{"as_of":"2026-08-07T08:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0d72632f0bf4ef957c7a0a382fb395e65fa7d2902045ad9b3265c8496bfbb2f2","coverage":[{"denominator":30,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":30,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-07T16:22:49.737626Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T17:08:58.831798Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.25109","snapshot_observed_at":"2026-07-13T17:08:58.831798Z","title":"Structured security auditing and robustness enhancement for untrusted agent skills.arXiv preprint arXiv:2604.25109, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.02900","last_updated":"2026-05-24T13:33:45Z","snapshot_observed_at":"2026-08-02T11:46:07.449862Z","submitted_at":"2026-03-28T13:21:44Z","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","version":2},"reference_index":253,"source":"pdf_text","source_observed_at":"2026-07-13T17:08:58.831798Z"},"links":{"cited_paper":"/paper/2604.25109","citing_paper":"/paper/2605.02900"},"observation_digest":"sha256:86d0685a3ebf70b341133839efa56b03cb1c5ddf0221b7669b359078c41f88e2","observation_id":"8284ea6f-eff0-4d40-a6bc-a75d51dab5d8","resolution":{"observed_at":"2026-07-13T17:08:58.831798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"cited_work":{"arxiv_id":"2604.25109","doi":"10.48550/arxiv.2604.25109","metadata_source":"pith","pith_arxiv_id":"2604.25109","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","venue":"cs.CR","work_id":"3b58e4f4-e0c5-43cd-8a66-955616f56ba2","year":2026},"citing_paper":{"arxiv_id":"2605.10990","last_updated":"2026-05-09T11:41:53Z","snapshot_observed_at":"2026-07-31T18:22:23.938814Z","submitted_at":"2026-05-09T11:41:53Z","title":"Skill Drift Is Contract Violation: Proactive Maintenance for LLM Agent Skill Libraries","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-13T07:29:20.993146Z"},"links":{"cited_paper":"/paper/2604.25109","citing_paper":"/paper/2605.10990"},"observation_digest":"sha256:68a383cfb55d966b8994046ba79fe9b0640521c6c9da5bcbdb3a77a8b02dfeee","observation_id":"35814a25-28d1-4cde-b4dc-3cf723b2894e","resolution":{"observed_at":"2026-05-13T07:32:29.094470Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"cited_work":{"arxiv_id":"2604.25109","doi":"10.48550/arxiv.2604.25109","metadata_source":"pith","pith_arxiv_id":"2604.25109","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","venue":"cs.CR","work_id":"3b58e4f4-e0c5-43cd-8a66-955616f56ba2","year":2026},"citing_paper":{"arxiv_id":"2605.11891","last_updated":"2026-05-12T10:05:54Z","snapshot_observed_at":"2026-07-06T23:23:39.723268Z","submitted_at":"2026-05-12T10:05:54Z","title":"Proteus: A Self-Evolving Red Team for Agent Skill Ecosystems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-13T05:35:27.889225Z"},"links":{"cited_paper":"/paper/2604.25109","citing_paper":"/paper/2605.11891"},"observation_digest":"sha256:a42add47070fb6f7aa5d619aff14de4e5c2011f127c4192b8995e0c61e21e8e2","observation_id":"7ad8c002-69ff-4495-a424-5b52e2b34b71","resolution":{"observed_at":"2026-05-13T05:37:19.163897Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"cited_work":{"arxiv_id":"2604.25109","doi":"10.48550/arxiv.2604.25109","metadata_source":"pith","pith_arxiv_id":"2604.25109","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","venue":"cs.CR","work_id":"3b58e4f4-e0c5-43cd-8a66-955616f56ba2","year":2026},"citing_paper":{"arxiv_id":"2606.11435","last_updated":"2026-06-09T20:43:23Z","snapshot_observed_at":"2026-08-06T07:30:17.162850Z","submitted_at":"2026-06-09T20:43:23Z","title":"Agent Skill Evaluation and Evolution: Frameworks and Benchmarks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T13:09:56.222961Z"},"links":{"cited_paper":"/paper/2604.25109","citing_paper":"/paper/2606.11435"},"observation_digest":"sha256:35a564e002820d42025ba93e605572445eb803e1fc2234058fc4cd289e0cf53b","observation_id":"8fbd73ff-f309-4253-802c-b6db216c60c9","resolution":{"observed_at":"2026-07-03T05:37:40.299708Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2604.25109/citation-record","integrity":"/paper/2604.25109/integrity","json":"/paper/2604.25109/citation-record.json","paper":"/paper/2604.25109"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.15310","last_updated":"2025-08-21T07:08:16Z","snapshot_observed_at":"2026-08-05T17:59:44.912775Z","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents","version":1},"cited_work":{"arxiv_id":"2508.15310","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15310","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"IPIGuard: A novel tool dependency graph-based defense against indirect prompt injection in LLM agents","venue":null,"work_id":"e52e49b8-5458-4d9f-b54f-6183b61c74df","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2508.15310","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:ae51febab02c525440c8fcec0bdd9e089345c81a314a20495b807e9b29d4781d","observation_id":"5737b865-a879-4711-9d1b-4ff6ff40d388","resolution":{"observed_at":"2026-05-11T23:46:17.376618Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https: //platform.claude.com/docs/en/agents-and-tools/age nt-skills/overview","venue":null,"work_id":"23e73693-b31e-4aa9-8b94-0136a4900bcb","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:f0e5ad925d748d46df0239bce3b41131a9dc81ddc2fda3805c8711136c7cf744","observation_id":"79f6427e-6e00-4e95-83c6-99ab758a922c","resolution":{"observed_at":"2026-05-27T02:18:26.778293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Compu- tational Linguistics: EMNLP 2025, pages 16995– 17006, Suzhou, China","venue":null,"work_id":"ce950c4f-3cd8-4c0b-b6e4-14a85b7da3e7","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:61d1300ed5b572fd9a4cc19276dce669f01d48c04507d4820c50e8174bca7ba9","observation_id":"3c21ce9a-c500-4ddb-bcc9-9d63d5f651fd","resolution":{"observed_at":"2026-05-27T02:18:26.782248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Computational Linguistics: ACL 2025, pages 22134–22173, Vienna, Austria","venue":null,"work_id":"b6c0a1b8-33f6-4a5e-926d-3117f3d7c5bd","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:e2767a4f895e011af2b19336be77a246c4ace4c87d0fbb7756e5d8d2ea1d2cf0","observation_id":"55e757b7-0594-41a7-bd3c-c91ad51ab2f0","resolution":{"observed_at":"2026-05-27T02:18:26.774271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-07-06T19:29:18.770662Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":"2410.05451","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-07-01T23:36:22.936259Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":"ee1040df-3911-42c9-b921-8e69093f4f74","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:e5f4b70564e4c4a20095d321f4019a3858ecdb4165526392b6ca790a78304c65","observation_id":"377c23ef-e515-45a9-9e0c-cbc3f560a1f6","resolution":{"observed_at":"2026-05-11T23:46:17.200381Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.16572","last_updated":"2026-06-01T10:06:04Z","snapshot_observed_at":"2026-07-13T23:40:45.549290Z","submitted_at":"2026-03-17T14:27:35Z","title":"Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem","version":2},"cited_work":{"arxiv_id":"2603.16572","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.16572","snapshot_observed_at":"2026-07-03T21:58:59.449946Z","title":"Malicious or not: Adding repository context to agent skill classification","venue":"cs.CR","work_id":"cc0596b7-a372-4419-b190-3665648de607","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2603.16572","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:306616175e41a43ddf8e7555b3cbcc6a3323b83a32d07c5e8416bc6cf2949d86","observation_id":"e8813f0c-bd49-4e29-85fa-f597e57cadda","resolution":{"observed_at":"2026-06-02T03:04:40.367011Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":"2312.06674","doi":"10.3390/info16050365","metadata_source":"pith","pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","venue":"cs.CL","work_id":"93844332-869b-448c-a1be-35466150b1b2","year":2023},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:629ebc8c05c6b01a4c605c05e0a9b8567520849c897ee1e670861a27780d3675","observation_id":"45a24ff1-390e-4745-bcd9-c3a29d49395a","resolution":{"observed_at":"2026-05-11T23:46:17.015660Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.14211","last_updated":"2026-06-16T17:33:00Z","snapshot_observed_at":"2026-08-02T23:20:40.869423Z","submitted_at":"2026-02-15T16:09:48Z","title":"SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents","version":3},"cited_work":{"arxiv_id":"2602.14211","doi":null,"metadata_source":"pith","pith_arxiv_id":"2602.14211","snapshot_observed_at":"2026-07-04T19:30:07.985851Z","title":"Skillject: Automating stealthy skill-based prompt injection for coding agents with trace-driven closed-loop refinement.arXiv preprint","venue":"cs.CR","work_id":"b53d64dd-e5ba-4b7d-b97a-50f18ac7efd7","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2602.14211","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:50ec286e778b7e672e445be40756817668b2f3eb3d38da3f63bdef0740f70f8d","observation_id":"3bcee0ab-1038-4f2e-8f9f-f561b425c34b","resolution":{"observed_at":"2026-05-20T00:03:05.796937Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22770","last_updated":"2025-03-30T16:39:15Z","snapshot_observed_at":"2026-07-06T19:42:03.739016Z","submitted_at":"2024-10-30T07:39:42Z","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","version":3},"cited_work":{"arxiv_id":"2410.22770","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.22770","snapshot_observed_at":"2026-07-04T15:59:56.705533Z","title":"arXiv preprint arXiv:2410.22770 , year=","venue":null,"work_id":"45706307-25f6-4864-8703-fd28eaa5af87","year":2024},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2410.22770","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:2442eb5d761cc951ed05fa9d0561f8429813a1e49635d49535b18c153937f8fd","observation_id":"695da77a-7ffb-48a2-af18-e81677200800","resolution":{"observed_at":"2026-05-11T23:46:16.667903Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.10173","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Yi Liu, Zhihao Chen, Yanjun Zhang, Gelei Deng, Yuekang Li, Jianting Ning, Ying Zhang, and Leo Yu Zhang","venue":null,"work_id":"dab9b256-f105-419e-82c1-810a78b8d2f2","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:6af1472e770241f117d96d619dd58d0bbfc041e89fa8fbdd2673a3600df5aaa7","observation_id":"625a18d8-649b-426f-a82a-4a0893ef5af0","resolution":{"observed_at":"2026-05-11T23:46:14.546734Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2310.12815","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T13:39:51.347043Z","title":"Prompt Injection Attacks and Defenses in LLM-Integrated Applications","venue":null,"work_id":"1c84b454-fc78-4b84-b1bb-fe6e99425630","year":2024},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:c78a92a8c3480deb533999c2b7b756441079ce1d69b85fdbef350afdb91d9151","observation_id":"601884f8-022e-43a1-9850-f1983ef65325","resolution":{"observed_at":"2026-05-11T23:46:16.491119Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https: //huggingface.co/meta-llama/Llama-Prompt-Guard -2-86M","venue":null,"work_id":"0b9caf32-170e-4b3c-837b-c0227c00d447","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:fc938638554f122a4a37ca4dfe83fe98f4b5f9e4e7e648f1ebb6b78e5df3c65f","observation_id":"b36ad841-d780-41a0-8195-350692e313d5","resolution":{"observed_at":"2026-05-27T02:18:40.168298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6bbd2443-0483-4c50-b87a-36da8ab12feb","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:e88fc8f9f8050daee1415757b0e88bdd75b428566fe5b888c93a0e6dab21073f","observation_id":"8ffc3174-aea7-4fc8-b657-adfbd4b6a118","resolution":{"observed_at":"2026-05-27T02:18:40.174523Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Computational Linguistics: NAACL 2025, pages 6499–6524, Albuquerque, New Mexico","venue":null,"work_id":"065eae3a-cf72-46aa-8438-ddb970b4d0b2","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:5ef83233e2a35ce45b0fe61767e7c39acbdd41fdce74496874fc7f4f4c0c8ac0","observation_id":"092df3b4-d97a-4337-8e1e-0503576f3f3f","resolution":{"observed_at":"2026-05-27T02:18:26.829190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://developers .openai.com/codex/skills","venue":null,"work_id":"975e0daf-d953-485a-bc09-455dba15fcfe","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:17f8de10acd3b51a4d520f8f40bef962a1b292d8eb5cec2a26a00c7e64dccbf5","observation_id":"791945d7-4c73-4a02-bffa-38bd2fceb317","resolution":{"observed_at":"2026-05-27T02:18:26.805670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07724","last_updated":"2024-12-16T20:27:36Z","snapshot_observed_at":"2026-08-01T20:25:38.720765Z","submitted_at":"2024-12-10T18:17:02Z","title":"Granite Guardian","version":2},"cited_work":{"arxiv_id":"2412.07724","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.07724","snapshot_observed_at":"2026-07-03T20:38:54.910365Z","title":"Padhi, M","venue":null,"work_id":"2e2741ec-fe3c-445b-bc7c-ca0288dc8370","year":2024},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2412.07724","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:b887897cf659ee5d8088419d69b2a123f87822ccd4bb153077478a0fadbea17f","observation_id":"85cccfbc-7f5e-424a-9a79-d62836e10b1a","resolution":{"observed_at":"2026-05-11T23:46:16.339429Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Accessed: 2026-04-07","venue":null,"work_id":"2be0236b-30a7-4d87-9572-3408aed9b4e2","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:3a30f8ba16fb9bea1a5229570b51aeaca9f04cebaae3e3770b63437b6222498d","observation_id":"639ba8aa-621d-494a-85f5-197c86b6d858","resolution":{"observed_at":"2026-05-27T02:18:26.833049Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.26328","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T15:48:35.870152Z","title":"Agent skills enable a new class of realis- tic and trivially simple prompt injections","venue":null,"work_id":"8dfc4a7d-02a6-4eb8-9562-49d4fcee1395","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:c7611910dbe8064e4b96066da052a975387c7ddf57e7b42948b893ef3b9fa3a1","observation_id":"c72d5386-f4ac-49ba-a328-cb5b5d7e0bc7","resolution":{"observed_at":"2026-05-11T23:46:16.750688Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.20156","last_updated":"2026-02-25T18:14:01Z","snapshot_observed_at":"2026-08-03T01:14:27.800784Z","submitted_at":"2026-02-23T18:59:27Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","version":3},"cited_work":{"arxiv_id":"2602.20156","doi":"10.48550/arxiv.2602.20156","metadata_source":"pith","pith_arxiv_id":"2602.20156","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","venue":"cs.CR","work_id":"457096f5-b6b3-42da-ac50-e29571f908bb","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2602.20156","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:fce2813f39178cb317c4f37b820477450613f8af24997f4cbbf8c9e83855b04d","observation_id":"c63b5a28-5968-4ed2-b1d3-4abeb89bf66b","resolution":{"observed_at":"2026-05-16T08:57:26.226663Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15219","last_updated":"2025-07-21T03:41:44Z","snapshot_observed_at":"2026-08-06T15:35:31.690602Z","submitted_at":"2025-07-21T03:41:44Z","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","version":1},"cited_work":{"arxiv_id":"2507.15219","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.15219","snapshot_observed_at":"2026-07-11T02:47:49.968301Z","title":"Promptarmor: Simple yet effective prompt injection defenses","venue":"cs.CR","work_id":"a555d845-f54e-4efb-8504-b885d3481efa","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2507.15219","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:304e7c8abe23468a82ad325bd34ca514a5c6f6321add2b904c631b297a6d4987","observation_id":"199175be-577e-4662-9df4-148e8d1eb16b","resolution":{"observed_at":"2026-05-11T23:46:16.139929Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Compu- tational Linguistics: EMNLP 2025, pages 21862– 21880, Suzhou, China","venue":null,"work_id":"182b1507-9737-46bb-90ab-2856fb00f53d","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:ed6507ca419a4be8adcd32f8a8063deed2fbf9b3605e396b0eecac5e6949a532","observation_id":"056ac5da-4c01-4e0c-bf21-2e4e74fa6433","resolution":{"observed_at":"2026-05-27T02:18:26.837421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":"2404.13208","doi":"10.48550/arxiv.2404.13208","metadata_source":"pith","pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","venue":"cs.CR","work_id":"ba941a96-eb3b-48c0-b52c-5e9463085190","year":2024},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:32098e99c36a926a5d1808afe704b40bb27ac4697f28254c4287ca754d545576","observation_id":"77af8aec-ee96-46a4-8fc4-72aa3cf62f32","resolution":{"observed_at":"2026-05-12T10:59:30.872595Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Computational Linguistics: EMNLP 2025, pages 23159–23172, Suzhou, China","venue":null,"work_id":"a6dadb23-2da1-4e63-82fc-4d6794ffeedf","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:fcac10c0ea24aec704e53a904c23a48668c24fe213889ed428aaf5a0ae759791","observation_id":"51f94a7a-3c4a-441b-acb5-1032b5cd22da","resolution":{"observed_at":"2026-05-27T02:18:26.801983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Computational Linguistics: ACL 2025, pages 13698–13713, Vienna, Austria","venue":null,"work_id":"b087fc9c-fc4d-4356-ab73-e003cd407223","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:45e708e7d99ec7e208d501498300a247e9e8dac4c013a8cc3173117676de8b93","observation_id":"6eabad03-ec4b-481e-88b8-e39b119bf111","resolution":{"observed_at":"2026-05-27T02:18:26.797660Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2312.14197","doi":"10.48550/arxiv.2312.14197","metadata_source":"arxiv_reference","pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models","venue":"arXiv (Cornell University)","work_id":"0a458c42-fb17-4655-82ad-c93057550c76","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:25952cbd4aaf2278d0694ed4abda22db4fdd11f33090f29b6eec12f7a0cc9a58","observation_id":"5deca162-d313-4484-9760-fe45fbd8fd38","resolution":{"observed_at":"2026-05-11T23:46:15.850426Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Computa- tional Linguistics: NAACL 2025, pages 7116–7132, Albuquerque, New Mexico","venue":null,"work_id":"f783f678-6a96-410b-be37-c172a8739f76","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:5fd4acdd5c6de060a1df45c95d272d4f4378a9785659cf4e8e9a616f63bf1053","observation_id":"5fdaa26f-ffc3-4903-9d04-4b51b20c2d69","resolution":{"observed_at":"2026-05-27T02:18:26.789815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InFindings of the Association for Computational Linguistics: ACL 2024, pages 10471– 10506, Bangkok, Thailand","venue":null,"work_id":"462ab2a0-435c-44ec-b226-5699af7320fc","year":2024},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:6bb9f6d06a99857138456d2088ce37821c6f8e42ea82945efd7c777304f578af","observation_id":"db4f2783-725f-4bd5-ad9c-4ccf7d23c9e0","resolution":{"observed_at":"2026-05-27T02:18:26.786237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.22724","doi":"10.48550/arxiv.2602.22724","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agentsentry: Mitigating indirect prompt injection in llm agents via temporal causal diagnostics and context purification","venue":"Open MIND","work_id":"f201b9d8-52ac-4a3f-888c-e488c65bc313","year":2026},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:3a346275677f3c160737b15a9745a75e05346fd4c102321b79bf54afa11c5a05","observation_id":"d9e4af8c-5b1d-4e75-8730-b2691245877b","resolution":{"observed_at":"2026-05-11T23:46:15.539894Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"0921df04-5373-4661-861f-a72fb1de052b","year":2025},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:9cdc11b42459b201a74a88c9a1437b9452392d4f8e6bdf3a9d7a81f21f7ebeb5","observation_id":"465a0bbe-2184-4a7b-83df-3a88bfa24246","resolution":{"observed_at":"2026-05-27T02:18:26.793324Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"clas- sification over 30 prompts per split","venue":null,"work_id":"4d1142ff-0b38-4b75-b1f0-8dcd8d3a99a1","year":2024},"citing_paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-07T16:22:49.737626Z"},"links":{"citing_paper":"/paper/2604.25109"},"observation_digest":"sha256:643dadeb55d7f932c81e6c983eafdb7c0929bb9c120d774f093a321028369344","observation_id":"d7568853-ffeb-4735-9df6-83b1237937d9","resolution":{"observed_at":"2026-05-27T02:18:40.179141Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.25109","last_updated":"2026-04-28T01:32:27Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:32:27Z","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills"},"reference_resolution":{"displayed":30,"state_counts":{"malformed_identifier":1,"metadata_mismatch":13,"parse_uncertain":0,"unresolved":2,"verified_exact":2,"verified_fuzzy":12},"total_outbound_references":30},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 30 of 30 outbound references and 4 inbound Pith citation observations for arXiv:2604.25109."}