{"as_of":"2026-08-05T07:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:71454f1233d159b805e2337e60a5f54bd87c379a6181d707eff612bd495b8dc5","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T18:32:00.165926Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T05:57:57.944366Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"cited_work":{"arxiv_id":"2606.03024","doi":"10.48550/arxiv.2606.03024","metadata_source":"pith","pith_arxiv_id":"2606.03024","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","venue":"cs.CR","work_id":"4c5e0091-7b61-44ad-8576-1c306421d63e","year":2026},"citing_paper":{"arxiv_id":"2607.14155","last_updated":"2026-07-14T18:56:38Z","snapshot_observed_at":"2026-08-04T12:03:17.624286Z","submitted_at":"2026-07-14T18:56:38Z","title":"Beyond Object Validation: Relational Conformance in Multi-Artifact Agent Releases","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T05:57:57.944366Z"},"links":{"cited_paper":"/paper/2606.03024","citing_paper":"/paper/2607.14155"},"observation_digest":"sha256:ae3a2f25f9a7b51d72a0cb2b94221b89d6fc9938e8b582eddd700419ff6e661b","observation_id":"68fa35ea-aeec-499c-a1b8-903b7d78679f","resolution":{"observed_at":"2026-08-02T05:58:23.229854Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.03024","snapshot_observed_at":"2026-07-30T18:16:46.100021Z","title":"Skillguard: A permission-centric framework for agent skill security,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.23586","last_updated":"2026-07-26T10:29:20Z","snapshot_observed_at":"2026-08-03T02:20:43.034604Z","submitted_at":"2026-07-26T10:29:20Z","title":"Are You Still the Agent I Authorized? Earned Authority under a Fixed Ceiling for Evolving Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-30T18:16:46.100021Z"},"links":{"cited_paper":"/paper/2606.03024","citing_paper":"/paper/2607.23586"},"observation_digest":"sha256:5ca99acbf931818effc2d02037a879e730b00582ac3f1fef7aaacfdcbf404da1","observation_id":"4acbc9e8-ce75-4b7c-b3e4-98228a1641ad","resolution":{"observed_at":"2026-07-30T18:16:46.100021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2606.03024/citation-record","integrity":"/paper/2606.03024/integrity","json":"/paper/2606.03024/citation-record.json","paper":"/paper/2606.03024"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":"Agent Skills Marketplace","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:bcf4bb14b1ab25d736ef3441022ee4a4b7dc569dfbef2160d31dfb6fd909d947","observation_id":"e1e02ba5-725f-4890-87ce-89e16aa46a82","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":"The Artifacts of SkillGuard","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:9fa4356d090a01f724a02551c68deb2b3ae72e7be29771069003d66c88e3c729","observation_id":"55739e06-4a30-4062-a483-a7989e6ba216","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:dafe1c69e110fdd43ff17bc81a00a53665dedcd86d93e1137a4fbc86d2a54377","observation_id":"71b22992-514c-41ed-a12f-a0fdf21533e5","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:474955c37847562b9606a4cd9e887749a89fa3fee3c7458b7014e4da65540a91","observation_id":"21a983b9-4580-4315-82b0-afb7f2436a92","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:8d7c4c40fbf141bac7738da47f23340a21c3248beec2642ed0c9e96d14b37c18","observation_id":"573ef7b0-0003-493c-9c05-f781429ae63c","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:07e57bcb78e7274a27627bdd7d46373093de81ee3abeda76141575be8b500993","observation_id":"05ca16cd-11a4-46e7-a76f-6edeb97ef918","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:e88f414c59f3b2a02f95d66eb3c016d0d6ceac9f7c28d146b343b657cc7e6e46","observation_id":"86853716-2a26-4e8e-a65c-f1f3e1153eab","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:5653435998290fea61c26e0350cddb78eb68293a9cc41da108125559758bb5ca","observation_id":"0179fcfa-d2aa-490c-acf6-d4e995eb51ae","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:fbaddd5a5d28c85dd2b3172847f1632c79e67b86b0993d49f9b9d17a6faf50a9","observation_id":"5542bc3e-7415-4e21-a4f5-99dc34860483","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:f2e5df5e5e99b61d07a2c2505add2d6dfc6507b39914cbbe34fb3907ef47e5f5","observation_id":"aa5b13ed-a9df-4fc7-a5a3-489113311663","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:ed1720b50f6474f52fbf7a56c01e71422222e42852bb81a5bac5b5b4d6be0a28","observation_id":"c8a1a911-e65f-420a-8463-f4a37d3711aa","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:ab6317ba4acfd204688332d561134e291b4b28e12563073c5418423228d0ae5a","observation_id":"33d5891e-c3f6-422d-87b3-77e76f4f274c","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.06550","last_updated":"2026-07-27T11:35:54Z","snapshot_observed_at":"2026-08-02T16:40:49.970902Z","submitted_at":"2026-04-08T00:58:48Z","title":"SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.06550","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2604.06550","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:bb327355f51a423a2dfe215a6f67610211d20c10041f0a95a883ec2578c2299c","observation_id":"bb5deb8d-f0bb-4df0-b17a-0f981f72576b","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:c5385bd7917ba4749bdd561ce7397e51ece7fd6093b2a47b827ead0bc8f5cebc","observation_id":"e6cee06c-4193-4cbf-a954-8cff83b72ce3","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.20867","last_updated":"2026-02-24T13:11:38Z","snapshot_observed_at":"2026-07-29T17:42:23.433838Z","submitted_at":"2026-02-24T13:11:38Z","title":"SoK: Agentic Skills -- Beyond Tool Use in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.20867","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2602.20867","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:9c73c34fafa221d6f2a23dbf7446ee231559b3993d6d0692b9ebbc7936b48570","observation_id":"eb42ca9a-e468-45cb-8f3d-12a470cc8c34","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":1977},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:9d08c22572dc364ce01bf4588e74001b0ba0cd8cf6ec68346e417ddc9eaedec0","observation_id":"83ff9e6a-b3d5-4d2f-8103-e5e1085c9d39","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.12670","last_updated":"2026-03-13T07:33:01Z","snapshot_observed_at":"2026-07-06T22:45:44.135338Z","submitted_at":"2026-02-13T07:06:06Z","title":"SkillsBench: Benchmarking How Well Agent Skills Work Across Diverse Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.12670","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2602.12670","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:8eb989c7023b1ab1bb0cb1d00ca3100ba293ebc46f88e845896b8c6c4f34a068","observation_id":"8a417f57-4495-46eb-aa93-a68084c855d9","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:7ffe923a2185b402e62491b763670df73ad1d2a152472b5aa89b1150fd3fe27a","observation_id":"b3976f15-46a6-4464-ab6f-44dfecb5ae0d","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:d2cfb421360bc3aa28da296eccfa98a2a9df65288aabb8d3eedc38075037a19b","observation_id":"bd3c8653-aee3-45fe-ae93-2e4db5f5aa41","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.06547","last_updated":"2026-06-10T03:31:37Z","snapshot_observed_at":"2026-08-03T04:00:06.220291Z","submitted_at":"2026-02-06T09:52:27Z","title":"\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.06547","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2602.06547","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:0953d50ad14ea02c7272bdeae63dc7b55d6311e550b028ad6e937f76abb60511","observation_id":"a8a574c9-8103-4c40-8438-0549e96ef8b0","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:f20d1fa8d9c04b8f4d69331199f1b31de7fbf89fd3f7a0a9e65f2ed966a2f485","observation_id":"acc3d7d8-4dae-4ef7-8a99-b47715cf4738","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:c503e57342f9aff899691b8b72d07ac7350ddaf34727886f18bbbdccce9301d3","observation_id":"dec914d9-3d72-4086-a95c-a2c506123eb0","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.25723","last_updated":"2026-05-18T07:29:29Z","snapshot_observed_at":"2026-08-02T12:44:43.781421Z","submitted_at":"2026-03-26T17:58:15Z","title":"Natural-Language Agent Harnesses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.25723","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2603.25723","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:99c0a2b216980bc4806979afb255222ef6b1b065384f1c2bbeadf9cac5e5380a","observation_id":"ebf65c6b-e09b-4437-a4af-2ed4ec403f3b","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:a288fbe877f0f605b0971cab2488dd8712f7bfc7c5b071d071b8e53ada6342f6","observation_id":"eb885315-5af0-4766-b5bc-b6996fa7fc94","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-04T11:49:52.391715Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:7821ef35f8f0fdd748d4b5c8d759889d5806127eb8145b43533b973b4e51731d","observation_id":"0630ce27-3064-4342-867f-fb508648cff4","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:a0d680dcaa02f6e3504e843478f80c9a8ed54635df3376ea30e2877111adea27","observation_id":"d96867f0-1db2-499e-9a03-e6e2e0532ee1","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.20156","last_updated":"2026-02-25T18:14:01Z","snapshot_observed_at":"2026-08-03T01:14:27.800784Z","submitted_at":"2026-02-23T18:59:27Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.20156","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2602.20156","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:95c1825ddd7ef0b4988d9dc7b68bb76a9dcae59df4d2877133d7a3fa1e28ac9e","observation_id":"b69587b1-0b9f-4fac-a676-a1550d30bb7e","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10844","last_updated":"2023-10-16T21:37:24Z","snapshot_observed_at":"2026-07-06T16:34:11.453458Z","submitted_at":"2023-10-16T21:37:24Z","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10844","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":"Abdullah AL Mamun, Yu Fu, Pedram Zaree, Yue Dong, and Nael B","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2310.10844","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:cdcf68bd5d09645ae19f5db5927ebdae62aa2785518ee84bb176640b0611a380","observation_id":"b0e5784f-0ab3-4c41-a731-8912067b9e97","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:a5a6617bfa9601d1178b74d6d4c94f8811db2249152bb58e8a30cff70fca08c4","observation_id":"33c0e9fe-4127-4a3b-82a8-11e23e71d279","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:a7ac820614d95c406f8b51001383a3ac311f9c781f92992f05269608c76beefe","observation_id":"7f098ddb-360a-4a94-8bd8-6d27ef6568e8","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:ae0586a607c0c106893993347e6e6abe3200f3b8e557a238e3b0d5248e920800","observation_id":"e712d684-a1f2-4f02-99dc-b62cc2d48579","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.09378","last_updated":"2026-04-10T14:48:29Z","snapshot_observed_at":"2026-07-06T22:58:17.167367Z","submitted_at":"2026-04-10T14:48:29Z","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.09378","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2604.09378","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:2dad32ad2bb1caca1028e772678db0af059974db1b7cf6d0b9f1815661cbe0d6","observation_id":"7e464c39-0399-4c75-a2b2-001db1830607","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:0ce87d4ea22e5cfb9d0c77a5a535bf31260292d5839ac211e9ff5df7119af642","observation_id":"6af6906a-d2be-4195-b71a-577ba4400366","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:bfa4fe50acf80401b3d09add3936ebe03cac56c48370d554c8aff521da198fc4","observation_id":"8688d176-47b1-40d6-9cc3-2e69840fb172","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:30bbda4b1deb2f54ab8c94ff2286dc441caf891f2ade33242a25a508a2f8a777","observation_id":"1e14de9e-8c68-4336-875f-cfc5b82ef2b9","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.08224","last_updated":"2026-04-09T13:19:41Z","snapshot_observed_at":"2026-08-02T22:56:00.067549Z","submitted_at":"2026-04-09T13:19:41Z","title":"Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.08224","snapshot_observed_at":"2026-07-14T18:32:00.165926Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-14T18:32:00.165926Z"},"links":{"cited_paper":"/paper/2604.08224","citing_paper":"/paper/2606.03024"},"observation_digest":"sha256:7d43b4f94d28de79e617322d5e742e7a04e555b176eaea4e955907b91207a8dd","observation_id":"39e2011c-090a-42f1-b9a9-b8b4deef2b03","resolution":{"observed_at":"2026-07-14T18:32:00.165926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.03024","last_updated":"2026-07-13T09:09:56Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-03T09:57:52.601562Z","submitted_at":"2026-06-02T02:01:53Z","title":"SkillGuard: A Permission-Centric Framework for Agent Skill Security"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":36,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 2 inbound Pith citation observations for arXiv:2606.03024."}