{"as_of":"2026-08-06T16:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3333e1446dc26c477a11170ff399ba4d7472be417390af9f4a31b636b20c6d4a","coverage":[{"denominator":9,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T20:19:00.978843Z","state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-12T08:09:57.596812Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-03T10:37:56.247247Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"cited_work":{"arxiv_id":"2606.19191","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.19191","snapshot_observed_at":"2026-07-03T10:37:56.247247Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","venue":"cs.CR","work_id":"7ae8faf3-a7b7-479a-99cc-556365a5ac42","year":2026},"citing_paper":{"arxiv_id":"2607.02357","last_updated":"2026-07-03T12:34:17Z","snapshot_observed_at":"2026-08-05T08:09:13.571599Z","submitted_at":"2026-07-02T16:00:52Z","title":"Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-03T10:28:59.762796Z"},"links":{"cited_paper":"/paper/2606.19191","citing_paper":"/paper/2607.02357"},"observation_digest":"sha256:10efaf56b720204c267a27972cbca3c8d65090b9489ab19cb87cdba0ca376b42","observation_id":"1e9637f5-625c-406d-9ad6-0087454528a9","resolution":{"observed_at":"2026-07-03T10:37:56.248634Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.19191","snapshot_observed_at":"2026-07-12T08:09:57.596812Z","title":"PhantomSkill: Malicious code injection in agent skill ecosystems,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.02357","last_updated":"2026-07-03T12:34:17Z","snapshot_observed_at":"2026-08-05T08:09:13.571599Z","submitted_at":"2026-07-02T16:00:52Z","title":"Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-12T08:09:57.596812Z"},"links":{"cited_paper":"/paper/2606.19191","citing_paper":"/paper/2607.02357"},"observation_digest":"sha256:4bca76b0922137f43adbe77bf2f7f143f4058354abaae8c94c16c3e2d24367a9","observation_id":"14a3c071-386d-4755-b5f2-aab74bc3ff59","resolution":{"observed_at":"2026-07-12T08:09:57.596812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2606.19191/citation-record","integrity":"/paper/2606.19191/integrity","json":"/paper/2606.19191/citation-record.json","paper":"/paper/2606.19191"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:ed43ebc98ea8c057afeec9fc41a888c2caf951b30a8c51d2a37d6d6ec5968ca9","observation_id":"1b78bb6f-a13f-404e-b3be-c9634ec5ab53","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"2026 , langid =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:854624f1fb930ac4a76c9b4164439b2847994e390af833de27f8aca750c4fbf5","observation_id":"a0b5fe6b-3170-4b4f-b7f4-7d55685164e8","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks , url =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:c95c35b24cbb65d1e9bad2ac5750729eda0bd79cd5c08c07b8293e6eae18ca1c","observation_id":"008b84ae-c7e8-4873-8976-14916e21a89e","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"Supply-Chain Poisoning Attacks Against","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:8cb66e0f2e3dc78bef0dae30f1a546e231f9ecd52d883bbc21f99d33b685199c","observation_id":"25366112-f47c-4a1f-9d2a-22f3426ef987","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"2024 , address =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:d619321a4d81ea41c907381acc319af91476eeac73cd588814e95e8b5572d531","observation_id":"e3ca334a-24fc-419d-99a3-84dfb2530103","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"Not What You've Signed Up For: Compromising Real-World","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:11e6b7757cfe5107200e41e3518dcef0c2af31d06cd2dec6f2a51298706cbd23","observation_id":"4d16579d-e443-4af6-b10a-9769e13a0488","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"2025 , month = oct, url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:d03f39fd943f8a35080aeef975b793c5dcc789ba2beef5f2fa84b5b2f0683b21","observation_id":"50555fcc-fdfc-4481-b11f-d6c7be8c6cda","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"2025 IEEE Conference on Software Testing, Verification and Validation (ICST) , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:9023ba534d2608a47d018fba58efa084116e64bd995adf73323151bd69834500","observation_id":"63d4be86-c37a-4e9d-b234-cf35e2f7dd1f","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T20:19:00.978843Z","title":"33rd USENIX Security Symposium (USENIX Security 24) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-26T20:19:00.978843Z"},"links":{"citing_paper":"/paper/2606.19191"},"observation_digest":"sha256:683e0b0d80f3a7e094060ff7d37e090e3cc60f9a330eed42c11153fb9de0d68c","observation_id":"077b3102-f85e-45c5-b60c-da2ba763147f","resolution":{"observed_at":"2026-06-26T20:19:00.978843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.19191","last_updated":"2026-06-17T15:33:41Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:54:32.815760Z","submitted_at":"2026-06-17T15:33:41Z","title":"PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems"},"reference_resolution":{"displayed":9,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":9},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 9 of 9 outbound references and 2 inbound Pith citation observations for arXiv:2606.19191."}