Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-02T12:27:02.083053Z
Paper Citation Record · LEDGER
What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection
As of 6 August 2026, this Paper Citation Record lists 5 of 5 outbound references and 0 inbound Pith citation observations for arXiv:2606.04425.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-06T06:34:29.942622+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
Reference resolution
5 of 5 outbound references displayed
- verified exact0
- verified fuzzy0
- unresolved5
- parse uncertain0
- malformed identifier0
- metadata mismatch0
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation 1b6d5cb7-5e89-403b-bb2b-7cc24d4a34bd · outbound
This paper cites Agent-SafetyBench: Evaluating the Safety of LLM Agents.
What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection Agent-SafetyBench: Evaluating the Safety of LLM Agents
Reference 5
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T12:27:02.083053Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c160bd5d-7c7c-49ae-8e2a-81a0c1c23dd1 · outbound
This paper cites an unresolved cited work.
What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection Unresolved cited work
Reference 2023
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T12:27:02.068297Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3aa17e27-0348-45b8-867c-0363eb046fb5 · outbound
This paper cites MemGPT: Towards LLMs as Operating Systems.
What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection MemGPT: Towards LLMs as Operating Systems
Reference 2024
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T12:27:02.078421Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 748225de-ec17-408a-b1e9-d6b51bef3a87 · outbound
This paper cites MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security.
What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security
Reference 2025
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T12:27:02.072919Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3cf5d80f-713f-4541-a8d0-b2ec472fd399 · outbound
This paper cites InThe Thirty-ninth Annual Conference on Neural Information Processing Sys- tems.
What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection InThe Thirty-ninth Annual Conference on Neural Information Processing Sys- tems
Reference 2026
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T12:27:02.063087Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Pith citing papers
No inbound Pith citation observations are available.