{"as_of":"2026-08-07T10:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:65ad0d03561ee27c160d270dcf9c47073f6ce4ad275b858bc7fdcbda11035e61","coverage":[{"denominator":8,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T11:51:14.939425Z","state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-01T00:27:42.245909Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T06:59:37.263500Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"cited_work":{"arxiv_id":"2605.28588","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.28588","snapshot_observed_at":"2026-07-04T06:59:37.263500Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","venue":"cs.CR","work_id":"0a9058c5-b1c0-4172-bdbb-0661eab8cb23","year":2026},"citing_paper":{"arxiv_id":"2605.03353","last_updated":"2026-06-03T02:50:21Z","snapshot_observed_at":"2026-07-06T23:16:15.509235Z","submitted_at":"2026-05-05T04:15:48Z","title":"SkCC: Portable and Secure Skill Compilation for Cross-Framework LLM Agents","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-01T00:27:42.245909Z"},"links":{"cited_paper":"/paper/2605.28588","citing_paper":"/paper/2605.03353"},"observation_digest":"sha256:80db3bf3b349494c409993139b3da92ed592190d6c4eac9ec7552f372e382838","observation_id":"06f3f556-c465-4de3-815a-6e0984d5ca83","resolution":{"observed_at":"2026-07-01T00:35:10.388567Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"cited_work":{"arxiv_id":"2605.28588","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.28588","snapshot_observed_at":"2026-07-04T06:59:37.263500Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","venue":"cs.CR","work_id":"0a9058c5-b1c0-4172-bdbb-0661eab8cb23","year":2026},"citing_paper":{"arxiv_id":"2606.21071","last_updated":"2026-06-19T03:40:00Z","snapshot_observed_at":"2026-08-06T19:34:26.539767Z","submitted_at":"2026-06-19T03:40:00Z","title":"Local LLM Agents as Vulnerable Runtimes:A Source-Code Audit of the Agent Runtime Layer","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T14:02:37.404821Z"},"links":{"cited_paper":"/paper/2605.28588","citing_paper":"/paper/2606.21071"},"observation_digest":"sha256:d7553b2e1f0859d797f00e51afc3a4ffb8d90bc2d47d50691d26ed0fbc9237ba","observation_id":"09f56075-0c82-46aa-b636-b10c44a023ef","resolution":{"observed_at":"2026-07-04T06:59:37.264746Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2605.28588/citation-record","integrity":"/paper/2605.28588/integrity","json":"/paper/2605.28588/citation-record.json","paper":"/paper/2605.28588"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"toxic flows,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:28611498b0ad94df517ddcca841abf498063abfe6aa24b3ddd4b354348abba4f","observation_id":"2f0aa0dc-27a0-4ff0-8f48-a8607fd05791","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:ab4cae28cb7893c7a7746b0e86de3a3b6d6542ce19e8989b4f69c0b6cd02a0a5","observation_id":"88165b43-c856-418d-8cbf-0d899a8d2264","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Github mcp exploited: Accessing private repositories via mcp","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:c892171534fd78f1433414e95a6c43691ebd2a3118a141ff788c0ea3a9f69ac9","observation_id":"1a5d0f70-1337-4666-9d13-1d9a6d451442","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Clawdbot skills ganked your crypto","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:729ee07d96ee76bdd91e0c4de33c617337b36451c18e7222ed395f43a34f17d2","observation_id":"a2fc3971-a034-4454-9f46-17508c8757ca","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Superhuman AI exfiltrates emails","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:cd2016b79ceeecf1d89f1a1083ea860eba732fc46175a3cebccbfec4fed93255","observation_id":"851a70e4-26ae-49b1-88fc-ab6c3a789668","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.26328","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T15:48:35.870152Z","title":"Agent skills enable a new class of realis- tic and trivially simple prompt injections","venue":null,"work_id":"8dfc4a7d-02a6-4eb8-9562-49d4fcee1395","year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:88a58d4101deae6042382fd38a1dc3421ad688c73e1d1cf7cdbbe621627209b1","observation_id":"9ad1ae7f-ed32-417b-9cca-bfd2310c9a1c","resolution":{"observed_at":"2026-06-29T11:53:23.635900Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Inside the ‘clawdhub’ malicious campaign: AI agent skills drop reverse shells on OpenClaw marketplace","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:d6eccdf212ba4db62fcfd745360473a45318c8a1a82372aff91fa6fc3ee8b73a","observation_id":"a0369966-f29a-48b6-b32b-833a4f1e8c7a","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"The lethal trifecta","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:1a5a451b7c82e3c88e740815e7c468e715bff6a7d9569459cfc6b0df2bda55e6","observation_id":"936ddadc-bbca-4e7f-bf7c-43fb7e50032f","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-01T04:54:18.636366Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem"},"reference_resolution":{"displayed":8,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":8},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 8 of 8 outbound references and 2 inbound Pith citation observations for arXiv:2605.28588."}