ethical Risks in OpenClaw

Reference 5

Resolution
metadata mismatch
arxiv_id, observed 2026-05-13T19:38:10.663447Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T19:33:29.341895Z digest=sha256:294243fa35ea5589400baafc6fe0a9a44b404432e0ffcc2259bdc51ff301c6b3

Observation 676d2aa7-849c-4704-a48c-b3915b0f1364 · outbound

This paper cites https://doi.org/10.

A Systematic Security Evaluation of OpenClaw and Its Variants https://doi.org/10

Reference 6

Resolution
metadata mismatch
arxiv_id, observed 2026-05-13T19:38:10.669051Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T19:33:29.341895Z digest=sha256:99deef163d6c55d506eb9ae0134476882998e98d298dd74ec3a1c4e369318246

Observation 4f6be4f1-d1b5-4026-ad19-0902aa710d67 · outbound

This paper cites MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers.

A Systematic Security Evaluation of OpenClaw and Its Variants MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers

Reference 7

Resolution
verified exact
arxiv_id, observed 2026-05-13T19:38:10.680308Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T19:33:29.341895Z digest=sha256:272d5d5e3c2256520e4e6e045e711088318f7caed08037831c1ee32b40a255f2

Pith citing papers

Observation e68f8a17-c9fe-47c6-9705-c693cb3197ce · inbound

Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation cites this paper.

Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 15

Resolution
metadata mismatch
local_arxiv, observed 2026-05-11T20:26:11.278150Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-08T09:08:30.102711Z digest=sha256:8128342e0e3e19ac6fdab4b72cc97a03e212caf1255e58607a68fed4e0d71f47

Observation 3b94a705-96bf-48a8-9abf-e7828d0422df · inbound

On the dilaton gravity of analogue black holes cites this paper.

On the dilaton gravity of analogue black holes A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 11

Resolution
unresolved
no resolver link, observed 2026-07-12T17:06:32.429160Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-12T17:06:32.429160Z digest=sha256:12c0030835da50729e6c14921a3a1a9b04165521dda4ee26b5eae9a80502255e

Observation 1ff68ca5-c6b8-44eb-bda9-843322ec04e9 · inbound

Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw cites this paper.

Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 12

Resolution
metadata mismatch
local_arxiv, observed 2026-05-13T00:57:00.699626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-13T00:53:56.517406Z digest=sha256:3cabf77c2233bc3eaa3a4e36b46ccf455610da06482c707aaea320c1a47b6364

Observation 154a161b-bf61-455a-b293-03056bc23101 · inbound

Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents cites this paper.

Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 106

Resolution
metadata mismatch
local_arxiv, observed 2026-05-20T10:53:13.340626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=arxiv_source observed=2026-05-20T10:51:19.555985Z digest=sha256:e448b63f9f49c29189cd0c441dee196474e46af28776ee87240e2692f911e4c7

Observation 9a80c531-08a8-4038-8472-310cfb79e788 · inbound

ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents cites this paper.

ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 12

Resolution
verified exact
local_arxiv, observed 2026-05-22T05:51:08.541635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-05-22T05:49:21.532568Z digest=sha256:1b7acd3ec88c5629fdce143d0e40edb90a110ceb19cfa3208a99c2690fb9f447

Observation ad817bd8-863e-4f0e-8420-bc1e99501333 · inbound

ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents cites this paper.

ASEval: Automated Trajectory-Level Security Testing for Autonomous Agents A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-02T13:28:34.788050Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T13:28:34.788050Z digest=sha256:ff410ce13ddb40362ffe4adc689253faa159c79f0f6a7d6fafe4b9dac1a37f55

Observation e775522c-e19a-4187-b719-ccb329611409 · inbound

BraveGuard: From Open-World Threats to Safer Computer-Use Agents cites this paper.

BraveGuard: From Open-World Threats to Safer Computer-Use Agents A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 38

Resolution
verified exact
local_arxiv, observed 2026-07-01T21:26:14.171542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-06-28T17:04:46.912915Z digest=sha256:8ede6b190597d12d9415ba20e6ab36c0c96c2005057c20c8732c0c4766997d30

Observation 29477df2-b160-4181-8124-ccec2f6a19e8 · inbound

Understanding and mitigating the risks of OpenClaw for non-technical users: A practical guide with Skill cites this paper.

Understanding and mitigating the risks of OpenClaw for non-technical users: A practical guide with Skill A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 25

Resolution
verified exact
local_arxiv, observed 2026-07-03T06:27:42.552031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=arxiv_source observed=2026-06-27T12:39:26.314984Z digest=sha256:564bdcb2579e0bce27d49cc3703161fbc76fe5a6d1fb27e06e842c379a84ed11

Observation e004d1e8-1c78-4e15-b925-48ccc13fea18 · inbound

Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens cites this paper.

Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 34

Resolution
verified exact
local_arxiv, observed 2026-07-01T12:35:44.125751Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

source=pdf_text observed=2026-07-01T01:55:40.954429Z digest=sha256:d9591a6bb2e329db1fad1fe833ca9957a9df4282298271322c898b0741428e55

Observation c27cf38d-f70c-4a13-915b-0c53e34c78e7 · inbound

Dynamic Capability Scoping for Enterprise AI Agents: A Synthetic Dataset and Three-Source Permission Architecture cites this paper.

Dynamic Capability Scoping for Enterprise AI Agents: A Synthetic Dataset and Three-Source Permission Architecture A Systematic Security Evaluation of OpenClaw and Its Variants

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-01T04:47:41.325288Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-01T04:47:41.325288Z digest=sha256:f2523b6f32eaea0312b214672ae5a63b9334fe986937b55ca9b7b113c746a9aa