Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-06-26T20:19:00.978843Z
Paper Citation Record · LEDGER
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems
As of 6 August 2026, this Paper Citation Record lists 9 of 9 outbound references and 2 inbound Pith citation observations for arXiv:2606.19191.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-06T06:34:29.942622+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-07-12T08:09:57.596812Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-07-03T10:37:56.247247Z
Reference resolution
9 of 9 outbound references displayed
- verified exact0
- verified fuzzy0
- unresolved9
- parse uncertain0
- malformed identifier0
- metadata mismatch0
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation 1b78bb6f-a13f-404e-b3be-c9634ec5ab53 · outbound
This paper cites an unresolved cited work.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems Unresolved cited work
Reference 1
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a0b5fe6b-3170-4b4f-b7f4-7d55685164e8 · outbound
This paper cites 2026 , langid =.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems 2026 , langid =
Reference 2
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 008b84ae-c7e8-4873-8976-14916e21a89e · outbound
This paper cites Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks , url =.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks , url =
Reference 3
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 25366112-f47c-4a1f-9d2a-22f3426ef987 · outbound
This paper cites Supply-Chain Poisoning Attacks Against.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems Supply-Chain Poisoning Attacks Against
Reference 4
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e3ca334a-24fc-419d-99a3-84dfb2530103 · outbound
This paper cites 2024 , address =.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems 2024 , address =
Reference 5
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4d16579d-e443-4af6-b10a-9769e13a0488 · outbound
This paper cites Not What You've Signed Up For: Compromising Real-World.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems Not What You've Signed Up For: Compromising Real-World
Reference 6
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 50555fcc-fdfc-4481-b11f-d6c7be8c6cda · outbound
This paper cites 2025 , month = oct, url =.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems 2025 , month = oct, url =
Reference 7
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 63d4be86-c37a-4e9d-b234-cf35e2f7dd1f · outbound
This paper cites 2025 IEEE Conference on Software Testing, Verification and Validation (ICST) , pages=.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems 2025 IEEE Conference on Software Testing, Verification and Validation (ICST) , pages=
Reference 8
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 077b3102-f85e-45c5-b60c-da2ba763147f · outbound
This paper cites 33rd USENIX Security Symposium (USENIX Security 24) , pages=.
PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems 33rd USENIX Security Symposium (USENIX Security 24) , pages=
Reference 9
- Resolution
- unresolved
- no resolver link, observed 2026-06-26T20:19:00.978843Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Pith citing papers
Observation 1e9637f5-625c-406d-9ad6-0087454528a9 · inbound
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware cites this paper.
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems
Reference 32
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T10:37:56.248634Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 14a3c071-386d-4755-b5f2-aab74bc3ff59 · inbound
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware cites this paper.
Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems
Reference 32
- Resolution
- unresolved
- no resolver link, observed 2026-07-12T08:09:57.596812Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.