Paper Citation Record · LEDGER

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections

As of 5 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 0 inbound Pith citation observations for arXiv:2606.12737.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.12737 v1

Coverage vector

measured 35 of 35 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-27T08:56:12.882653Z

measured 35 of 35 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

35 of 35 outbound references displayed

verified exact2
verified fuzzy0
unresolved24
parse uncertain0
malformed identifier0
metadata mismatch9

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 5c121285-e973-4a84-8ebc-9099130fbc11 · outbound

This paper cites Association for Computational Linguistics , year=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Association for Computational Linguistics , year=

Reference 1

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d6a18bd0-8428-4a87-b462-916e121a4760 · outbound

This paper cites International Conference on Machine Learning , year=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections International Conference on Machine Learning , year=

Reference 2

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2371645a-2f15-4006-b514-fed1a00576cc · outbound

This paper cites Findings of the Association for Computational Linguistics: ACL 2024 , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Findings of the Association for Computational Linguistics: ACL 2024 , pages=

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6d113ea4-552b-4f0c-86a2-f63513dc6322 · outbound

This paper cites Advances in Neural Information Processing Systems , volume=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Advances in Neural Information Processing Systems , volume=

Reference 4

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 453a80a3-478c-42bb-ad94-d563c5cea9e6 · outbound

This paper cites AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?

Reference 5

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T12:38:07.258901Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation e2f158fa-4308-4b25-bd65-6689adc83a07 · outbound

This paper cites Findings of the Association for Computational Linguistics: EACL 2026 , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Findings of the Association for Computational Linguistics: EACL 2026 , pages=

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a0f72eda-bc89-491e-9fc9-620947e6c823 · outbound

This paper cites Automated Red Teaming with GOAT: the Generative Offensive Agent Tester.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Automated Red Teaming with GOAT: the Generative Offensive Agent Tester

Reference 7

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T12:38:07.284216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 545c8d09-380b-4f73-831b-cac4e8ba3d02 · outbound

This paper cites International Conference on Machine Learning , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections International Conference on Machine Learning , pages=

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4856e421-a6d5-446c-9c56-5771917946b3 · outbound

This paper cites Findings of the Association for Computational Linguistics: EACL 2026 , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Findings of the Association for Computational Linguistics: EACL 2026 , pages=

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dfcc6f51-57dc-4e3a-8e8e-805afabfbebd · outbound

This paper cites Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security , pages=

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ba43d2bc-0732-428f-af57-58f67d417352 · outbound

This paper cites Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 97103400-c4e7-4626-a3f1-e91c74dfa137 · outbound

This paper cites IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems

Reference 12

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T12:38:07.278674Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 7f9b3955-df97-48a9-9bc5-e7371d6bf0ec · outbound

This paper cites International Conference on Machine Learning , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections International Conference on Machine Learning , pages=

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2632bc97-ee8f-4d77-8d96-5149ff90538b · outbound

This paper cites International Conference on Learning Representations (ICLR) , year =.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections International Conference on Learning Representations (ICLR) , year =

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 25dd0661-376b-4107-80b3-3f55ea94993b · outbound

This paper cites Findings of the Association for Computational Linguistics: EMNLP 2025 , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Findings of the Association for Computational Linguistics: EMNLP 2025 , pages=

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d69472a5-10fd-4664-9454-a7e09fc40710 · outbound

This paper cites First conference on language modeling , year=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections First conference on language modeling , year=

Reference 16

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 82c0468b-402c-4428-b805-c6acdccda38a · outbound

This paper cites Advances in neural information processing systems , volume=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Advances in neural information processing systems , volume=

Reference 17

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 16be4640-2ecf-47f2-816c-968f44e0088d · outbound

This paper cites an unresolved cited work.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 41d63c5a-8b8d-470d-82cc-200c57f6b1bf · outbound

This paper cites Meta secalign: A secure foundation llm against prompt injection attacks.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Meta secalign: A secure foundation llm against prompt injection attacks

Reference 19

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T12:38:07.263610Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 6c7b0acf-fadd-451d-9848-3d07c6ad974c · outbound

This paper cites Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=

Reference 20

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 557b9231-16e0-4ea4-a9e8-30c0b1312256 · outbound

This paper cites arXiv preprint arXiv:2601.07072 , year=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections arXiv preprint arXiv:2601.07072 , year=

Reference 21

Resolution: verified exact; arxiv_id, observed 2026-07-03T12:38:07.256292Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 9a587471-6211-45d8-ab08-d953df34a513 · outbound

This paper cites Agentsentry: Mitigating indirect prompt injection in llm agents via temporal causal diagnostics and context purification.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Agentsentry: Mitigating indirect prompt injection in llm agents via temporal causal diagnostics and context purification

Reference 22

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T12:38:07.284412Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation cb8bd580-2e71-40ec-985f-74eab42d4415 · outbound

This paper cites International Conference on Machine Learning , year=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections International Conference on Machine Learning , year=

Reference 23

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cc69a8d3-0cc5-498a-b177-ead2f3dc4b64 · outbound

This paper cites Advances in neural information processing systems , volume=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Advances in neural information processing systems , volume=

Reference 24

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f596ae5b-adbd-49ec-b680-a296102f6e40 · outbound

This paper cites Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing , pages=

Reference 25

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 966a5405-3867-46ea-a606-39276777ca8c · outbound

This paper cites International Conference on Learning Representations , volume=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections International Conference on Learning Representations , volume=

Reference 26

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b469f583-b834-415a-962e-55bb28df5516 · outbound

This paper cites arXiv preprint arXiv:2510.04550 , year=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections arXiv preprint arXiv:2510.04550 , year=

Reference 27

Resolution: verified exact; arxiv_id, observed 2026-07-03T12:38:07.271260Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation d3594358-41db-416a-ba7e-17f323c11cce · outbound

This paper cites AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents

Reference 28

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T12:38:07.269748Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation f89385cc-af4f-4ee2-a0b7-55c7ba2286d2 · outbound

This paper cites Advances in Neural Information Processing Systems , volume=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Advances in Neural Information Processing Systems , volume=

Reference 29

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ec49e397-c55b-457f-a4e5-b9789846b29a · outbound

This paper cites Defending Against Indirect Prompt Injection Attacks With Spotlighting.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Defending Against Indirect Prompt Injection Attacks With Spotlighting

Reference 30

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T12:38:07.272521Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 16b343e7-16b4-48b3-a404-2b640ce553e4 · outbound

This paper cites 33rd USENIX Security Symposium (USENIX Security 24) , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections 33rd USENIX Security Symposium (USENIX Security 24) , pages=

Reference 31

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dd1de3f3-e303-4ea7-a748-b0fb390096e8 · outbound

This paper cites Automatic and Universal Prompt Injection Attacks against Large Language Models.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Automatic and Universal Prompt Injection Attacks against Large Language Models

Reference 32

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T12:38:07.281630Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 00cbc131-51a6-455a-af60-88cdafaf5b2d · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Prompt Injection attack against LLM-integrated Applications

Reference 33

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T12:38:07.287324Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 8368a9ba-5602-4185-8e9b-d4e3baecaa43 · outbound

This paper cites Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5ab27242-5c25-4a24-971c-fff321503819 · outbound

This paper cites Findings of the Association for Computational Linguistics: EACL 2026 , pages=.

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections Findings of the Association for Computational Linguistics: EACL 2026 , pages=

Reference 35

Resolution: unresolved; no resolver link, observed 2026-06-27T08:56:12.882653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.