{"as_of":"2026-08-06T06:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9253a9b22a26260b3de0ab455941c364cf032ec20f1e02e438687642de00b56a","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-11T02:04:58.145865Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-03T09:17:05.390905Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"cited_work":{"arxiv_id":"2605.07135","doi":"10.48550/arxiv.2605.07135","metadata_source":"pith","pith_arxiv_id":"2605.07135","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","venue":"cs.CR","work_id":"902c5175-d34a-4238-a888-00d0b0798850","year":2026},"citing_paper":{"arxiv_id":"2607.01640","last_updated":"2026-07-02T03:11:41Z","snapshot_observed_at":"2026-08-01T03:50:51.103789Z","submitted_at":"2026-07-02T03:11:41Z","title":"AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-03T09:17:05.390905Z"},"links":{"cited_paper":"/paper/2605.07135","citing_paper":"/paper/2607.01640"},"observation_digest":"sha256:a0b256ba4c37268114842d715de26af7bdccf36af8f9cc62121cb6c4cdc0f114","observation_id":"06835749-dbaa-4c15-aab0-b124723884a6","resolution":{"observed_at":"2026-07-03T09:17:47.660452Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2605.07135/citation-record","integrity":"/paper/2605.07135/integrity","json":"/paper/2605.07135/citation-record.json","paper":"/paper/2605.07135"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding github actions","venue":null,"work_id":"3e7973c7-eaff-4922-afef-137b78275278","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:18d7a0a26a790e7914c969c6dc490c1cdc982c81d311dedf64c06a588ae5df07","observation_id":"9c432b2a-8ff6-4609-8ea9-442ea740e1a4","resolution":{"observed_at":"2026-05-14T14:26:23.259513Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3749371","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Why do github actions workflows fail? an empirical study","venue":"ACM Transactions on Software Engineering and Methodology","work_id":"b6a98b19-7573-40ee-837a-69462453599c","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:2dcf52d2c90da34749d904a8dab74a3dab15ea1c3e374cd8b232dd71f7a7b84b","observation_id":"e53dff93-81f1-419c-9abb-ac0a4d8cdd2a","resolution":{"observed_at":"2026-05-11T02:05:51.027964Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"codex-action","venue":null,"work_id":"1a6709da-7b37-4ee8-a7b5-708250ec3d6c","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:2954c3e1998de099c7d47c897c6db3c46aaec1463eabcff3bbf82b559ad709b4","observation_id":"9c0796d3-152a-4e82-b605-3ada251848f7","resolution":{"observed_at":"2026-05-14T14:26:23.229419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"claude-code-action","venue":null,"work_id":"57ab9ee6-1a07-4983-9960-517a17b1ce6e","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:e39dc86364fce49d500d81c28b6d8e4108eb9d71ff5326d7b1477c4f7c2c6f09","observation_id":"6daace62-4f55-4e5f-9613-3393fc16d36f","resolution":{"observed_at":"2026-05-14T14:26:23.222801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"run-gemini-cli","venue":null,"work_id":"fea4d925-44d1-4533-8658-839a0282b5bd","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:5131f9dcb491c2babf0fba37ea5968d321d112936f5c549aec5a6d7ff705e9c8","observation_id":"92566c54-8f5a-4bfd-b84e-be6153de6a24","resolution":{"observed_at":"2026-05-14T14:26:23.189135Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Marketplace: Ai assisted actions","venue":null,"work_id":"831e14c8-8a06-4dea-8a49-f51c07c4be56","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:b8c5675b004a8fcba36df9dcd3b911fa63abfd9809a91ec9ae6f8bb61a60c325","observation_id":"33833c8a-a760-416f-a839-6c2c5841c62a","resolution":{"observed_at":"2026-05-14T14:26:23.207246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Available: https://github.com/marketplace?type=actions& category=ai-assisted","venue":null,"work_id":"0e13659b-a1c2-47af-afb0-058197033af6","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:e3bc412ea1f3276f067d4f1eaa0c3bc1100dc4691e445af4c25674ae1a87d014","observation_id":"12c51003-4c07-40fa-a743-d710f5ca6aef","resolution":{"observed_at":"2026-05-14T14:26:23.175165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Github agentic workflows","venue":null,"work_id":"620dbb6e-fd23-4420-8dd6-1982d39e4138","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:133be716df9bb656ea5923f9cd5a4e30370018fe43380c9968ff59dd1696b2e6","observation_id":"f9f3b86c-f789-418d-8804-fb706573413d","resolution":{"observed_at":"2026-05-14T14:26:23.186074Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Promptpwnd: Prompt injection vulnerabilities in github actions using ai agents","venue":null,"work_id":"127c7d2b-5915-4f01-8a5a-fa1ad271ba68","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:a33966f9aa1fcc434169aabba7f1b39001429a0717228ae111f2bb279824cc91","observation_id":"adbc32eb-9483-4462-93f7-4a83b7dcd8f5","resolution":{"observed_at":"2026-05-14T14:26:23.209470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How “clinejection","venue":null,"work_id":"2a77e13c-e516-4c9e-b08f-789100df084e","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:fb6e08dcebb1abc0b49a7e22651cfc8204e229b7041f79cb3893c827c14b4ff3","observation_id":"e70f6922-001f-4a58-b864-6c31a947781a","resolution":{"observed_at":"2026-05-14T14:26:23.224953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Make agent defeat agent: automatic detection of taint-style vulnerabilities in llm-based agents","venue":null,"work_id":"b646e1a8-fc19-4fb8-82bd-71e3533761a8","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:074baa6c00ef3c1c219799b5256edeb4cc191afa3f7e2c14cbb5e6ff3b714fdd","observation_id":"b2e13f6b-9d66-414d-872c-803368d228de","resolution":{"observed_at":"2026-05-14T14:26:23.261963Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"5347.2025","doi":"10.1109/icse55347.2025","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2025.IRFuzzer: Specialized Fuzzing for LLVM Backend Code Generation","venue":null,"work_id":"c383b7e9-bd1e-4268-b134-a4e43d7560a3","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:142fe3a003fd9189299f1f043cf3e5d2662b46c4c4cca4cd0251b2ee28cd473f","observation_id":"5ee9a092-e1e5-4804-83d4-bd70fc73881b","resolution":{"observed_at":"2026-05-11T02:05:51.014753Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T10:00:54.682172Z","title":"Taintp2x: Detecting taint-style prompt-to-anything injection vulnerabilities in llm-integrated applications","venue":null,"work_id":"2a8cc784-c721-46a4-9ee0-d6821e5a15a1","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:e6f6e988448ad6ab55e0409cfef66ac711267c99521c157b60521ba9f153c09c","observation_id":"e4684533-f903-4756-9cd3-59b2bdc33e99","resolution":{"observed_at":"2026-05-14T14:26:23.204402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4916.377319","doi":"10.1145/3744916.3773199","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Available: https://doi.org/10.1145/3744916.3773199","venue":null,"work_id":"ce3b100a-4515-4c0f-8967-6977c70b8390","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:bc780bdaadef1b61a73e95e7f6d489b21cddd135fa495f5a0fc8704a98076a65","observation_id":"f5a0dd68-c948-479a-86cb-badfd91253b6","resolution":{"observed_at":"2026-05-11T02:05:51.026026Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"8644.369033","doi":"10.1145/3658644.3690330","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Demystifying rce vulnerabilities in llm-integrated apps","venue":null,"work_id":"fbed3d6e-e767-4c12-8ad5-bcfd9034b814","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:d5826421d81f9153c8e787c103150f6c9c7c3d3635f7b800bdecc486ca3f9468","observation_id":"04e9bfc9-7bad-47ad-ae71-c89b576a7198","resolution":{"observed_at":"2026-05-11T02:05:51.018012Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"cited_work":{"arxiv_id":"2504.19793","doi":"10.48550/arxiv.2504.19793","metadata_source":"pith","pith_arxiv_id":"2504.19793","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","venue":"cs.CR","work_id":"0224da95-0f8f-4479-bb4e-602bec01d31c","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"cited_paper":"/paper/2504.19793","citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:f5dfba6e3340434209475715f3eb43a447ed4c00c439f2107d5b5d26ae46f984","observation_id":"4cb28648-0cd4-41c5-b297-4f2683413e88","resolution":{"observed_at":"2026-05-16T17:08:29.210920Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Script injections","venue":null,"work_id":"776de588-2e92-4c1e-b7da-d993068381ef","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:df0e0e39872ae9fb081351bed43d793633686a1662e8b593a30da39d29bfc0d0","observation_id":"3f198cc3-072f-47df-8353-b0502c6ded73","resolution":{"observed_at":"2026-05-14T14:26:23.263937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Keeping your github actions and workflows secure part 1: Preventing pwn requests","venue":null,"work_id":"193b70d9-d859-4a7d-8ba6-7d630ad8c0e3","year":2021},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:70ac46784ddd8f1ffff707308abd8a01f4ff0dd9c50e61bfe2bd2ec76e787a3b","observation_id":"4eb6b8b2-c460-4ccc-947a-1a03c609d6f6","resolution":{"observed_at":"2026-05-14T14:26:23.268069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mitigating attack vectors in github workflows","venue":null,"work_id":"48ff1499-7c9a-4d59-9d7f-e18aa606cfb4","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:dc7da40de9a7bae4b0ad23ae3250a0de282f862082b677bfc4413ca03b2351fb","observation_id":"c47c3a22-c8b3-4c1e-81c0-386da754368e","resolution":{"observed_at":"2026-05-14T14:26:23.217664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Github actions injection attacks","venue":null,"work_id":"0f46c5b2-4390-45c5-9c5d-26430ee4105d","year":2023},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:83af0f3bfcdcc1e5f81a36385e445f4ea6278355e92c8dbcc3670cfd30afc008","observation_id":"74e362c3-95bb-4ed2-b701-383f2c4a2f4c","resolution":{"observed_at":"2026-05-14T14:26:23.211526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.12614","doi":"10.48550/arxiv.2603.12614","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Chainfuzzer: Greybox fuzzing for workflow-level multi-tool vulnerabilities in llm agents","venue":"arXiv (Cornell University)","work_id":"3b03aa02-6523-48f2-9b1e-aebf6d7ba9f6","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:c69e66d208fa18365849e7dc3941f6a67f6a3ea9f6ae5421d176f5304edf6ad9","observation_id":"36b6ca14-f47f-4ab2-a9bd-5696bafb241c","resolution":{"observed_at":"2026-05-11T02:05:51.020986Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2504.03111","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T13:54:58.532105Z","title":"Available: https://arxiv.org/abs/2504.03111","venue":null,"work_id":"5a1a6fae-c989-48b7-b493-8c80d9a1de41","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:3864f439eb455ccff7160c2b7a17b415f9516d6b75cb5e522d686f188161fc87","observation_id":"c49b3307-b548-4a93-9489-f7c122c3197b","resolution":{"observed_at":"2026-05-11T04:00:54.042520Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Characterizing the security of github CI workflows","venue":null,"work_id":"0c051e5c-ac4d-41c8-bc63-4f0f2edec123","year":2022},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:98805ab928ecaabaf08bc05e131291057e72534ce01dec2ff980a777e042f748","observation_id":"f68c91b6-c5dd-43c9-bb10-216add728958","resolution":{"observed_at":"2026-05-14T14:26:23.172205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revisiting security practices for github actions workflows","venue":null,"work_id":"20fac11a-5285-4729-b9b3-fde413b2a9c2","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:11a906e306e55918c089d5eb4e254571f022b54c9f3d98d2910348e281c99c8d","observation_id":"d032405c-746f-4043-bc32-60b0494c4eae","resolution":{"observed_at":"2026-05-14T14:26:23.214276Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0835.356455","doi":"10.1145/3560835.3564554","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Schorlemmer, Santiago Torres-Arias, and James C","venue":null,"work_id":"f705800d-e823-4556-9d51-135d6a5a7cb7","year":2022},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:b6d1d9f201cbaac1bde76ff9bc8f5c6eac5c8cfedc189eff4e603f93086c68b7","observation_id":"f76ff3d7-2873-4e88-a0e6-1848eedcf3e1","resolution":{"observed_at":"2026-05-11T02:05:51.058957Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Argus: a framework for staged static taint analysis of github workflows and actions","venue":null,"work_id":"f7a21fac-95eb-4e5a-b784-da98d79ca640","year":2023},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:a5f1be735043fd8f5d2e6471a67e080bd9d7e2dfb77ef1575704e4412a743d92","observation_id":"c8ba71d1-8e76-4a43-81bc-07a24e81bcfa","resolution":{"observed_at":"2026-05-14T14:26:23.240442Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.14455","doi":"10.48550/arxiv.2601.14455","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Unpacking security scanners for github actions workflows","venue":"arXiv (Cornell University)","work_id":"7d600864-271b-44a7-b1d5-9469e8b24391","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:cba60b210bafe43ee8c58d3419134f1feff32fccd0a9aa3fabc3294df4920319","observation_id":"fda04a95-72a0-449f-8562-93f1e8cc4fe2","resolution":{"observed_at":"2026-05-11T02:05:51.056257Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Events that trigger workflows","venue":null,"work_id":"306ed601-48f8-45f3-bb6a-071d76b7ef8a","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:6540ea5b0e7ff612a524dbb4ca3af77448a0fcdc95eb65691fda6c681efc052e","observation_id":"705de461-49df-43bf-a869-70456e141f4c","resolution":{"observed_at":"2026-05-14T14:26:23.245151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Available: https://docs.github.com/en/actions/reference/ workflows-and-actions/events-that-trigger-workflows","venue":null,"work_id":"e7bac44b-0966-4285-9b49-c5b149b0bdf8","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:8a98b4fbea6460807ebaec85e143135eda1ae991e423d780856ab872bc6d96eb","observation_id":"5b3e8481-cf4b-40b5-b5f0-34405599523b","resolution":{"observed_at":"2026-05-14T14:26:23.250092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Workflow syntax for github actions","venue":null,"work_id":"780960dd-9129-4701-89f0-ccc90cd2388f","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:401778456dd43ca73d33764e8e3a76ae871d7f6553b9b5808100b0a956c0d38a","observation_id":"57086510-422b-4a03-b5bf-99c4aa7a2c51","resolution":{"observed_at":"2026-05-14T14:26:23.255455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Github action marketplace","venue":null,"work_id":"867bf08a-ccc8-4efa-bfe2-9ccbca31f31b","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:7a5e8d01ec56b53d0f467676080f2142b1cf10f917fa6966b71f283c670f9a44","observation_id":"9fffa149-a5c3-48cb-beca-3a9c84ce8c80","resolution":{"observed_at":"2026-05-14T14:26:23.220233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Variables","venue":null,"work_id":"d2013030-2330-40a0-a527-e9bfc0a96315","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:a599afc61ce4e5c1338d4711200288bc779735b0b654a38c685638b5b640beb6","observation_id":"8e7da93c-65a3-45e8-9864-0e90d722c8bf","resolution":{"observed_at":"2026-05-14T14:26:23.231695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Contexts","venue":null,"work_id":"1df762bc-e569-4da4-aaf8-2ecb8b834691","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:c5565b2bf3ff60ac4a4b5abeb46dfbb3d178718647de1641afb9ff5f40a861ec","observation_id":"8c4063a8-66b9-4270-a814-466283d28cd3","resolution":{"observed_at":"2026-05-14T14:26:23.247455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Expressions","venue":null,"work_id":"d0a42577-7a23-4208-9850-c48dc6342bf6","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:0a95e78e37ee6ddac73e564e94263817b332b65abbdfc50dc068c2ce4a2fcfb6","observation_id":"72f1d26b-e19a-4ac1-8238-0e9df6ac8280","resolution":{"observed_at":"2026-05-14T14:26:23.233680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Keeping your github actions and workflows se- cure part 2: Untrusted input","venue":null,"work_id":"9a67c8af-5e24-4154-b515-77cf38f0cc2d","year":2021},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:311f7b7c388323f739d13c7cae324412d725436a55a399f21b6f303eee2f0f50","observation_id":"12a1dfba-835a-4be4-87c2-75ea8f3de598","resolution":{"observed_at":"2026-05-14T14:26:23.237956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Context Script Injections","venue":null,"work_id":"25ff4e70-c949-4d08-9277-e812ce4b447a","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:005ed4ffea8bde73b16d3f09a96a60ab6923d3e87d333fc59de0bfef2aa1f5de","observation_id":"2f9a6947-62a2-4996-958f-e3f1078d709a","resolution":{"observed_at":"2026-05-14T14:26:23.235656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Artifact Poisoning","venue":null,"work_id":"e128d0e7-f23f-437b-ad26-711c6ce06907","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:dcbf21088736ee720ad815176e85fdb3b8f4904e1121910588bf704d921e71d3","observation_id":"cde9bf14-b43a-4025-b8a6-3d14df49a5ff","resolution":{"observed_at":"2026-05-14T14:26:23.257492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Cache Poisoning","venue":null,"work_id":"bb3c4495-7486-4172-bb62-2ca95b053b25","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:fa03aa776a5fa662ef58fd4b662bd9573e81d844da06f06da388e8ae9c38340e","observation_id":"840fa365-6217-4504-a606-2d382acb433c","resolution":{"observed_at":"2026-05-14T14:26:23.265907Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.17390","doi":"10.48550/arxiv.2601.17390","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Y ASA: Scalable multi-language taint analysis on the unified AST","venue":"arXiv (Cornell University)","work_id":"04893a9d-c01a-4587-a4f5-e9039fd4207e","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:5d83efe9a13a787ad4a4469bca8501afdad489f147f5e026415ef474050a389a","observation_id":"315656b3-8d91-43e1-8b89-29e2e9247c40","resolution":{"observed_at":"2026-05-11T02:05:51.061697Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt Injection Scanner","venue":null,"work_id":"2a58ca4d-85af-4790-8eee-c803d9e47b69","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:74cf872ffb618d89e32aa9d17e947afe1c7d9f0318769f2de203aa18372674b4","observation_id":"d509c981-988e-4c4d-96ed-98e7a282a149","resolution":{"observed_at":"2026-05-14T14:26:23.180573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Aikido OpenGrep Rules","venue":null,"work_id":"7f44c444-ffa0-4c7b-a64f-2519ffd3738e","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:a661fe4e206515a377001626ca5284c74f14643202ca9d9e76d5c9cd6fd22025","observation_id":"107a15bb-b8e8-44a2-aaa6-15d81d270486","resolution":{"observed_at":"2026-05-14T14:26:23.182957Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CodeQL Actions Query Pack","venue":null,"work_id":"e8e832c9-26af-4089-980c-f2daf24ce064","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:81845d3308111d4d788933b719798c92599ad63ce1f3974fdf2100831d080676","observation_id":"d4a3a8c4-7851-4d08-8874-1e0b06ded86f","resolution":{"observed_at":"2026-05-14T14:26:23.242638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Claude Code Action Security Policy","venue":null,"work_id":"09f46700-8912-4d56-b4ab-edb4408cb1a5","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:d89449f68b68dd5ce4f9884b74e75c63a06dbfca6c717ea3deb869309e76672e","observation_id":"6e9c13cc-f20a-41ce-af84-da209007485b","resolution":{"observed_at":"2026-05-14T14:26:23.201198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Codex Action Security Policy","venue":null,"work_id":"c2757e81-7758-4282-9b8e-adb44c8282cd","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:f0a57d755a902c9773cdb1e5b25ef55fcf4dcf9ce03a0433e354c266db9cc742","observation_id":"7fd36b73-aed6-4939-bc64-481cc99472a3","resolution":{"observed_at":"2026-05-14T14:26:23.192276Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.10300","last_updated":"2024-06-13T21:32:56Z","snapshot_observed_at":"2026-07-06T18:31:13.039726Z","submitted_at":"2024-06-13T21:32:56Z","title":"Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2406.10300","doi":"10.48550/arxiv.2406.10300","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.10300","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Weber, Large language models as software components: A taxonomy for LLM- integrated applications (2024)","venue":"arXiv (Cornell University)","work_id":"32acab0d-7663-4df2-9e2f-c823b0b22a03","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"cited_paper":"/paper/2406.10300","citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:a8607dddb3316349a6bedc4004a90c8b60b24d6defa025610d978c47f9aa814c","observation_id":"b438a261-a14f-46f6-be2c-c43b93f2dc28","resolution":{"observed_at":"2026-05-11T04:00:54.030621Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.10300","last_updated":"2024-06-13T21:32:56Z","snapshot_observed_at":"2026-07-06T18:31:13.039726Z","submitted_at":"2024-06-13T21:32:56Z","title":"Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications","version":1},"cited_work":{"arxiv_id":"2406.10300","doi":"10.48550/arxiv.2406.10300","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.10300","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Weber, Large language models as software components: A taxonomy for LLM- integrated applications (2024)","venue":"arXiv (Cornell University)","work_id":"32acab0d-7663-4df2-9e2f-c823b0b22a03","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"cited_paper":"/paper/2406.10300","citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:c5efcabf3d4b6b41055454f2d96c8dab43b0bd28670893e1bd4c8eaf85c165e5","observation_id":"13a1e9a7-1049-4a9b-ae12-752b77ca38cf","resolution":{"observed_at":"2026-05-11T02:05:51.037855Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s11704-024-40231-1","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T13:37:06.774536Z","title":"Frontiers Comput","venue":"Frontiers of Computer Science","work_id":"c00808e5-64e6-4bbb-9a05-230c05403bff","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:6d646a907edffe5e5f3db4a049269c65d2abd255c704f0ab440fa9f9e8848b3d","observation_id":"87b01da2-49ef-42a3-a70d-874ddb60d320","resolution":{"observed_at":"2026-05-11T02:05:51.053477Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-11T01:49:36.593873+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T01:49:36.593873+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2407.19354","doi":"10.48550/arxiv.2407.19354","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"The emerged security and privacy of llm agent: A survey with case studies","venue":null,"work_id":"24043853-2d1b-4a0d-a8dd-5017c0f29a56","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:b09e5ed2ff517fc9751b5e279d756c9fbd8b9cb534f56347f7082dface58d1f3","observation_id":"b07a3d1a-c653-4044-835f-37268c469d2d","resolution":{"observed_at":"2026-05-11T02:05:51.034962Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3716628","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AI agents under threat: A survey of key security challenges and future pathways.ACM Computing Surveys, 57:1–36","venue":"ACM Computing Surveys","work_id":"00c0e927-bdf4-4efe-91fe-57bddccb5209","year":2025},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:c643858286dbca28433c346320d4d36ccaf2ec734c4ff7ed11b9a8ed9014975f","observation_id":"967fe133-d8d7-4386-8404-1891e2186c7d","resolution":{"observed_at":"2026-05-11T02:05:51.029993Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-12T05:19:16.131859+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T05:19:16.131859+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":"2410.02644","doi":"10.48550/arxiv.2410.02644","metadata_source":"pith","pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","venue":"cs.CR","work_id":"15ab4a69-85ab-4295-839d-080a2cd3e7aa","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:cab582b1d191aa99d4bc9d8587e87631072317731537b05a0597c7abc0340f33","observation_id":"66d6c21d-242a-41ad-b550-54312eee829f","resolution":{"observed_at":"2026-05-12T13:36:57.477107Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":"2410.02644","doi":"10.48550/arxiv.2410.02644","metadata_source":"pith","pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","venue":"cs.CR","work_id":"15ab4a69-85ab-4295-839d-080a2cd3e7aa","year":2024},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:83c687290e0df8c70183246b6c9b27b61d91b634e5995bc1e67a986ae797007a","observation_id":"ae411fa1-30d3-4b0d-8228-3d205ef23c2a","resolution":{"observed_at":"2026-05-12T13:36:57.477107Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentauditor: Human-level safety and security evaluation for LLM agents","venue":null,"work_id":"53e571e1-505f-47e8-8484-2c32e43b3d9f","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:2743e451f4554157a6c5b45d978916f1ec47dbcec873da6d3cac8d32b219226c","observation_id":"f3122097-a1a8-44c3-b083-3ef3497d6fac","resolution":{"observed_at":"2026-05-14T14:26:23.253108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentic Actions Auditor","venue":null,"work_id":"bf966ada-385e-4a46-a3ac-161bba572481","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:9b50c1124db3d52581833ab4e5bd68451f4a144020296ea1bf5b9d03ebb010fc","observation_id":"abf65757-bb56-4d04-9c49-1f5a7927eac9","resolution":{"observed_at":"2026-05-14T14:26:23.198418Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"9997b6fc-3710-4caf-905f-9634ebd0725c","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:40485b1cf729c64d3a7517e63a0e4c0bae4d96aca88fa0c2e2d7ad1c8beee106","observation_id":"2758f3f9-8e86-41de-ac26-a2dde72af20a","resolution":{"observed_at":"2026-05-14T14:26:23.195508Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"33f30cbf-f218-40dd-8e10-9c022e470d68","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:3d3fd7a3d5d5f617a1dd44a001dae236d7ab569ae473d02815bca68808f80519","observation_id":"29f8477c-d941-4348-81fe-a70a3b9585b5","resolution":{"observed_at":"2026-05-14T14:26:23.178071Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"441e86d3-c4d1-4b29-bc60-19554170fdb9","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:1a340ead263be9eb41c6a17ed4648efcadde2e3f1354cf84dd7e77600ac7a502","observation_id":"48abda1c-1c8f-45b8-9842-d26aaf9ee020","resolution":{"observed_at":"2026-05-14T14:26:23.227024Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"007bfa3d-083d-49b7-b181-43040eb1aed3","year":null},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:9cd5ef293d95f0b416f88cc61e7b8d6b59df332930381c97be15c0d9220c8ae6","observation_id":"7c46240b-4d9e-447b-a703-c40ca5d7a69e","resolution":{"observed_at":"2026-05-14T14:26:23.270558Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"issues=$(cat issues.json)","venue":null,"work_id":"02b316bf-73c5-4324-adb7-f4a0693d6350","year":2026},"citing_paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-11T02:04:58.145865Z"},"links":{"citing_paper":"/paper/2605.07135"},"observation_digest":"sha256:f3978aa6ff2c2c947849cd83536d3282cfb55ed52333a6349e2799c435d56fd7","observation_id":"1cdf2530-6b92-430d-871b-87716098aef7","resolution":{"observed_at":"2026-05-14T14:26:23.168328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.07135","last_updated":"2026-05-08T02:13:04Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T02:13:04Z","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":1,"metadata_mismatch":7,"parse_uncertain":0,"unresolved":4,"verified_exact":9,"verified_fuzzy":37},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 1 inbound Pith citation observation for arXiv:2605.07135."}