Pith. sign in

Paper Citation Record · LEDGER

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions

As of 5 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 1 inbound Pith citation observation for arXiv:2605.07135.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.07135 v1

Coverage vector

measured 58 of 58 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-11T02:04:58.145865Z

measured 59 of 59 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-07-03T09:17:05.390905Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T02:28:24.338817Z

Reference resolution

58 of 58 outbound references displayed

  • verified exact9
  • verified fuzzy37
  • unresolved4
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch7

External citation measurements

0
pith, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation 9c432b2a-8ff6-4609-8ea9-442ea740e1a4 · outbound

This paper cites Understanding github actions.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Understanding github actions

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.259513Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:18d7a0a26a790e7914c969c6dc490c1cdc982c81d311dedf64c06a588ae5df07

Observation e53dff93-81f1-419c-9abb-ac0a4d8cdd2a · outbound

This paper cites Why do github actions workflows fail? an empirical study.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Why do github actions workflows fail? an empirical study

Reference 2

Resolution
verified exact
doi, observed 2026-05-11T02:05:51.027964Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:2dcf52d2c90da34749d904a8dab74a3dab15ea1c3e374cd8b232dd71f7a7b84b

Observation 9c0796d3-152a-4e82-b605-3ada251848f7 · outbound

This paper cites codex-action.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions codex-action

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.229419Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:2954c3e1998de099c7d47c897c6db3c46aaec1463eabcff3bbf82b559ad709b4

Observation 6daace62-4f55-4e5f-9613-3393fc16d36f · outbound

This paper cites claude-code-action.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions claude-code-action

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.222801Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:e39dc86364fce49d500d81c28b6d8e4108eb9d71ff5326d7b1477c4f7c2c6f09

Observation 92566c54-8f5a-4bfd-b84e-be6153de6a24 · outbound

This paper cites run-gemini-cli.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions run-gemini-cli

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.189135Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:5131f9dcb491c2babf0fba37ea5968d321d112936f5c549aec5a6d7ff705e9c8

Observation 33833c8a-a760-416f-a839-6c2c5841c62a · outbound

This paper cites Marketplace: Ai assisted actions.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Marketplace: Ai assisted actions

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.207246Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:b8c5675b004a8fcba36df9dcd3b911fa63abfd9809a91ec9ae6f8bb61a60c325

Observation 12c51003-4c07-40fa-a743-d710f5ca6aef · outbound

This paper cites Available: https://github.com/marketplace?type=actions& category=ai-assisted.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://github.com/marketplace?type=actions& category=ai-assisted

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.175165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:e3bc412ea1f3276f067d4f1eaa0c3bc1100dc4691e445af4c25674ae1a87d014

Observation f9f3b86c-f789-418d-8804-fb706573413d · outbound

This paper cites Github agentic workflows.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Github agentic workflows

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.186074Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:133be716df9bb656ea5923f9cd5a4e30370018fe43380c9968ff59dd1696b2e6

Observation adbc32eb-9483-4462-93f7-4a83b7dcd8f5 · outbound

This paper cites Promptpwnd: Prompt injection vulnerabilities in github actions using ai agents.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Promptpwnd: Prompt injection vulnerabilities in github actions using ai agents

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.209470Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:a33966f9aa1fcc434169aabba7f1b39001429a0717228ae111f2bb279824cc91

Observation e70f6922-001f-4a58-b864-6c31a947781a · outbound

This paper cites How “clinejection.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions How “clinejection

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.224953Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:fb6e08dcebb1abc0b49a7e22651cfc8204e229b7041f79cb3893c827c14b4ff3

Observation b2e13f6b-9d66-414d-872c-803368d228de · outbound

This paper cites Make agent defeat agent: automatic detection of taint-style vulnerabilities in llm-based agents.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Make agent defeat agent: automatic detection of taint-style vulnerabilities in llm-based agents

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.261963Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:074baa6c00ef3c1c219799b5256edeb4cc191afa3f7e2c14cbb5e6ff3b714fdd

Observation 5ee9a092-e1e5-4804-83d4-bd70fc73881b · outbound

This paper cites 2025.IRFuzzer: Specialized Fuzzing for LLVM Backend Code Generation.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions 2025.IRFuzzer: Specialized Fuzzing for LLVM Backend Code Generation

Reference 12

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T02:05:51.014753Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:142fe3a003fd9189299f1f043cf3e5d2662b46c4c4cca4cd0251b2ee28cd473f

Observation e4684533-f903-4756-9cd3-59b2bdc33e99 · outbound

This paper cites Taintp2x: Detecting taint-style prompt-to-anything injection vulnerabilities in llm-integrated applications.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Taintp2x: Detecting taint-style prompt-to-anything injection vulnerabilities in llm-integrated applications

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.204402Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:e6f6e988448ad6ab55e0409cfef66ac711267c99521c157b60521ba9f153c09c

Observation f5a0dd68-c948-479a-86cb-badfd91253b6 · outbound

This paper cites Available: https://doi.org/10.1145/3744916.3773199.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://doi.org/10.1145/3744916.3773199

Reference 14

Resolution
verified exact
arxiv_id, observed 2026-05-11T02:05:51.026026Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:bc780bdaadef1b61a73e95e7f6d489b21cddd135fa495f5a0fc8704a98076a65

Observation 04e9bfc9-7bad-47ad-ae71-c89b576a7198 · outbound

This paper cites Demystifying rce vulnerabilities in llm-integrated apps.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Demystifying rce vulnerabilities in llm-integrated apps

Reference 15

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T02:05:51.018012Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:d5826421d81f9153c8e787c103150f6c9c7c3d3635f7b800bdecc486ca3f9468

Observation 4cb28648-0cd4-41c5-b297-4f2683413e88 · outbound

This paper cites Prompt Injection Attack to Tool Selection in LLM Agents.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Prompt Injection Attack to Tool Selection in LLM Agents

Reference 16

Resolution
malformed identifier
arxiv_id, observed 2026-05-16T17:08:29.210920Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:f5dfba6e3340434209475715f3eb43a447ed4c00c439f2107d5b5d26ae46f984

Observation 3f198cc3-072f-47df-8353-b0502c6ded73 · outbound

This paper cites Script injections.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Script injections

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.263937Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:df0e0e39872ae9fb081351bed43d793633686a1662e8b593a30da39d29bfc0d0

Observation 4eb6b8b2-c460-4ccc-947a-1a03c609d6f6 · outbound

This paper cites Keeping your github actions and workflows secure part 1: Preventing pwn requests.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Keeping your github actions and workflows secure part 1: Preventing pwn requests

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.268069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:70ac46784ddd8f1ffff707308abd8a01f4ff0dd9c50e61bfe2bd2ec76e787a3b

Observation c47c3a22-c8b3-4c1e-81c0-386da754368e · outbound

This paper cites Mitigating attack vectors in github workflows.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Mitigating attack vectors in github workflows

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.217664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:dc7da40de9a7bae4b0ad23ae3250a0de282f862082b677bfc4413ca03b2351fb

Observation 74e362c3-95bb-4ed2-b701-383f2c4a2f4c · outbound

This paper cites Github actions injection attacks.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Github actions injection attacks

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.211526Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:83af0f3bfcdcc1e5f81a36385e445f4ea6278355e92c8dbcc3670cfd30afc008

Observation 36b6ca14-f47f-4ab2-a9bd-5696bafb241c · outbound

This paper cites Chainfuzzer: Greybox fuzzing for workflow-level multi-tool vulnerabilities in llm agents.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Chainfuzzer: Greybox fuzzing for workflow-level multi-tool vulnerabilities in llm agents

Reference 21

Resolution
verified exact
arxiv_id, observed 2026-05-11T02:05:51.020986Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:c69e66d208fa18365849e7dc3941f6a67f6a3ea9f6ae5421d176f5304edf6ad9

Observation c49b3307-b548-4a93-9489-f7c122c3197b · outbound

This paper cites Available: https://arxiv.org/abs/2504.03111.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://arxiv.org/abs/2504.03111

Reference 22

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T04:00:54.042520Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:3864f439eb455ccff7160c2b7a17b415f9516d6b75cb5e522d686f188161fc87

Observation f68c91b6-c5dd-43c9-bb10-216add728958 · outbound

This paper cites Characterizing the security of github CI workflows.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Characterizing the security of github CI workflows

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.172205Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:98805ab928ecaabaf08bc05e131291057e72534ce01dec2ff980a777e042f748

Observation d032405c-746f-4043-bc32-60b0494c4eae · outbound

This paper cites Revisiting security practices for github actions workflows.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Revisiting security practices for github actions workflows

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.214276Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:11a906e306e55918c089d5eb4e254571f022b54c9f3d98d2910348e281c99c8d

Observation f76ff3d7-2873-4e88-a0e6-1848eedcf3e1 · outbound

This paper cites Schorlemmer, Santiago Torres-Arias, and James C.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Schorlemmer, Santiago Torres-Arias, and James C

Reference 25

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T02:05:51.058957Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:b6d1d9f201cbaac1bde76ff9bc8f5c6eac5c8cfedc189eff4e603f93086c68b7

Observation c8ba71d1-8e76-4a43-81bc-07a24e81bcfa · outbound

This paper cites Argus: a framework for staged static taint analysis of github workflows and actions.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Argus: a framework for staged static taint analysis of github workflows and actions

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.240442Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:a5f1be735043fd8f5d2e6471a67e080bd9d7e2dfb77ef1575704e4412a743d92

Observation fda04a95-72a0-449f-8562-93f1e8cc4fe2 · outbound

This paper cites Unpacking security scanners for github actions workflows.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unpacking security scanners for github actions workflows

Reference 27

Resolution
verified exact
arxiv_id, observed 2026-05-11T02:05:51.056257Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:cba60b210bafe43ee8c58d3419134f1feff32fccd0a9aa3fabc3294df4920319

Observation 705de461-49df-43bf-a869-70456e141f4c · outbound

This paper cites Events that trigger workflows.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Events that trigger workflows

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.245151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:6540ea5b0e7ff612a524dbb4ca3af77448a0fcdc95eb65691fda6c681efc052e

Observation 5b3e8481-cf4b-40b5-b5f0-34405599523b · outbound

This paper cites Available: https://docs.github.com/en/actions/reference/ workflows-and-actions/events-that-trigger-workflows.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://docs.github.com/en/actions/reference/ workflows-and-actions/events-that-trigger-workflows

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.250092Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:8a98b4fbea6460807ebaec85e143135eda1ae991e423d780856ab872bc6d96eb

Observation 57086510-422b-4a03-b5bf-99c4aa7a2c51 · outbound

This paper cites Workflow syntax for github actions.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Workflow syntax for github actions

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.255455Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:401778456dd43ca73d33764e8e3a76ae871d7f6553b9b5808100b0a956c0d38a

Observation 9fffa149-a5c3-48cb-beca-3a9c84ce8c80 · outbound

This paper cites Github action marketplace.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Github action marketplace

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.220233Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:7a5e8d01ec56b53d0f467676080f2142b1cf10f917fa6966b71f283c670f9a44

Observation 8e7da93c-65a3-45e8-9864-0e90d722c8bf · outbound

This paper cites Variables.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Variables

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.231695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:a599afc61ce4e5c1338d4711200288bc779735b0b654a38c685638b5b640beb6

Observation 8c4063a8-66b9-4270-a814-466283d28cd3 · outbound

This paper cites Contexts.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Contexts

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.247455Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:c5565b2bf3ff60ac4a4b5abeb46dfbb3d178718647de1641afb9ff5f40a861ec

Observation 72f1d26b-e19a-4ac1-8238-0e9df6ac8280 · outbound

This paper cites Expressions.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Expressions

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.233680Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:0a95e78e37ee6ddac73e564e94263817b332b65abbdfc50dc068c2ce4a2fcfb6

Observation 12a1dfba-835a-4be4-87c2-75ea8f3de598 · outbound

This paper cites Keeping your github actions and workflows se- cure part 2: Untrusted input.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Keeping your github actions and workflows se- cure part 2: Untrusted input

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.237956Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:311f7b7c388323f739d13c7cae324412d725436a55a399f21b6f303eee2f0f50

Observation 2f9a6947-62a2-4996-958f-e3f1078d709a · outbound

This paper cites Context Script Injections.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Context Script Injections

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.235656Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:005ed4ffea8bde73b16d3f09a96a60ab6923d3e87d333fc59de0bfef2aa1f5de

Observation cde9bf14-b43a-4025-b8a6-3d14df49a5ff · outbound

This paper cites Artifact Poisoning.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Artifact Poisoning

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.257492Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:dcbf21088736ee720ad815176e85fdb3b8f4904e1121910588bf704d921e71d3

Observation 840fa365-6217-4504-a606-2d382acb433c · outbound

This paper cites Cache Poisoning.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Cache Poisoning

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.265907Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:fa03aa776a5fa662ef58fd4b662bd9573e81d844da06f06da388e8ae9c38340e

Observation 315656b3-8d91-43e1-8b89-29e2e9247c40 · outbound

This paper cites Y ASA: Scalable multi-language taint analysis on the unified AST.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Y ASA: Scalable multi-language taint analysis on the unified AST

Reference 39

Resolution
verified exact
arxiv_id, observed 2026-05-11T02:05:51.061697Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:5d83efe9a13a787ad4a4469bca8501afdad489f147f5e026415ef474050a389a

Observation d509c981-988e-4c4d-96ed-98e7a282a149 · outbound

This paper cites Prompt Injection Scanner.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Prompt Injection Scanner

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.180573Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:74cf872ffb618d89e32aa9d17e947afe1c7d9f0318769f2de203aa18372674b4

Observation 107a15bb-b8e8-44a2-aaa6-15d81d270486 · outbound

This paper cites Aikido OpenGrep Rules.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Aikido OpenGrep Rules

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.182957Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:a661fe4e206515a377001626ca5284c74f14643202ca9d9e76d5c9cd6fd22025

Observation d4a3a8c4-7851-4d08-8874-1e0b06ded86f · outbound

This paper cites CodeQL Actions Query Pack.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions CodeQL Actions Query Pack

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.242638Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:81845d3308111d4d788933b719798c92599ad63ce1f3974fdf2100831d080676

Observation 6e9c13cc-f20a-41ce-af84-da209007485b · outbound

This paper cites Claude Code Action Security Policy.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Claude Code Action Security Policy

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.201198Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:d89449f68b68dd5ce4f9884b74e75c63a06dbfca6c717ea3deb869309e76672e

Observation 7fd36b73-aed6-4939-bc64-481cc99472a3 · outbound

This paper cites Codex Action Security Policy.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Codex Action Security Policy

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.192276Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:f0a57d755a902c9773cdb1e5b25ef55fcf4dcf9ce03a0433e354c266db9cc742

Observation b438a261-a14f-46f6-be2c-c43b93f2dc28 · outbound

This paper cites Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications

Reference 45

Resolution
verified exact
arxiv_id, observed 2026-05-11T04:00:54.030621Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:a8607dddb3316349a6bedc4004a90c8b60b24d6defa025610d978c47f9aa814c

Observation 13a1e9a7-1049-4a9b-ae12-752b77ca38cf · outbound

This paper cites Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications

Reference 46

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T02:05:51.037855Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:c5efcabf3d4b6b41055454f2d96c8dab43b0bd28670893e1bd4c8eaf85c165e5

Observation 87b01da2-49ef-42a3-a70d-874ddb60d320 · outbound

This paper cites Frontiers Comput.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Frontiers Comput

Reference 47

Resolution
metadata mismatch
doi, observed 2026-05-11T02:05:51.053477Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:6d646a907edffe5e5f3db4a049269c65d2abd255c704f0ab440fa9f9e8848b3d

Observation b07a3d1a-c653-4044-835f-37268c469d2d · outbound

This paper cites The emerged security and privacy of llm agent: A survey with case studies.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions The emerged security and privacy of llm agent: A survey with case studies

Reference 48

Resolution
verified exact
arxiv_id, observed 2026-05-11T02:05:51.034962Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:b09e5ed2ff517fc9751b5e279d756c9fbd8b9cb534f56347f7082dface58d1f3

Observation 967fe133-d8d7-4386-8404-1891e2186c7d · outbound

This paper cites AI agents under threat: A survey of key security challenges and future pathways.ACM Computing Surveys, 57:1–36.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions AI agents under threat: A survey of key security challenges and future pathways.ACM Computing Surveys, 57:1–36

Reference 49

Resolution
verified exact
doi, observed 2026-05-11T02:05:51.029993Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:c643858286dbca28433c346320d4d36ccaf2ec734c4ff7ed11b9a8ed9014975f

Observation 66d6c21d-242a-41ad-b550-54312eee829f · outbound

This paper cites Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents

Reference 50

Resolution
verified exact
arxiv_id, observed 2026-05-12T13:36:57.477107Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:cab582b1d191aa99d4bc9d8587e87631072317731537b05a0597c7abc0340f33

Observation ae411fa1-30d3-4b0d-8228-3d205ef23c2a · outbound

This paper cites Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents

Reference 51

Resolution
metadata mismatch
arxiv_id, observed 2026-05-12T13:36:57.477107Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:83c687290e0df8c70183246b6c9b27b61d91b634e5995bc1e67a986ae797007a

Observation f3122097-a1a8-44c3-b083-3ef3497d6fac · outbound

This paper cites Agentauditor: Human-level safety and security evaluation for LLM agents.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agentauditor: Human-level safety and security evaluation for LLM agents

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.253108Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:2743e451f4554157a6c5b45d978916f1ec47dbcec873da6d3cac8d32b219226c

Observation abf65757-bb56-4d04-9c49-1f5a7927eac9 · outbound

This paper cites Agentic Actions Auditor.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agentic Actions Auditor

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.198418Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:9b50c1124db3d52581833ab4e5bd68451f4a144020296ea1bf5b9d03ebb010fc

Observation 2758f3f9-8e86-41de-ac26-a2dde72af20a · outbound

This paper cites an unresolved cited work.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work

Reference 54

Resolution
unresolved
raw_fallback, observed 2026-05-14T14:26:23.195508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:40485b1cf729c64d3a7517e63a0e4c0bae4d96aca88fa0c2e2d7ad1c8beee106

Observation 29f8477c-d941-4348-81fe-a70a3b9585b5 · outbound

This paper cites an unresolved cited work.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work

Reference 55

Resolution
unresolved
raw_fallback, observed 2026-05-14T14:26:23.178071Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:3d3fd7a3d5d5f617a1dd44a001dae236d7ab569ae473d02815bca68808f80519

Observation 48abda1c-1c8f-45b8-9842-d26aaf9ee020 · outbound

This paper cites an unresolved cited work.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work

Reference 56

Resolution
unresolved
raw_fallback, observed 2026-05-14T14:26:23.227024Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:1a340ead263be9eb41c6a17ed4648efcadde2e3f1354cf84dd7e77600ac7a502

Observation 7c46240b-4d9e-447b-a703-c40ca5d7a69e · outbound

This paper cites an unresolved cited work.

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work

Reference 57

Resolution
unresolved
raw_fallback, observed 2026-05-14T14:26:23.270558Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:9cd5ef293d95f0b416f88cc61e7b8d6b59df332930381c97be15c0d9220c8ae6

Observation 1cdf2530-6b92-430d-871b-87716098aef7 · outbound

This paper cites issues=$(cat issues.json).

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions issues=$(cat issues.json)

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-05-14T14:26:23.168328Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-05-11T02:04:58.145865Z digest=sha256:f3978aa6ff2c2c947849cd83536d3282cfb55ed52333a6349e2799c435d56fd7

Pith citing papers

Observation 06835749-dbaa-4c15-aab0-b124723884a6 · inbound

AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs cites this paper.

AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions

Reference 3

Resolution
verified exact
local_arxiv, observed 2026-07-03T09:17:47.660452Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

source=pdf_text observed=2026-07-03T09:17:05.390905Z digest=sha256:a0b256ba4c37268114842d715de26af7bdccf36af8f9cc62121cb6c4cdc0f114