Paper Citation Record · LEDGER

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation

As of 4 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2605.08310.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.08310 v1

Coverage vector

measured 42 of 42 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-12T01:28:24.949110Z

measured 42 of 42 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-04T06:34:03.388597+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

42 of 42 outbound references displayed

verified exact9
verified fuzzy23
unresolved2
parse uncertain1
malformed identifier3
metadata mismatch4

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 55f3669c-4032-43aa-baad-ac67d440df44 · outbound

This paper cites Agent S: An open agentic framework that uses computers like a human.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Agent S: An open agentic framework that uses computers like a human

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.020610Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 26633a37-867c-4544-aebe-f58b20032ad5 · outbound

This paper cites Windows agent arena: Evaluating multi-modal OS agents at scale.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Windows agent arena: Evaluating multi-modal OS agents at scale

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.987974Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 01c32977-7dee-4939-bed4-5478ee51a58d · outbound

This paper cites TopicAttack: An indi- rect prompt injection attack via topic transition.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation TopicAttack: An indi- rect prompt injection attack via topic transition

Reference 3

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.613071Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation c3da176b-9abc-4be9-b5d2-df25d2aabffe · outbound

This paper cites an unresolved cited work.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Unresolved cited work

Reference 4

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.541990Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 98dd598b-cca1-4373-830b-cb9cf76e3548 · outbound

This paper cites Defense against prompt injection attack by leveraging attack techniques.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Defense against prompt injection attack by leveraging attack techniques

Reference 5

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.601218Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 93b172c3-0567-4926-a289-2c4361e9b952 · outbound

This paper cites AgentDojo: A dynamic environment to evaluate prompt injec- tion attacks and defenses for LLM agents.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation AgentDojo: A dynamic environment to evaluate prompt injec- tion attacks and defenses for LLM agents

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.973448Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 507f81a6-756f-41cf-89d1-19b7cd390899 · outbound

This paper cites DeepSeek-V3 Technical Report.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation DeepSeek-V3 Technical Report

Reference 7

Resolution: malformed identifier; local_arxiv, observed 2026-05-12T07:56:30.670662Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation a8700e29-55f4-4dff-9672-ee288377f18c · outbound

This paper cites Mind2Web: Towards a generalist agent for the web.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Mind2Web: Towards a generalist agent for the web

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.014176Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 02598e6e-3121-4d60-bf04-06c34a69f2a0 · outbound

This paper cites Laradji, Manuel Del Verme, Tom Marty, David Vazquez, Nicolas Chapados, and Alexandre Lacoste.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Laradji, Manuel Del Verme, Tom Marty, David Vazquez, Nicolas Chapados, and Alexandre Lacoste

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.018471Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 90209d57-c992-40b0-b56e-5e6f90da3bb7 · outbound

This paper cites WASP: Benchmarking web agent security against prompt injection attacks.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation WASP: Benchmarking web agent security against prompt injection attacks

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.981127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 58d39848-a956-406e-831a-082dfab2ddf5 · outbound

This paper cites Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities

Reference 11

Resolution: metadata mismatch; local_arxiv, observed 2026-05-12T01:31:14.593551Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation d307ed24-7288-4b6a-aff3-9da63e61ae39 · outbound

This paper cites GLM-4.5: Agentic, Reasoning, and Coding (ARC) Foundation Models.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation GLM-4.5: Agentic, Reasoning, and Coding (ARC) Foundation Models

Reference 12

Resolution: verified exact; local_arxiv, observed 2026-05-12T01:31:14.577092Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation e855f1e5-2995-428d-a599-7ec47468be9b · outbound

This paper cites InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023).

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023)

Reference 13

Resolution: metadata mismatch; arxiv_id, observed 2026-05-12T01:31:14.558696Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation a36d97d9-e117-4b7b-800a-be038e5c0697 · outbound

This paper cites OmniACT: A dataset and benchmark for enabling multimodal generalist autonomous agents for desktop and web.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation OmniACT: A dataset and benchmark for enabling multimodal generalist autonomous agents for desktop and web

Reference 14

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.608395Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation e4116845-6f23-43a0-892e-3c91890f0298 · outbound

This paper cites Kimi K2: Open Agentic Intelligence.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Kimi K2: Open Agentic Intelligence

Reference 15

Resolution: malformed identifier; local_arxiv, observed 2026-05-12T07:56:30.684123Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 34283d37-f678-4b8d-9bb5-254223359874 · outbound

This paper cites VisualWebArena: Evaluating multimodal agents on realistic visual web tasks.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation VisualWebArena: Evaluating multimodal agents on realistic visual web tasks

Reference 16

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.565722Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 9ea17904-563b-44ca-a084-a63c5c95ca91 · outbound

This paper cites EIA: Environmental injection attack on generalist web agents for privacy leakage.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation EIA: Environmental injection attack on generalist web agents for privacy leakage

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.971553Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 21b8ba45-daee-4402-b408-58511445ba0a · outbound

This paper cites Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni, and Percy Liang.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni, and Percy Liang

Reference 18

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.547604Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation d152b9e4-8f67-4c0e-b702-26e28a5faae7 · outbound

This paper cites AgentBench: Evaluating LLMs as agents.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation AgentBench: Evaluating LLMs as agents

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.011941Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation d11e2c82-5c7d-43f4-b6ff-d7390c1c8674 · outbound

This paper cites Formalizing and benchmarking prompt injection attacks and defenses.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Formalizing and benchmarking prompt injection attacks and defenses

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.977164Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation db60e35d-ebb4-49ad-8bf6-4c91da86186b · outbound

This paper cites WebLINX: Real-world website navigation with multi-turn dialogue.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation WebLINX: Real-world website navigation with multi-turn dialogue

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.993247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation d0605330-31b3-4876-8994-8e469a52aefe · outbound

This paper cites OSWorld: Benchmarking multimodal agents for open-ended tasks in real computer environments.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation OSWorld: Benchmarking multimodal agents for open-ended tasks in real computer environments

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.016368Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation ad96b5f2-1760-447b-b0f3-bab0e24bc2ac · outbound

This paper cites Qwen3 Technical Report.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Qwen3 Technical Report

Reference 23

Resolution: metadata mismatch; local_arxiv, observed 2026-05-12T01:31:14.588113Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation a74cdaa3-a4f4-48de-bd5f-fa032e877072 · outbound

This paper cites Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1 , pages =.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1 , pages =

Reference 24

Resolution: metadata mismatch; arxiv_id, observed 2026-05-12T01:31:14.534579Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 2382f221-3801-490b-8632-8b34b3db53a7 · outbound

This paper cites AssistantBench: Can Web Agents Solve Realistic and Time-Consuming Tasks? , booktitle =.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation AssistantBench: Can Web Agents Solve Realistic and Time-Consuming Tasks? , booktitle =

Reference 25

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.604626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation ac81e2c9-bd73-4d1d-93c5-fb38873be7a9 · outbound

This paper cites In: Zong, C., Xia, F., Li, W., Navigli, R.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation In: Zong, C., Xia, F., Li, W., Navigli, R

Reference 26

Resolution: malformed identifier; doi_truncated, observed 2026-05-12T01:31:14.538635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation eb4ad19b-bdba-45c9-b6c2-3f9d46fe004e · outbound

This paper cites Agent Security Bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Agent Security Bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.995435Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 35db9db4-c7cf-47fa-8eef-f267f499ea5c · outbound

This paper cites Attacking vision-language computer agents via pop-ups.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Attacking vision-language computer agents via pop-ups

Reference 28

Resolution: verified exact; doi, observed 2026-05-12T01:31:14.619719Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation f758a45d-abac-4172-a821-5caeb324b610 · outbound

This paper cites Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.005323Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 965f5401-8d95-4451-bf05-8dfa793ff2e4 · outbound

This paper cites 12 Appendix Table of contents A WebTrap algorithm and prompts14 A.1 Full attack algorithm.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation 12 Appendix Table of contents A WebTrap algorithm and prompts14 A.1 Full attack algorithm

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.007479Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 4a29b4da-5df5-4bb2-86f7-115f1e00b25c · outbound

This paper cites It does not expose the true attacker goal and appears simply as normal, environment-related navigation guidance.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation It does not expose the true attacker goal and appears simply as normal, environment-related navigation guidance

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.984699Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 4449de97-4b42-4dff-8fc9-9a7542f2319c · outbound

This paper cites It packages the attacker goal as a necessary prerequisite for the user goal and continues guiding the agent toward the payload injection point.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation It packages the attacker goal as a necessary prerequisite for the user goal and continues guiding the agent toward the payload injection point

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.975221Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 4975d369-62fe-49b6-956e-d7e504425593 · outbound

This paper cites {detour_root_label}.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation {detour_root_label}

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.997451Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation fff5641e-27fd-40e5-b611-a4324666dc83 · outbound

This paper cites {click_1_label}.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation {click_1_label}

Reference 34

Resolution: parse uncertain; raw_fallback, observed 2026-05-14T07:04:26.986306Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 05b8a650-c5fa-4ce1-9529-87e0a52db9ed · outbound

This paper cites {click_2_label}.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation {click_2_label}

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.979460Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 6fc05393-7575-4bc0-a882-ed4d82b452cd · outbound

This paper cites an unresolved cited work.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Unresolved cited work

Reference 36

Resolution: unresolved; raw_fallback, observed 2026-05-14T07:04:27.003262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 0da97c6d-9a60-401c-8934-6d469ee46a25 · outbound

This paper cites an unresolved cited work.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Unresolved cited work

Reference 37

Resolution: unresolved; raw_fallback, observed 2026-05-14T07:04:27.009416Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 40fef805-34cc-4268-b9ec-b570020a212a · outbound

This paper cites Special Requests & Preferences.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Special Requests & Preferences

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:27.001378Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 6cb78f12-b8b0-4245-a361-3b1f3eda6a94 · outbound

This paper cites Access Tokens.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Access Tokens

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.991378Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation e379bf74-f8c2-4f4f-9cc3-b58ad604a113 · outbound

This paper cites New Deploy Token.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation New Deploy Token

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.989568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation a6f9ecda-5f45-41e8-a184-bcdc4cea9d3e · outbound

This paper cites Deploy", check read_repository, read_package_registry, and write_package_registry scopes, then click.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation Deploy", check read_repository, read_package_registry, and write_package_registry scopes, then click

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.982910Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 5d997329-5bd4-458a-a9b0-50fde81fa588 · outbound

This paper cites created_deploy_key.

WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation created_deploy_key

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-05-14T07:04:26.999443Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Pith citing papers

No inbound Pith citation observations are available.