Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-05-10T20:25:58.113363Z
Paper Citation Record · LEDGER
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems
As of 11 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 1 inbound Pith citation observation for arXiv:2604.04426.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-06-26T09:05:22.096955Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-07-04T10:09:45.243392Z
Reference resolution
29 of 29 outbound references displayed
- verified exact8
- verified fuzzy12
- unresolved7
- parse uncertain0
- malformed identifier0
- metadata mismatch2
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation bc1d3597-a806-47df-927e-41ed4522e2d9 · outbound
This paper cites Prompt Injection Attack to Tool Selection in LLM Agents.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Prompt Injection Attack to Tool Selection in LLM Agents
Reference 1
- Resolution
- verified exact
- arxiv_id, observed 2026-05-16T17:08:29.210920Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation a710d3b9-eadb-4cc8-bc98-b34de8988cc1 · outbound
This paper cites Attractive metadata attack: Inducing llm agents to invoke malicious tools.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Attractive metadata attack: Inducing llm agents to invoke malicious tools
Reference 2
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:55:52.968452Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 615af855-fdc1-46a8-96fb-41ee5a592b11 · outbound
This paper cites ToolTweak: An attack on tool selection in llm-based agents.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems ToolTweak: An attack on tool selection in llm-based agents
Reference 3
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:55:53.008858Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation c7e08dc0-6792-4ba8-b660-df802634ac51 · outbound
This paper cites arXiv preprint arXiv:2503.22738 , year=.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems arXiv preprint arXiv:2503.22738 , year=
Reference 4
- Resolution
- metadata mismatch
- arxiv_id, observed 2026-05-10T21:55:53.043236Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 7ab18915-0a32-4b7c-a9a1-733fd381c5c9 · outbound
This paper cites mcp-scanner: Mcp server security scanner.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems mcp-scanner: Mcp server security scanner
Reference 5
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.314683Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 8fd8e110-6bed-41dd-916e-5bc17c6ab9f5 · outbound
This paper cites mcp-scan: Mcp security scanner.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems mcp-scan: Mcp security scanner
Reference 6
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.310730Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 668cdf24-7ee3-4a9a-81cc-30a125d81ef6 · outbound
This paper cites Mcpsecbench: A systematic security benchmark and playground for testing model context protocols.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Mcpsecbench: A systematic security benchmark and playground for testing model context protocols
Reference 7
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:55:53.035300Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation b2136d16-8ffc-47ea-b3c5-a8d0aefd8508 · outbound
This paper cites MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers
Reference 8
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:55:53.026950Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation a5123134-8534-4417-966f-2853b6f81826 · outbound
This paper cites Mcp-safetybench: A benchmark for safety evaluation of large language models with real-world mcp servers.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Mcp-safetybench: A benchmark for safety evaluation of large language models with real-world mcp servers
Reference 9
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:55:53.055038Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 0a06e5e1-d0ec-4d6e-ba1f-a587435c3bf3 · outbound
This paper cites Zhang, Z.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Zhang, Z
Reference 10
- Resolution
- metadata mismatch
- arxiv_id, observed 2026-05-10T21:55:52.977762Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 169569fd-5785-4258-a957-a587f1f2dad0 · outbound
This paper cites Mitre att&ck framework.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Mitre att&ck framework
Reference 11
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.303330Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation fee4a0ea-2267-4b6d-991a-2666f72c0ddd · outbound
This paper cites From allies to adversaries: Manipulating llm tool-calling through adversarial injection.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems From allies to adversaries: Manipulating llm tool-calling through adversarial injection
Reference 12
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.307144Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation e0277e4d-6285-4784-b52d-84bcfeb043d2 · outbound
This paper cites Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach
Reference 13
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:55:52.991265Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation e104e959-3b76-41c6-8dae-fc303042de65 · outbound
This paper cites AdvAgent: Controllable Blackbox Red-teaming on Web Agents.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems AdvAgent: Controllable Blackbox Red-teaming on Web Agents
Reference 14
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:55:52.954590Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 87d04d91-7b08-4f0c-aef4-d3955baf7723 · outbound
This paper cites ramparts: Fast rust mcp scanner.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems ramparts: Fast rust mcp scanner
Reference 15
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.354341Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 81ac1f47-b054-4e53-ad23-b57c26d9341d · outbound
This paper cites Suricata: Network ids/ips and security monitoring engine.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Suricata: Network ids/ips and security monitoring engine
Reference 16
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.323152Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation a9e4b492-f20f-4d5e-a585-bf131e424250 · outbound
This paper cites Safe- nid: Self-attention with normalizing-flow encodings for network intrusion detection.Transactions on Machine Learning Research.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Safe- nid: Self-attention with normalizing-flow encodings for network intrusion detection.Transactions on Machine Learning Research
Reference 17
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.327045Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 78b5e2ea-2dab-43fb-8c81-5208e0f867a8 · outbound
This paper cites an unresolved cited work.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Unresolved cited work
Reference 18
- Resolution
- unresolved
- raw_fallback, observed 2026-05-16T01:32:05.339473Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 4627ce96-eec5-4412-baa9-cc20aa33b45a · outbound
This paper cites benign" if no attack detected. Nothing else should be returned.,→.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems benign" if no attack detected. Nothing else should be returned.,→
Reference 19
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.335627Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 84fc7b55-bf0e-4b6f-ba22-4efc6bc89e85 · outbound
This paper cites Could you use the`get_current_time`tool to find out what the local time is in'Asia/Kolkata'? I need to schedule a call.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Could you use the`get_current_time`tool to find out what the local time is in'Asia/Kolkata'? I need to schedule a call
Reference 20
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.331461Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 6e316e94-6d74-4d34-a972-15200af63c59 · outbound
This paper cites an unresolved cited work.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Unresolved cited work
Reference 21
- Resolution
- unresolved
- raw_fallback, observed 2026-05-16T01:32:05.350465Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation a386e89a-bba5-4e76-8e2b-cb3190c11b2b · outbound
This paper cites an unresolved cited work.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Unresolved cited work
Reference 22
- Resolution
- unresolved
- raw_fallback, observed 2026-05-16T01:32:05.358153Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 135fadc6-9b4e-4827-91b4-0f3cfc0cfb72 · outbound
This paper cites (dozens of repeated SNMP request/response pairs).
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems (dozens of repeated SNMP request/response pairs)
Reference 23
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.367504Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 83727bbc-c5b6-4dc7-b726-db7774cb1c9d · outbound
This paper cites an unresolved cited work.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Unresolved cited work
Reference 24
- Resolution
- unresolved
- raw_fallback, observed 2026-05-16T01:32:05.376004Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 56ff15b9-0301-4818-b807-9a2aa0937be1 · outbound
This paper cites an unresolved cited work.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Unresolved cited work
Reference 25
- Resolution
- unresolved
- raw_fallback, observed 2026-05-16T01:32:05.371797Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 17bb21f4-c57d-4e1f-abb9-f502738b89cf · outbound
This paper cites an unresolved cited work.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Unresolved cited work
Reference 26
- Resolution
- unresolved
- raw_fallback, observed 2026-05-16T01:32:05.319254Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 8f8e9fa6-de61-4ca7-bcd1-15b58fb4e8ea · outbound
This paper cites an unresolved cited work.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems Unresolved cited work
Reference 27
- Resolution
- unresolved
- raw_fallback, observed 2026-05-16T01:32:05.343030Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation 590e4174-4548-4f3f-bd93-45c6f294e699 · outbound
This paper cites timezone.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems timezone
Reference 28
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.346642Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Observation f6b5b861-7799-4130-946f-a324f2644929 · outbound
This paper cites single-flux.
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems single-flux
Reference 29
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-16T01:32:05.362947Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.
Pith citing papers
Observation 65610a16-9a9c-49c3-9a06-e6951179585f · inbound
When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agents cites this paper.
When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agents ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems
Reference 47
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-07-04T10:09:45.247069Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.