Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-05-11T02:04:58.145865Z
Paper Citation Record · LEDGER
As of 5 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 1 inbound Pith citation observation for arXiv:2605.07135.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-05-11T02:04:58.145865Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-07-03T09:17:05.390905Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-08-05T02:28:24.338817Z
58 of 58 outbound references displayed
External citation measurements
0
pith, observed 2026-08-05T02:28:24.338817Z
Observation 9c432b2a-8ff6-4609-8ea9-442ea740e1a4 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Understanding github actions
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation e53dff93-81f1-419c-9abb-ac0a4d8cdd2a · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Why do github actions workflows fail? an empirical study
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 9c0796d3-152a-4e82-b605-3ada251848f7 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions codex-action
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 6daace62-4f55-4e5f-9613-3393fc16d36f · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions claude-code-action
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 92566c54-8f5a-4bfd-b84e-be6153de6a24 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions run-gemini-cli
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 33833c8a-a760-416f-a839-6c2c5841c62a · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Marketplace: Ai assisted actions
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 12c51003-4c07-40fa-a743-d710f5ca6aef · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://github.com/marketplace?type=actions& category=ai-assisted
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation f9f3b86c-f789-418d-8804-fb706573413d · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Github agentic workflows
Reference 8
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation adbc32eb-9483-4462-93f7-4a83b7dcd8f5 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Promptpwnd: Prompt injection vulnerabilities in github actions using ai agents
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation e70f6922-001f-4a58-b864-6c31a947781a · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions How “clinejection
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation b2e13f6b-9d66-414d-872c-803368d228de · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Make agent defeat agent: automatic detection of taint-style vulnerabilities in llm-based agents
Reference 11
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 5ee9a092-e1e5-4804-83d4-bd70fc73881b · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions 2025.IRFuzzer: Specialized Fuzzing for LLVM Backend Code Generation
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation e4684533-f903-4756-9cd3-59b2bdc33e99 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Taintp2x: Detecting taint-style prompt-to-anything injection vulnerabilities in llm-integrated applications
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation f5a0dd68-c948-479a-86cb-badfd91253b6 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://doi.org/10.1145/3744916.3773199
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 04e9bfc9-7bad-47ad-ae71-c89b576a7198 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Demystifying rce vulnerabilities in llm-integrated apps
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 4cb28648-0cd4-41c5-b297-4f2683413e88 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Prompt Injection Attack to Tool Selection in LLM Agents
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 3f198cc3-072f-47df-8353-b0502c6ded73 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Script injections
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 4eb6b8b2-c460-4ccc-947a-1a03c609d6f6 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Keeping your github actions and workflows secure part 1: Preventing pwn requests
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation c47c3a22-c8b3-4c1e-81c0-386da754368e · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Mitigating attack vectors in github workflows
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 74e362c3-95bb-4ed2-b701-383f2c4a2f4c · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Github actions injection attacks
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 36b6ca14-f47f-4ab2-a9bd-5696bafb241c · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Chainfuzzer: Greybox fuzzing for workflow-level multi-tool vulnerabilities in llm agents
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation c49b3307-b548-4a93-9489-f7c122c3197b · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://arxiv.org/abs/2504.03111
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation f68c91b6-c5dd-43c9-bb10-216add728958 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Characterizing the security of github CI workflows
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation d032405c-746f-4043-bc32-60b0494c4eae · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Revisiting security practices for github actions workflows
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation f76ff3d7-2873-4e88-a0e6-1848eedcf3e1 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Schorlemmer, Santiago Torres-Arias, and James C
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation c8ba71d1-8e76-4a43-81bc-07a24e81bcfa · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Argus: a framework for staged static taint analysis of github workflows and actions
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation fda04a95-72a0-449f-8562-93f1e8cc4fe2 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unpacking security scanners for github actions workflows
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 705de461-49df-43bf-a869-70456e141f4c · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Events that trigger workflows
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 5b3e8481-cf4b-40b5-b5f0-34405599523b · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Available: https://docs.github.com/en/actions/reference/ workflows-and-actions/events-that-trigger-workflows
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 57086510-422b-4a03-b5bf-99c4aa7a2c51 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Workflow syntax for github actions
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 9fffa149-a5c3-48cb-beca-3a9c84ce8c80 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Github action marketplace
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 8e7da93c-65a3-45e8-9864-0e90d722c8bf · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Variables
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 8c4063a8-66b9-4270-a814-466283d28cd3 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Contexts
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 72f1d26b-e19a-4ac1-8238-0e9df6ac8280 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Expressions
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 12a1dfba-835a-4be4-87c2-75ea8f3de598 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Keeping your github actions and workflows se- cure part 2: Untrusted input
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 2f9a6947-62a2-4996-958f-e3f1078d709a · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Context Script Injections
Reference 36
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation cde9bf14-b43a-4025-b8a6-3d14df49a5ff · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Artifact Poisoning
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 840fa365-6217-4504-a606-2d382acb433c · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Cache Poisoning
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 315656b3-8d91-43e1-8b89-29e2e9247c40 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Y ASA: Scalable multi-language taint analysis on the unified AST
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation d509c981-988e-4c4d-96ed-98e7a282a149 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Prompt Injection Scanner
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 107a15bb-b8e8-44a2-aaa6-15d81d270486 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Aikido OpenGrep Rules
Reference 41
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation d4a3a8c4-7851-4d08-8874-1e0b06ded86f · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions CodeQL Actions Query Pack
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 6e9c13cc-f20a-41ce-af84-da209007485b · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Claude Code Action Security Policy
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 7fd36b73-aed6-4939-bc64-481cc99472a3 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Codex Action Security Policy
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation b438a261-a14f-46f6-be2c-c43b93f2dc28 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications
Reference 45
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 13a1e9a7-1049-4a9b-ae12-752b77ca38cf · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 87b01da2-49ef-42a3-a70d-874ddb60d320 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Frontiers Comput
Reference 47
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation b07a3d1a-c653-4044-835f-37268c469d2d · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions The emerged security and privacy of llm agent: A survey with case studies
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 967fe133-d8d7-4386-8404-1891e2186c7d · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions AI agents under threat: A survey of key security challenges and future pathways.ACM Computing Surveys, 57:1–36
Reference 49
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 66d6c21d-242a-41ad-b550-54312eee829f · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents
Reference 50
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation ae411fa1-30d3-4b0d-8228-3d205ef23c2a · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents
Reference 51
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation f3122097-a1a8-44c3-b083-3ef3497d6fac · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agentauditor: Human-level safety and security evaluation for LLM agents
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation abf65757-bb56-4d04-9c49-1f5a7927eac9 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Agentic Actions Auditor
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 2758f3f9-8e86-41de-ac26-a2dde72af20a · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 29f8477c-d941-4348-81fe-a70a3b9585b5 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work
Reference 55
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 48abda1c-1c8f-45b8-9842-d26aaf9ee020 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work
Reference 56
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 7c46240b-4d9e-447b-a703-c40ca5d7a69e · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions Unresolved cited work
Reference 57
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 1cdf2530-6b92-430d-871b-87716098aef7 · outbound
Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions issues=$(cat issues.json)
Reference 58
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.
Observation 06835749-dbaa-4c15-aab0-b124723884a6 · inbound
AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.