Paper Citation Record · LEDGER

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents

As of 11 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2606.13385.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.13385 v1

Coverage vector

measured 42 of 42 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-27T06:20:04.789341Z

measured 42 of 42 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

42 of 42 outbound references displayed

verified exact22
verified fuzzy0
unresolved19
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation a5d5d9a8-a372-4c72-981d-e893a004a023 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 1

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2cdcf74c-44f1-43cc-a843-76d53ef790bf · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2574e85c-ee2b-42b3-847c-e127e638e12f · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 84058bde-abdd-46c2-9f70-e575f69f105c · outbound

This paper cites Zheng, B.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Zheng, B

Reference 4

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e2a1b1ae-6fff-490e-b9e5-c29ff0ae78ae · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e59577a3-d92b-4562-bfdd-d95e7ac31123 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4e322c11-3acb-4d0e-a7b4-cee20401cb7b · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Ignore Previous Prompt: Attack Techniques For Language Models

Reference 7

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.872170Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation bdb17c56-6f85-453d-b0dc-b71d1c37209b · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 932c5dea-7d2c-4be0-a881-d4c57d4108f2 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d6774961-b2fd-4818-b864-9ee8b0cdb829 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 932db100-12dd-425c-9f95-22a10706fbb2 · outbound

This paper cites Agent skills enable a new class of realis- tic and trivially simple prompt injections.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Agent skills enable a new class of realis- tic and trivially simple prompt injections

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.871466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation feca9d20-b067-4135-afa2-fb5e6e604f1d · outbound

This paper cites Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks

Reference 12

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.884551Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 89d15486-efc0-42b6-9f53-cec4f30be0cf · outbound

This paper cites Identifying the Risks of LM Agents with an LM-Emulated Sandbox.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Identifying the Risks of LM Agents with an LM-Emulated Sandbox

Reference 13

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.866785Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 5649493c-6fb9-4c0a-99c3-fd1d0f6f4ac0 · outbound

This paper cites Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.889462Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a21e458c-fd05-4bf8-ba53-82387161c6db · outbound

This paper cites Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.877012Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 6ac1b8d2-3149-4362-adf8-b998fb7df876 · outbound

This paper cites Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents

Reference 16

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.862017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 7a7d5677-42de-4852-adc9-ef8a4336dca5 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1b0591c1-fdaa-4674-b416-0a49f369a43f · outbound

This paper cites ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents

Reference 18

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.887057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 4e304293-76e4-4bef-8d54-476547156fff · outbound

This paper cites AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?

Reference 19

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.874723Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 6881cd78-dcdb-4fb2-8321-c269600d4ee9 · outbound

This paper cites When ai meets the web: Prompt injection risks in third-party ai chatbot plugins.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents When ai meets the web: Prompt injection risks in third-party ai chatbot plugins

Reference 20

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.869731Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation d7b860bd-8f5b-4709-86aa-4511ee66deb3 · outbound

This paper cites DeepShop: A Benchmark for Deep Research Shopping Agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents DeepShop: A Benchmark for Deep Research Shopping Agents

Reference 21

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.854474Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a9455e81-67bc-4528-85e6-2190f6d19e18 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a4d57e5-2e25-4446-a9b9-08e7d43a8b95 · outbound

This paper cites ReAct: Synergizing Reasoning and Acting in Language Models.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents ReAct: Synergizing Reasoning and Acting in Language Models

Reference 23

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.876358Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation bebd4911-be81-46f7-a833-382a4accfa43 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 24

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2d6bc6a3-6e4f-45ef-b340-92634f7ca883 · outbound

This paper cites WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks

Reference 25

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.882057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 964f32a0-2771-46da-bce4-0f5fcbe2ee67 · outbound

This paper cites A Real-World WebAgent with Planning, Long Context Understanding, and Program Synthesis.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents A Real-World WebAgent with Planning, Long Context Understanding, and Program Synthesis

Reference 26

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.839441Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation dbe77841-d356-43a0-8650-63e14caaef1c · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 391980d0-3530-4548-b706-a364ae10fb7e · outbound

This paper cites Greshake, S.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Greshake, S

Reference 28

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7032f6e5-119e-42db-8f6d-d331ad0a39d6 · outbound

This paper cites Prompt Injection Attack to Tool Selection in LLM Agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Prompt Injection Attack to Tool Selection in LLM Agents

Reference 29

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.839231Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 324a9997-05b4-47e4-bbf3-1103c7cc25ba · outbound

This paper cites arXiv preprint arXiv:2602.10453 , year=.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents arXiv preprint arXiv:2602.10453 , year=

Reference 30

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.841681Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 2a182045-cd18-4642-ab45-61bc7a646b1a · outbound

This paper cites Agentdam: Privacy leakage evaluation for autonomous web agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Agentdam: Privacy leakage evaluation for autonomous web agents

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.851858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation d67f0b93-7014-4a46-a52a-daa165c2575f · outbound

This paper cites Os-harm: A benchmark for measuring safety of computer use agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Os-harm: A benchmark for measuring safety of computer use agents

Reference 32

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.857190Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation f55c4194-4fdc-45b9-a517-bfcd0fd8a33a · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 33

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 47eea026-877a-471c-b005-96cd06cbc16a · outbound

This paper cites Debenedetti, J.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Debenedetti, J

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ae28ef6e-c7e0-43e4-bac7-60e3e5c919e2 · outbound

This paper cites Muzzle: Adaptive agentic red-teaming of web agents against indirect prompt injection attacks.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Muzzle: Adaptive agentic red-teaming of web agents against indirect prompt injection attacks

Reference 35

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.850791Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 4c0fd225-4075-4993-bdc6-d4979a9bdaf8 · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 36

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 67cf293c-2fb8-4f11-b524-760478c2ea2c · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 37

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aeb698de-98e8-480b-9b20-8dfe3bd6cdab · outbound

This paper cites OpenAI GPT-5 System Card.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents OpenAI GPT-5 System Card

Reference 38

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.879733Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 4c3f2ec1-1149-40ed-a327-bffe52f74b6b · outbound

This paper cites Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities

Reference 39

Resolution: verified exact; local_arxiv, observed 2026-07-03T15:48:35.859711Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 96bad086-12c2-42ba-b5ae-69be35cb8f96 · outbound

This paper cites Dissecting Adversarial Robustness of Multimodal LM Agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Dissecting Adversarial Robustness of Multimodal LM Agents

Reference 40

Resolution: verified exact; arxiv_id, observed 2026-07-03T15:48:35.844469Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 6707b23c-76b7-4b1e-a20d-10a117570cde · outbound

This paper cites an unresolved cited work.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents Unresolved cited work

Reference 41

Resolution: unresolved; no resolver link, observed 2026-06-27T06:20:04.789341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ec4932f7-6021-494a-86eb-1c3333332a4e · outbound

This paper cites WebArena: A Realistic Web Environment for Building Autonomous Agents.

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents WebArena: A Realistic Web Environment for Building Autonomous Agents

Reference 42

Resolution: malformed identifier; local_arxiv, observed 2026-07-03T15:48:35.869073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Pith citing papers

No inbound Pith citation observations are available.