Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-05-08T16:08:51.850890Z
Paper Citation Record · LEDGER
As of 4 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 1 inbound Pith citation observation for arXiv:2605.05509.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-05-08T16:08:51.850890Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-04T06:34:03.388597+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-04T01:03:46.290627Z
A source-named dated measurement, never combined with another source.
Source: cited_works
59 of 59 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 1c419c97-f5bd-44a9-8615-7ea53a3dfaa0 · outbound
WAAA! Web Adversaries Against Agentic Browsers d.].Blog | Windsurf
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation e67723d8-8af0-4bdb-87a7-427b2aba9e80 · outbound
WAAA! Web Adversaries Against Agentic Browsers d.].Cursor Docs
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 52900203-7ffd-42f4-8838-d8af703a8f66 · outbound
WAAA! Web Adversaries Against Agentic Browsers d.].Dia Browser | AI Chat With Your Tabs
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8bb4f1cd-03ea-4cfc-b587-932eb3e93383 · outbound
WAAA! Web Adversaries Against Agentic Browsers d.].GitHub Copilot·Your AI Pair Programmer
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0df8c0e4-e3a7-49f9-9973-0aa4d6c72a41 · outbound
WAAA! Web Adversaries Against Agentic Browsers d.].Introducing Claude Sonnet 4.5
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation a11c51be-fbe3-40b3-becc-bb1436cd3a09 · outbound
WAAA! Web Adversaries Against Agentic Browsers d.].Microsoft/Playwright-Mcp
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation a7fcc242-4d20-4bd5-8962-bb13208134ce · outbound
WAAA! Web Adversaries Against Agentic Browsers d.].Piloting Claude for Chrome
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0edcc8ca-bc52-4144-85b8-d3ee6bd56424 · outbound
WAAA! Web Adversaries Against Agentic Browsers https://www
Reference 8
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 336baa17-e3cd-4082-a18f-bbaacca67797 · outbound
WAAA! Web Adversaries Against Agentic Browsers https://brave.com/blog/comet-prompt-injection/
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 69f2502a-413d-41e2-bcb6-5289eed99dd7 · outbound
WAAA! Web Adversaries Against Agentic Browsers https://brave.com/blog/unseeable-prompt-injections/
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0d53d891-823f-4ea2-a0b5-1908b6e2d6cd · outbound
WAAA! Web Adversaries Against Agentic Browsers https://neuraltrust.ai/blog/openai-atlas-omnibox-prompt-injection
Reference 11
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 951f7ad4-74f6-4167-b53c-f894ed499516 · outbound
WAAA! Web Adversaries Against Agentic Browsers Microsoft Copi- lot
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 602fd46b-236b-4e8d-8784-cea2c01677f7 · outbound
WAAA! Web Adversaries Against Agentic Browsers Browseros-Ai/BrowserOS
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 555ed348-4805-4573-9a3f-4490385f5967 · outbound
WAAA! Web Adversaries Against Agentic Browsers https://www.claude.com/product/claude-code
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 532de15e-6b97-4209-9e9c-867907ebba13 · outbound
WAAA! Web Adversaries Against Agentic Browsers https://www.perplexity.ai/comet/
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 03c9e367-5e5d-46bd-b288-340500f90eb8 · outbound
WAAA! Web Adversaries Against Agentic Browsers https: //www.google.com/chrome/ai-innovations/
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 4431a5a1-c483-4343-87b4-f14bdf32fec8 · outbound
WAAA! Web Adversaries Against Agentic Browsers Introducing ChatGPT Agent: Bridging Research and Action
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation bcdb6ad0-b2ee-49e6-acfa-f895b8f288f2 · outbound
WAAA! Web Adversaries Against Agentic Browsers https://openai.com/index/introducing-chatgpt- atlas/
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ca5a0375-0af5-4363-8ee8-23ba9e6fc670 · outbound
WAAA! Web Adversaries Against Agentic Browsers Google DeepMind
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation fdc1830f-7b73-4fd0-b80c-c1ee43103937 · outbound
WAAA! Web Adversaries Against Agentic Browsers Steel-Dev/Awesome-Web-Agents
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 55b5d5d1-cc9b-4283-8a66-5a5ef3332a45 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation cd9b2fba-01dc-40d7-8385-aae0848c7ef5 · outbound
WAAA! Web Adversaries Against Agentic Browsers In2010 23rd IEEE Computer Security Foundations Symposium
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 52b3999c-49e8-4a67-977d-908c25a05567 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 92bd8f86-64e5-4df6-94b0-bc2fca2b60a4 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ce6ba851-3812-4bd2-920d-edc8cd47fb21 · outbound
WAAA! Web Adversaries Against Agentic Browsers Doomarena: A framework for testing ai agents against evolving security threats
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 92a8f93c-46bc-48ca-9d7f-8bcee0d97088 · outbound
WAAA! Web Adversaries Against Agentic Browsers Why are web ai agents more vulnerable than standalone llms? a security analysis.arXiv preprint arXiv:2502.20383
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 57e3903d-aece-45d0-81c3-34544df52604 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9ae5ffac-5d9f-4c85-a312-db3ddd699190 · outbound
WAAA! Web Adversaries Against Agentic Browsers Mind2Web: Towards a Generalist Agent for the Web
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation fe31546a-40b7-4773-97fb-739b875e752b · outbound
WAAA! Web Adversaries Against Agentic Browsers WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 9384842b-bb28-45f8-bc16-58547cf30aa4 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 45ae01af-e690-4c06-9f94-cf39124bd59c · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 7dd976c1-8faf-494d-a32e-51958ae45158 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b2dd0e0c-6fb3-4fd4-83af-51ea854b5d2e · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 493c9234-ac83-4512-9a38-14aa7f9a7326 · outbound
WAAA! Web Adversaries Against Agentic Browsers Wang, Stuart Schecter, and Collin Jackson
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 15d5cde9-64d5-4718-bb28-8b29f640c37a · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation ac08d2be-6bb4-41dc-9e11-617d8605cda7 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 36
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0ef53459-d09d-4533-bb11-dbb72268ca9e · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation d4650d44-490f-4f1d-b8e7-88f9c4f49a4c · outbound
WAAA! Web Adversaries Against Agentic Browsers 04984,arXiv:2409.04984,doi:10.48550/ARXIV.2409.04984
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 937e2bb7-4ec5-44e1-a0eb-225006a77524 · outbound
WAAA! Web Adversaries Against Agentic Browsers SOK: On the Analysis of Web Browser Security
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation c4fd6af6-36cd-4164-ae35-47f33e54519c · outbound
WAAA! Web Adversaries Against Agentic Browsers SOK: On the Analysis of Web Browser Security
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 40b08949-07b5-4a90-8b60-8389227e1e8d · outbound
WAAA! Web Adversaries Against Agentic Browsers arXiv (2024).https://doi.org/10.48550/arXiv.2408
Reference 41
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 29ef2c65-fda4-4e18-be12-ebf8a5b70930 · outbound
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 34cdd629-50ad-40e5-9d26-38014056f2c5 · outbound
WAAA! Web Adversaries Against Agentic Browsers Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 0f0b9e3f-7a19-4d22-877c-5501f7dc8460 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 8bff3e3f-9b98-445c-9199-68c35d9a2b84 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 45
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation b71f725d-e6fa-4874-8add-b79485bde695 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 608fc78e-cf4c-4cb5-bfd7-43ce95c619f8 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 47
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f1047054-ec9a-4f66-ae72-b7488ae385a5 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 3919e680-baf8-4257-8156-0219356095c7 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 49
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 225ef129-70b1-42a2-9771-a2efa86e87c6 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 50
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 56dbb040-da4d-4568-ab64-90bf533628c7 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 51
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 26639ba9-e692-4141-80bf-07aaf973a4e9 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 602f766d-4c4a-4e9e-814b-88209f46b903 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 1fa75193-2bef-48f0-9188-70c8d78d2f38 · outbound
WAAA! Web Adversaries Against Agentic Browsers Unresolved cited work
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 2c89ae1f-6bcf-4081-a7d7-85d9ca42ff34 · outbound
WAAA! Web Adversaries Against Agentic Browsers Quantum error thresholds for gauge-redundant digitiza- tions of lattice field theories
Reference 55
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 2c0f21a1-1930-4fd4-9b1a-0def2ee9a9d7 · outbound
WAAA! Web Adversaries Against Agentic Browsers ReAct: Synergizing Reasoning and Acting in Language Models
Reference 56
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 7b423caf-0233-4add-b9cb-150bac94caa5 · outbound
WAAA! Web Adversaries Against Agentic Browsers Browsesafe: Understanding and preventing prompt injection within ai browser agents
Reference 57
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation f6bd2ce4-c9ec-408d-879c-d2d03122361a · outbound
WAAA! Web Adversaries Against Agentic Browsers GPT-4V(ision) is a Generalist Web Agent, if Grounded
Reference 58
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation 5743f397-6da5-4f4d-8ffb-bc1e0ac94423 · outbound
WAAA! Web Adversaries Against Agentic Browsers WebArena: A Realistic Web Environment for Building Autonomous Agents
Reference 59
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.
Observation d5e91a1d-6d49-4f67-83c7-a517464f2d06 · inbound
From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems WAAA! Web Adversaries Against Agentic Browsers
Reference 31
Source-reported events for the cited work
Unavailable: canonical work link unavailable.