{"as_of":"2026-08-06T14:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:318f1fc824e673cdbc61fbfcfe66424d4c1fea8331b06650800811531a1e18ec","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-12T03:49:49.484361Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T00:07:40.428708Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.09594","snapshot_observed_at":"2026-08-02T00:07:40.428708Z","title":"Liu, C.-Y","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.428708Z"},"links":{"cited_paper":"/paper/2605.09594","citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:c86738a33356979a05b87fc3953a039577841c8b01d24f079dbc8ed2936592eb","observation_id":"d531ca00-90f1-4d5a-98e6-593258582531","resolution":{"observed_at":"2026-08-02T00:07:40.428708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.09594/citation-record","integrity":"/paper/2605.09594/integrity","json":"/paper/2605.09594/citation-record.json","paper":"/paper/2605.09594"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Repairagent: An autonomous, llm-based agent for program repair","venue":null,"work_id":"16bcc43f-d2ad-4a09-b304-bb468f4fb558","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:4193ae75a553d18a454db06f6f5db257168b8855d476273ed2a28b2cd59a08d6","observation_id":"02067e9b-1240-403b-96b4-0e473b54d7ab","resolution":{"observed_at":"2026-05-12T18:01:44.493331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3728922","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"You name it, i run it: An llm agent to execute tests of arbitrary projects.Proc","venue":"Proceedings of the ACM on software engineering.","work_id":"f2a85bed-02ea-4263-9a6f-96ac0d33777d","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:41da64c661df54e23ee1116fbc688b8513fc55c84d1cf4cb8638ca2a4387bc14","observation_id":"71d1f4d8-a5d5-4101-b135-0db85f1f41f6","resolution":{"observed_at":"2026-05-12T03:51:19.583771Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-05-24T07:53:09.60917+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T07:53:09.60917+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"SWE-agent: Agent-computer interfaces enable automated software engineering","venue":null,"work_id":"e3ab3870-69a9-423e-9fe2-710bd775b666","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:6ab68cd12ac6e5fbef661b571e9bd3edf06a593fc186e894ac75a2501f43d05c","observation_id":"4f16b0a0-1c5a-4530-b8fc-1eb79229ee96","resolution":{"observed_at":"2026-05-12T18:01:44.394879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Github copilot","venue":null,"work_id":"cddde3bd-b049-46bb-b9a9-1b11bf4c947b","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:28d37c847b03fda69be857c1155e395ae296a54bfd86822157011234bca3b513","observation_id":"6b0dbc5d-eec0-4f11-a1f6-e3db99ced799","resolution":{"observed_at":"2026-05-12T18:01:44.399487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"37f59351-d8a4-4967-b2f2-b83ac089e88b","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:5649c0e38fc181477f046cfa3463e133a9ef5697969c9708c418e2087f3b4c99","observation_id":"8fd11a88-0072-4a01-bf24-3f1fdf7160da","resolution":{"observed_at":"2026-05-12T18:01:44.317041Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Claude code overview","venue":null,"work_id":"61f1fd2f-6fd3-4c51-bf02-2b00b79c66cd","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:b9fc597fbf5b6fd6c08acea02f3f4c6deedc4575495754bc3e3c708fdea7cca5","observation_id":"5dc58865-deac-4f99-8d63-63fe360e9e7e","resolution":{"observed_at":"2026-05-12T18:01:44.348351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing codex","venue":null,"work_id":"239c1f36-b4f0-4479-a6ac-dd0c37529dcd","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:521eba2be3073ce2a203f866b82e83cbc322885a55e9c1b96d59db3c0bf681b7","observation_id":"fdb99505-6898-4b1a-bcce-29227216bb32","resolution":{"observed_at":"2026-05-12T18:01:44.468454Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Gemini code assist overview","venue":null,"work_id":"f08864e3-d6dd-4aed-8cf1-da516f871f6a","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:bdbc791d7097d630e891889607f4075c4360f86f7681d80461dc6ae0311b4b08","observation_id":"dd685fb3-846f-4f92-98c7-7864b55bb841","resolution":{"observed_at":"2026-05-12T18:01:44.448834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"We have a package for you! a comprehensive analysis of package hallucinations by code generating llms","venue":null,"work_id":"35ef0ed6-81fe-4534-9147-382af757bb4f","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:0559b026a66b7a4517643365976a2ccfb4cd8417a35a135a00ee9b3694b130c3","observation_id":"968b23d8-fc35-46d4-bd4d-8e0f76eee4af","resolution":{"observed_at":"2026-05-12T18:01:44.358625Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Beyond typosquatting: An in-depth look at package confusion","venue":null,"work_id":"fb57ba41-0b9e-4b71-a0f8-e6176aeeb3fb","year":2023},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:c0c86d5fe5d342ef1245797776d42c5ea2fbf474e88d41247d8fb10a961c444c","observation_id":"c082cdb6-708e-450e-b7be-f4f24370099e","resolution":{"observed_at":"2026-05-12T18:01:44.478188Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Small world with high risks: A study of security threats in the npm ecosystem","venue":null,"work_id":"b599579c-af9c-4a21-a9bc-2427938ba930","year":2019},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:a84afeacb68a8bf6fc6b6276c3e3760003a9a089731756766faad54e69c16051","observation_id":"e3a47a5e-7442-44d1-a816-a71f4dbcf850","resolution":{"observed_at":"2026-05-12T18:01:44.443517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3703155","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T16:07:20.243096Z","title":"A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions","venue":"ACM Transactions on Information Systems","work_id":"ed8c5be1-1069-44c0-8dc4-627a7de3a371","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:4f2e4d6135db1787bb42de5d667635f589be202146474a02d8efcabb9175f2ea","observation_id":"592f6954-57ad-48b6-b430-edb7cdcd22c3","resolution":{"observed_at":"2026-05-12T03:51:19.607025Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-20T15:53:54.088987+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-20T15:53:54.088987+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3571730","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T13:37:06.800059Z","title":"Survey of Hallucination in Natural Language Generation","venue":"ACM Computing Surveys","work_id":"aa2fb99f-beb8-463c-8cd4-c575e96e2512","year":2023},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:9816b7740c696bb8bdec2b76bbc43e4f2c91d906168a088e9392980d58807cb6","observation_id":"da518a0b-3fba-4ce7-ac95-d8f0262fbf26","resolution":{"observed_at":"2026-05-12T03:51:19.602018Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-04T01:08:06.897682+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-04T01:08:06.897682+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.19012","last_updated":"2025-01-31T10:26:18Z","snapshot_observed_at":"2026-07-06T20:28:52.880548Z","submitted_at":"2025-01-31T10:26:18Z","title":"Importing Phantoms: Measuring LLM Package Hallucination Vulnerabilities","version":1},"cited_work":{"arxiv_id":"2501.19012","doi":"10.48550/arxiv.2501.19012","metadata_source":"pith","pith_arxiv_id":"2501.19012","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Importing Phantoms : Measuring LLM Package Hallucination Vulnerabilities","venue":"cs.LG","work_id":"5585a680-a3b1-4223-8239-835354fbfcfa","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2501.19012","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:4aa2144e4598b18b7e33cc405c7f4b37f9f6687847e2151621073b4168823939","observation_id":"0636e794-e453-4960-b353-184af6502cc8","resolution":{"observed_at":"2026-05-12T06:56:27.239669Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3728894","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"URLhttps://doi.org/10.1145/3728894","venue":"Proceedings of the ACM on software engineering.","work_id":"29b624b4-96ba-4fee-96b7-7f61f0f8582a","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:5311784caa1be4e9817409be1a0f5be1daca761543dedd1fe165addf0630c860","observation_id":"2c0fbab2-5b32-43f1-be99-2f6ad11082a4","resolution":{"observed_at":"2026-05-12T03:51:19.587996Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Skills | claude","venue":null,"work_id":"2fa7e4a1-cea2-45a9-a724-e8eb3a5adf2f","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:222ab3f3c318996bfd2196f2d043aaf28f8eb737870e2ef0f68a6c98e7f693dc","observation_id":"0c535f55-dbdc-47e4-ab63-f88ac541ead3","resolution":{"observed_at":"2026-05-12T18:01:44.381216Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Skills | openai api","venue":null,"work_id":"c7bfe2b1-ee3d-440a-a7e2-1b2a9c355d03","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:51be777df4681783bbd5a41801d8c835af068cae66d97ac11f29eab99dc30048","observation_id":"a2175aeb-6a49-4983-be9b-1fd80dfedd27","resolution":{"observed_at":"2026-05-12T18:01:44.367439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.20156","last_updated":"2026-02-25T18:14:01Z","snapshot_observed_at":"2026-08-03T01:14:27.800784Z","submitted_at":"2026-02-23T18:59:27Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","version":3},"cited_work":{"arxiv_id":"2602.20156","doi":"10.48550/arxiv.2602.20156","metadata_source":"pith","pith_arxiv_id":"2602.20156","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","venue":"cs.CR","work_id":"457096f5-b6b3-42da-ac50-e29571f908bb","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2602.20156","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:b1fcf625ca46b33e7cea52d1248026e15f5ed692b2f058a9de7a63ed19584f78","observation_id":"b4fcaeeb-9145-4cee-901f-44c8927508a3","resolution":{"observed_at":"2026-05-16T08:57:26.226663Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.06547","last_updated":"2026-06-10T03:31:37Z","snapshot_observed_at":"2026-08-03T04:00:06.220291Z","submitted_at":"2026-02-06T09:52:27Z","title":"\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild","version":4},"cited_work":{"arxiv_id":"2602.06547","doi":"10.48550/arxiv.2602.06547","metadata_source":"pith","pith_arxiv_id":"2602.06547","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Malicious agent skills in the wild: A large-scale security empirical study","venue":"cs.CR","work_id":"8ef663bc-dd3b-44da-8629-2e7afd5a8dee","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2602.06547","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:40a158e49dcc13ea9b15e12cf0b41e36c9cbd82dc2e3a053bf0ec98166a0764b","observation_id":"04aa8c47-efe3-4a5c-af7d-59ec189db109","resolution":{"observed_at":"2026-06-02T04:04:28.114733Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03070","last_updated":"2026-06-19T04:47:04Z","snapshot_observed_at":"2026-07-13T13:34:41.070446Z","submitted_at":"2026-04-03T14:50:16Z","title":"How Your Credentials Are Leaked by LLM Agent Skills: An Empirical Study","version":2},"cited_work":{"arxiv_id":"2604.03070","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.03070","snapshot_observed_at":"2026-07-03T13:48:20.371575Z","title":"Credential Leakage in LLM Agent Skills: A Large-Scale Empirical Study","venue":"cs.CR","work_id":"8f85f345-642a-4ab7-910e-fc90bf0dee3c","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2604.03070","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:ed573175e816aba9d26de0629b96db1840b0ad4b04b1feabbb2394b7dece3ab2","observation_id":"ff327533-35c1-4ddb-b16d-1a552e55b2d3","resolution":{"observed_at":"2026-05-12T06:56:27.283904Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Rules | cursor docs","venue":null,"work_id":"bc9396c8-8b51-4055-9767-da3f57d4ee1f","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:55c6105c436bef4c7556d7624845c1177b514ef00af11fcf44e4e11e1cf62d76","observation_id":"dfa10a12-ef9f-447e-bf46-c69846d48007","resolution":{"observed_at":"2026-05-12T18:01:44.489474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introduction to rules, memories, & workflows","venue":null,"work_id":"2e96509a-dc21-475e-8b74-ab98ae261a69","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:51bb00e041d05332d7a32637c09361c395a1b739145723fa8cb392ef788923c9","observation_id":"6b2e125c-50b3-4c06-82a4-84b1323f579e","resolution":{"observed_at":"2026-05-12T18:01:44.463691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Assistantagent | autogen 0.2","venue":null,"work_id":"039989ae-4d1f-465a-a47a-affaa4c157db","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:3b43c7ec005ac5cfb11cb7793da2121ae23b0e3786d9ce76667a975fa900584f","observation_id":"c314bea0-d4dd-436f-9dc6-b1fa241b4d61","resolution":{"observed_at":"2026-05-12T18:01:44.403920Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt template format guide - langsmith docs","venue":null,"work_id":"2b07e152-2ab6-482b-aae3-269d97504079","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:9d49662425bffa2b53f0331bbd1b3c7ba32aedbbfc9a06ef6c93f6c63597d298","observation_id":"99fd4ba3-f06d-4324-8959-97d206c31264","resolution":{"observed_at":"2026-05-12T18:01:44.409176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"5764.362398","doi":"10.1145/3605764.3623985","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023)","venue":null,"work_id":"0b235739-d106-431c-aed9-3675d531c886","year":2023},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:93e5c52d3db61624c42985912ba305bb134d50580954c0ce306c8ff7ba1ae84d","observation_id":"c94de70e-b070-490a-a79a-fff697cc4404","resolution":{"observed_at":"2026-05-12T03:51:19.623632Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"InjecAgent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":"3ac4edf2-66eb-47a7-a6a5-efaa6fe27946","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:818faa1261506abdd8f103a70ed3373e2ae209e2647d114f4d944813bd044e6c","observation_id":"63290f68-f6e1-41de-a91c-27f34285d784","resolution":{"observed_at":"2026-05-12T18:01:44.459294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents","venue":null,"work_id":"d9536d13-806e-4bd0-9869-263e83cd434d","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:461aee1ccd9ebe21c10b671490156d8415b20d65f041016c9db17149db4819a6","observation_id":"228ac59a-f1d3-4dcc-8f4c-4abf12639562","resolution":{"observed_at":"2026-05-12T18:01:44.418514Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Poisonedrag: knowledge corruption attacks to retrieval-augmented generation of large language models","venue":null,"work_id":"0727d1f6-b1c8-42b0-92bb-b723f17956c2","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:d297d05ffd5c4df98fce54462a10eb9f737507b400f9ebd82486b91ec78d3c5b","observation_id":"839c6339-2264-4684-8571-81dd64bbdf25","resolution":{"observed_at":"2026-05-12T18:01:44.413988Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:39cf83c88993f1c29274cdb2d71f12d39b0c478195732fb1dc45fcc7534886f6","observation_id":"a5099ca0-172d-4559-9ecf-798fd181ac5a","resolution":{"observed_at":"2026-05-12T06:56:27.275598Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Poison-rag: Adversarial data poisoning attacks on retrieval-augmented generation in recommender systems","venue":null,"work_id":"aeaa7273-96b1-4071-9306-f6559c2f2f05","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:738f753de4471256b07841f0087c84b2936cdd5e53015dec8fe4504277bd6390","observation_id":"423a914e-a5f2-4af0-a577-9cf8f54c5f7c","resolution":{"observed_at":"2026-05-12T18:01:44.473689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Neurogenpoisoning: Neuron-guided attacks on retrieval-augmented generation of LLM via genetic optimization of external knowledge","venue":null,"work_id":"f62e1bc7-9d1f-4ba6-a97d-89d7b7ae2c71","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:9591163fcb37401a6cf8017b0b5c368808c490e489cd20b2103a085a2a6e4727","observation_id":"d0dda537-668f-4267-805c-b113b7f62666","resolution":{"observed_at":"2026-05-12T18:01:44.339212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Iterative generation of adversarial example for deep code models","venue":null,"work_id":"e6a7d365-5ebb-4570-9180-3ae1fde285da","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:c9de1308b9676fd9210c0a27058e250de870293ed61a6c97a06e26bdd8f739a3","observation_id":"84089e00-73f4-43f6-b1d7-dbf0892b6bac","resolution":{"observed_at":"2026-05-12T18:01:44.438951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-540-28650-9_4","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gaussian Processes in Machine Learning","venue":"Lecture notes in computer science","work_id":"e9212cfc-d01e-4900-a7ac-4ed3f0692384","year":2004},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:bb2c1d7ab3dcec670c67a45e831e94d7b2a7aa874542ce50dd9a1a67f8d95c99","observation_id":"2014e357-d8c8-4549-aa66-b45618bb5223","resolution":{"observed_at":"2026-05-12T03:51:19.597410Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A new view of automatic relevance determination","venue":null,"work_id":"590f5096-128a-4b8d-a35b-94a922b63814","year":2007},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:53c8e489be624dc7982cfd2cd13ebc1279e5a4efa00aab29e1448b548f8b6b20","observation_id":"87c682b4-cde8-41c8-9a40-9885a2fde65b","resolution":{"observed_at":"2026-05-12T18:01:44.385765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"AutoDAN-turbo: A lifelong agent for strategy self-exploration to jailbreak LLMs","venue":null,"work_id":"68b420c3-43ca-4a35-b955-39b989ab8dd2","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:951a4e42f32b009cedab4f3f306f7a842ef450bf0db2593f28817d6dffdbb9cb","observation_id":"09de53e0-b590-4186-b187-2a988ce5e185","resolution":{"observed_at":"2026-05-12T18:01:44.329151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.01059","last_updated":"2025-08-01T20:25:57Z","snapshot_observed_at":"2026-08-06T12:22:28.743019Z","submitted_at":"2025-08-01T20:25:57Z","title":"Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Report","version":1},"cited_work":{"arxiv_id":"2508.01059","doi":"10.48550/arxiv.2508.01059","metadata_source":"arxiv_reference","pith_arxiv_id":"2508.01059","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Llama-3.1-foundationai-securityllm-8b-instruct technical report","venue":"ArXiv.org","work_id":"b11cad22-337f-44b3-9d74-f30d455e8266","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2508.01059","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:4209767d76d68ed4c16549c607957b4a5be97bab596e48d531177b7239519f07","observation_id":"0ee53f36-3144-4772-b3a8-9ad385c8164e","resolution":{"observed_at":"2026-05-12T06:56:27.301526Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.01743","last_updated":"2025-03-07T09:05:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-03T17:05:52Z","title":"Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAs","version":2},"cited_work":{"arxiv_id":"2503.01743","doi":"10.18653/v1/2023.wmt-1.23","metadata_source":"pith","pith_arxiv_id":"2503.01743","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAs","venue":"cs.CL","work_id":"83956045-536a-41ff-af02-b80e2a614eab","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2503.01743","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:fa38d732e88208ac52e6f7668e102258ab10f3490816067dc0c486a9623bdadb","observation_id":"08c5d7b5-7783-402c-9bdf-aa30407e24c6","resolution":{"observed_at":"2026-05-12T06:56:27.312250Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12186","last_updated":"2024-11-12T13:24:25Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-18T17:57:57Z","title":"Qwen2.5-Coder Technical Report","version":3},"cited_work":{"arxiv_id":"2409.12186","doi":"10.48550/arxiv.2409.12186","metadata_source":"pith","pith_arxiv_id":"2409.12186","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Qwen2.5-Coder Technical Report","venue":"cs.CL","work_id":"09ba463d-6377-4017-9801-444ffb94b056","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2409.12186","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:69faee35b25ba71ab62e4be10f512ff30feb02b58792b44935fd2ae947b81089","observation_id":"09636f7c-0041-4159-878a-ce1e238c681b","resolution":{"observed_at":"2026-05-12T06:56:27.247028Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-11T05:18:55.772185+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T05:18:55.772185+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Learning word vectors for 157 languages","venue":null,"work_id":"70121d0a-6d51-42a4-90c7-bbb5eaead95a","year":2018},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:1a2ef5f531ed8926fdaf66c96bd0d23086784eb17a1c009002edd11b855162a6","observation_id":"2d43b353-308d-45a4-898c-0f4f1818ecde","resolution":{"observed_at":"2026-05-12T18:01:44.485721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing the ai agent security scanner for ides","venue":null,"work_id":"3f6ee30e-e6fd-4808-bd2b-180e3179d3a2","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:e9e2d223981f1f90bb4cb28d1aa56b0949f428bf06054055d8cd323bd41d6c66","observation_id":"196841e7-701e-4fbf-9e50-a7f753b497b3","resolution":{"observed_at":"2026-05-12T18:01:44.481657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"(2026) Skillrisk — free ai agent skill security scanner","venue":null,"work_id":"6a1c8510-1818-4c37-819c-7b0821604c23","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:0576c127f7bd0f12eb2b1ab8feda2cbe1d9331d7fe824d4be9c4d385973e4a5d","observation_id":"2624b520-3be1-46f4-a4ed-47da86b5d56e","resolution":{"observed_at":"2026-05-12T18:01:44.453550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Skillcheck by repello ai | ai skill vulnerability scanner","venue":null,"work_id":"97069824-6f47-42c2-be0f-33756a9bbd3f","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:984701e63cb531293d19b349bf8a538e9cd4a19068305498b231ad0007352eff","observation_id":"11f34198-d0af-45e3-80c4-1e3b5838ed0c","resolution":{"observed_at":"2026-05-12T18:01:44.343799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Y ARA: The pattern matching swiss knife for malware researchers","venue":null,"work_id":"98caad79-4bd8-4a0d-8f91-27a1eb709039","year":2013},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:f9963bc72d73f2adefa8d1d8869605c8b916b0efe0b4858fcd7479015d72dae4","observation_id":"23448e4e-936f-4861-b752-08e420c5f79e","resolution":{"observed_at":"2026-05-12T18:01:44.376873Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Snyk agent red teaming","venue":null,"work_id":"cc3efd7c-4fcb-4ac0-930b-0a34831a85b8","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:8c39179cb4210afa7a877fcd4ce71501a6a34223cff11773e139a43f040c18e4","observation_id":"225a3ad0-378c-45ba-a89f-b753c64a1692","resolution":{"observed_at":"2026-05-12T18:01:44.434585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ai agent vulnerabilities — free skill scanner","venue":null,"work_id":"f02fcf9a-578a-4a90-b89f-992fff3be2e0","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:e5066e6a96fe9fb637566281a8b52250c74be86e1f1122b53bf7e9f0c655d4f4","observation_id":"0d1a25d3-e983-4155-a7f3-6579ac6a1fb8","resolution":{"observed_at":"2026-05-12T18:01:44.497204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.21019","doi":"10.48550/arxiv.2603.21019","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Skillprobe: Security auditing for emerging agent skill marketplaces via multi-agent collaboration","venue":"arXiv (Cornell University)","work_id":"3a67ef9c-e986-4e35-a040-69ce0ee8eb67","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:6b2655e96a0083747f994b25e6a3e4b5caeedd7d2d206c65cec4190bd986b52c","observation_id":"b447bf7f-859e-49da-aff9-fd308cae3d88","resolution":{"observed_at":"2026-05-12T06:56:27.226715Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.3390/fi17090412","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Gpt-4.1 sets the standard in automated experiment design using novel python libraries","venue":"Future Internet","work_id":"2a8c4357-40d7-49a5-83f1-5990ac76b32c","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:67fbcbe28480b839ed87add82c087bb9f387a091d03ddf7f84e05e6716b8be18","observation_id":"f50af804-9083-416e-a3a5-f48ab822b033","resolution":{"observed_at":"2026-05-12T03:51:19.611746Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing sandyclaw — the first dynamic sandbox for ai agent skills and prompts","venue":null,"work_id":"d53b6256-ee87-4c72-bdc1-adb3a8de636c","year":2026},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:0007233c8ae9d4f9d8c317caa709065ee3b107ae468a247c194b7f0b3ad341a4","observation_id":"4a3eddc1-f13f-481c-af81-e583f9963d0f","resolution":{"observed_at":"2026-05-12T18:01:44.353342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Openhands: An open platform for AI software developers as generalist agents","venue":null,"work_id":"b8b8aa2d-8a31-49e7-a1ca-ed0a9fad9985","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:8d6c91130e916774aba3a7fbd8968b188741bd5ef4b5cece26d13284717bc24e","observation_id":"3d9a01cc-c020-40aa-945a-ebe29c523442","resolution":{"observed_at":"2026-05-12T18:01:44.372477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On faithfulness and factuality in abstractive summarization","venue":null,"work_id":"3e7fdb09-8299-4dbb-a895-8d61b16a3f35","year":2020},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:82c51371adae8f06ba9ef3d99aa8690f9d8700565877858e5ff9c15ec5f28a81","observation_id":"def3a6a9-7de2-46bd-9d9b-186d0074be54","resolution":{"observed_at":"2026-05-12T18:01:44.362843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A comprehensive survey of hallucination in large language, image, video and audio foundation models","venue":null,"work_id":"8693599e-de86-41f2-bb14-0930559919cf","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:949599f0b232711a26f633a035cd7336ccf3d288b0aae982912ebb4d710ca305","observation_id":"b31f7e1f-156c-4985-9791-f89ecd890940","resolution":{"observed_at":"2026-05-12T18:01:44.323047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding and detecting hallucinations in neural machine translation via model introspection","venue":null,"work_id":"8a391dca-1b32-4469-a2b0-34e5c7e5a171","year":2023},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:b05be0b6e5c43347bf00107237b25b79cb3fbfb58efb7dc09707a9f0a44a16e0","observation_id":"3fca8b82-9649-468b-83e9-32b0e1ba7453","resolution":{"observed_at":"2026-05-12T18:01:44.423493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Donapi: malicious npm packages detector using behavior sequence knowledge mapping","venue":null,"work_id":"48c5456b-0bcc-42c0-bd6f-7217f216ac81","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:6b244fed5d66f813f14902ad6cb10d820aa60c51ee9f53c2ed05c97e8253ae66","observation_id":"a8dceba1-6b56-4227-9f76-716b795ea221","resolution":{"observed_at":"2026-05-12T18:01:44.390269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Journey to the center of software supply chain attacks","venue":null,"work_id":"12120cc5-0e39-4ba9-a32f-df76d0028e69","year":2023},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:7c939fc3b5b497f7c40c7e484d71dfffc252c71f4e69bd4315c20bf970406e11","observation_id":"efcd3c57-9288-43f7-993f-1e2a4bc7981d","resolution":{"observed_at":"2026-05-12T18:01:44.334309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backstabber’s knife collection: A review of open source software supply chain attacks","venue":null,"work_id":"ebac8897-50bf-4339-9f57-651b2954d450","year":2020},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:709a4b64dca47e8bcaa201e446c544f54ea4fd7bf3ee0435e3e192c928ea463c","observation_id":"46db30ba-1785-49ab-894d-4a8f195107ae","resolution":{"observed_at":"2026-05-12T18:01:44.429211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3714464","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Research directions in software supply chain security","venue":"ACM Transactions on Software Engineering and Methodology","work_id":"486dffbb-6157-4920-aa71-42da45a0e811","year":2025},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:426cd58c0b0fcfe0ad572d20e0b7f853daa8e3c6dbe8f82f73d62122c26625be","observation_id":"d261b9b3-fddb-445f-acd1-2533f43ec498","resolution":{"observed_at":"2026-05-12T03:51:19.592134Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ty- posquatting and combosquatting attacks on the python ecosystem","venue":null,"work_id":"5bbe6b2d-01a0-4092-9cf2-79565c06b7c0","year":2020},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:a1b9312facad7d3e3764f2a750e63264ea89d870a327592e84aae4009d3ba987","observation_id":"c9ca2dd7-b104-4393-8817-8b2d3fec836b","resolution":{"observed_at":"2026-05-12T18:01:44.311990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":1,"verified_exact":15,"verified_fuzzy":39},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 1 inbound Pith citation observation for arXiv:2605.09594."}