{"as_of":"2026-08-20T13:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8562c3b021466a5ec553814fe9b65916c67918aeae9ac4b03fd0f7fa30212f8d","coverage":[{"denominator":33,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":33,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T03:09:54.394990Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T14:49:41.241416Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-11T14:49:41.608258Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"cited_work":{"arxiv_id":"2607.13987","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.13987","snapshot_observed_at":"2026-08-11T14:49:41.608258Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","venue":"cs.CR","work_id":"88519f5e-dd4a-4cf7-9bbf-a2e5223c2622","year":2026},"citing_paper":{"arxiv_id":"2608.09577","last_updated":"2026-08-10T13:12:35Z","snapshot_observed_at":"2026-08-16T06:00:16.871905Z","submitted_at":"2026-08-10T13:12:35Z","title":"ElasticBack: Stealthy Conditional Backdoor in LLM-Agent Skills via Coupled Trigger-Rule Optimization","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T14:49:41.241416Z"},"links":{"cited_paper":"/paper/2607.13987","citing_paper":"/paper/2608.09577"},"observation_digest":"sha256:23e7c3066f34766692099a9b7ca834a04e55b3e07cab2874886efe19f541017e","observation_id":"b8a1e26b-bf33-4b59-8aba-1b2a5ba0da0e","resolution":{"observed_at":"2026-08-11T14:49:41.613414Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2607.13987/citation-record","integrity":"/paper/2607.13987/integrity","json":"/paper/2607.13987/citation-record.json","paper":"/paper/2607.13987"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:53.917558Z","title":"Guyon and A","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:53.917558Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:b37ce0f87ccbd2f13e99b2f2e8128bf864bf73faa41145dfc6ff89222aa6d590","observation_id":"30ddc63f-f447-43b0-8bc8-db7527c4810d","resolution":{"observed_at":"2026-08-02T03:09:53.917558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.007177Z","title":", title =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.007177Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:53ca6979437c2b660640bc3dc81f5622408a2db84f5b9bb37164fb00f7bc9b54","observation_id":"b9aad8ef-51c0-4ad8-91ab-5bb70f749568","resolution":{"observed_at":"2026-08-02T03:09:54.007177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.061130Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.061130Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:f5ba0a38380fc0ac5cb70b473495094ac198287a0684d281dde96444c5c11c06","observation_id":"52095056-7f70-4e63-8178-5e5fa55a1d5d","resolution":{"observed_at":"2026-08-02T03:09:54.061130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.150913Z","title":"Proceedings of the 33rd USENIX Security Symposium (USENIX Security) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.150913Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:00996074c6fb1665c26fa746da36b61ea27374deb2688e38fe46739a19595adf","observation_id":"0e3f9fb4-66ce-4b78-bd29-726a14125654","resolution":{"observed_at":"2026-08-02T03:09:54.150913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.189011Z","title":"Proceedings of the 34th USENIX Security Symposium (USENIX Security) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.189011Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:9b4d65d90925777106d42dac5760041dad9dae7b064ea5304491c4366e1fbc9b","observation_id":"388101da-b2d8-4c3c-8e68-9124abb3a0bb","resolution":{"observed_at":"2026-08-02T03:09:54.189011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.270130Z","title":"Proceedings of the Network and Distributed System Security Symposium (NDSS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.270130Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:bfa068fd95d64dd5707b8f3ae29b04b51cc7b0831a7dffcf7ef7efd23ac29622","observation_id":"9259de3b-2776-4f3a-a675-6817dc4777d3","resolution":{"observed_at":"2026-08-02T03:09:54.270130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03081","last_updated":"2026-04-03T14:58:58Z","snapshot_observed_at":"2026-08-15T02:21:36.634688Z","submitted_at":"2026-04-03T14:58:58Z","title":"Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03081","snapshot_observed_at":"2026-08-02T03:09:54.333431Z","title":"arXiv preprint arXiv:2604.03081 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.333431Z"},"links":{"cited_paper":"/paper/2604.03081","citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:3319c9f401860657e6144d6761a7aab14eda05626770fa0c818c072d37690742","observation_id":"abb8d95e-c764-49fe-b5a2-e2d1c2109961","resolution":{"observed_at":"2026-08-02T03:09:54.333431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.14460","last_updated":"2026-05-14T06:55:47Z","snapshot_observed_at":"2026-08-12T13:53:10.670324Z","submitted_at":"2026-05-14T06:55:47Z","title":"Exploiting LLM Agent Supply Chains via Payload-less Skills","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.14460","snapshot_observed_at":"2026-08-02T03:09:54.337040Z","title":"arXiv preprint arXiv:2605.14460 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.337040Z"},"links":{"cited_paper":"/paper/2605.14460","citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:bff9b338324abfa7670ac5ebb9a645a95b8f025636b38156bc54d827e40abd52","observation_id":"9ce722e2-5e25-48b1-9c5e-670ac68c29dd","resolution":{"observed_at":"2026-08-02T03:09:54.337040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.339679Z","title":"Proceedings of the 17th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.339679Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:de7a382bcfccb8f406e73445a54ed4dd98d36e962e6aaba22f53834573d47ede","observation_id":"67690c3c-b8db-4c52-b2f0-3443d6458299","resolution":{"observed_at":"2026-08-02T03:09:54.339679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.341854Z","title":"Proceedings of the 2025 Conference on Applied Machine Learning for Information Security , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.341854Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:f87e8ed010e68c0052c2f9c5ddf9e71f36b5b702507988ea6d9d3acb32b82533","observation_id":"9268a0fd-d6dd-4bee-aa51-250df6bf28fb","resolution":{"observed_at":"2026-08-02T03:09:54.341854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.344377Z","title":"SoK: Taxonomy of Attacks on Open-Source Software Supply Chains , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.344377Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:7bf51bf810e1535e31e02d60ec00fb8f3352d0168dea497765d510a4047607a3","observation_id":"a5301f39-d432-4ca5-a328-985f9cbe5f89","resolution":{"observed_at":"2026-08-02T03:09:54.344377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.346647Z","title":"and Wan, Sheng and Zhang, Sheng and Lee, Wang-Chien and Sima, Xiaoyuan and Zhao, Siyuan and Wang, Chi , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.346647Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:bb7f32651ecdbcc0ef34420a208962e3c76cff2d8fbb135a1af3d35a41f071fc","observation_id":"4f6d58fa-e1b4-4a3f-8350-2097ac690d16","resolution":{"observed_at":"2026-08-02T03:09:54.346647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.348820Z","title":"and Cao, Yuan , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.348820Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:618762601e9a369da06f7110fc5220cb9d2c6dab8178be0ca542b84cf020e791","observation_id":"172a5431-174e-4adb-9b4a-ddf5cd61d6c5","resolution":{"observed_at":"2026-08-02T03:09:54.348820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.350999Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools , booktitle =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.350999Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:23e040b3b687ba13b3cc730804ec2f6409566af4751b3881cbb2411d6735d583","observation_id":"fdabc139-32d9-41a8-89c4-3c5a5b6d6cab","resolution":{"observed_at":"2026-08-02T03:09:54.350999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.353743Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.353743Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:9216e12e04c816698ffd7838f997bcbf2a5174c1deefa8a409ab0490f55b30dd","observation_id":"51a23ef0-6532-4acf-bf2a-255e4f8e591f","resolution":{"observed_at":"2026-08-02T03:09:54.353743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.355900Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.355900Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:3af3cf4a274efceacb4d43bfc18e7e2379dde77be27f059b17f141c40c3e18a8","observation_id":"fa410b31-30ab-4d70-a298-53c5888041e8","resolution":{"observed_at":"2026-08-02T03:09:54.355900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.358022Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.358022Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:725f678f085cd64797afb39ffe27b4cb9ba425230ee778d884edb819267c2194","observation_id":"9d9708b3-2ca0-4556-8f33-aabd2631319e","resolution":{"observed_at":"2026-08-02T03:09:54.358022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.360478Z","title":"34th USENIX Security Symposium (USENIX Security 25) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.360478Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:459e73869262c9d6650a1316380b9633f94765b423bcbec5c40b63b543b173ee","observation_id":"fd5ba0f2-b10e-4120-908e-d542760ddc2c","resolution":{"observed_at":"2026-08-02T03:09:54.360478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.362731Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.362731Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:05619e0c18e5f2a8e1f34ed232aa0f73b5755ef20d743538ace4f3322fd759ea","observation_id":"4809838a-1656-4e00-8094-98a7d0bc50e6","resolution":{"observed_at":"2026-08-02T03:09:54.362731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.365075Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.365075Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:178e7ffd8f6e3afb9cb36151fca5fd1850c21232a4add90ade10230667eb42aa","observation_id":"e5a13136-67f7-4ca9-8012-9867b7ce4a18","resolution":{"observed_at":"2026-08-02T03:09:54.365075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.367228Z","title":"AgentBound: Securing Execution Boundaries of AI Agents , journal =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.367228Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:a36bbe72593f4cdb704ab46db0d45ff1eaba6df3109fd4d2c916e3ad0eaa467d","observation_id":"2fc6fcd8-e73d-462c-b431-4516ccef9b12","resolution":{"observed_at":"2026-08-02T03:09:54.367228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.05969","last_updated":"2026-04-07T15:02:47Z","snapshot_observed_at":"2026-08-13T07:58:46.587028Z","submitted_at":"2026-04-07T15:02:47Z","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.05969","snapshot_observed_at":"2026-08-02T03:09:54.369710Z","title":"arXiv preprint arXiv:2604.05969 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.369710Z"},"links":{"cited_paper":"/paper/2604.05969","citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:2a7e55bf2eff75e8b96aaf4ad61af4a7813ad484530cb3666ed7474d7bb7452d","observation_id":"b0ce20aa-81d0-4eac-aff8-50b791f27d1f","resolution":{"observed_at":"2026-08-02T03:09:54.369710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.372196Z","title":"Proceedings of the ACM CAIS Workshop on Agent Skills (AgentSkills) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.372196Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:626a64fbced23e1541bee87b29a4df919cf9f92de257eaaf7edd5c6538768984","observation_id":"edae0d6f-8007-43b2-abd5-9673688d6321","resolution":{"observed_at":"2026-08-02T03:09:54.372196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.374360Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.374360Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:866dc3cddf1f1110d9672513f9f236ee70264709bbc5096851516bac23fec708","observation_id":"6dc4492f-926a-4a0e-b069-6d77ce5c969a","resolution":{"observed_at":"2026-08-02T03:09:54.374360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.376508Z","title":"and Wan, Sheng and Zhang, Sheng and Lee, Wang-Chien and Sima, Xiaoyuan and Zhao, Siyuan and Wang, Chi , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.376508Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:d054ff2174ee266eae5296846a1bfe1601d80bc9509d8b99cf869bac56f5c3dc","observation_id":"0291c510-1360-42f9-8083-ef3ed6123e8f","resolution":{"observed_at":"2026-08-02T03:09:54.376508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.378644Z","title":"Preprints.org , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.378644Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:9e30f0f3d872b86a8c38887f96f30f26951882562729212f598fd416c3badde1","observation_id":"47b03463-4333-4231-8239-36b4056d2825","resolution":{"observed_at":"2026-08-02T03:09:54.378644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.12670","last_updated":"2026-03-13T07:33:01Z","snapshot_observed_at":"2026-08-12T09:12:28.700231Z","submitted_at":"2026-02-13T07:06:06Z","title":"SkillsBench: Benchmarking How Well Agent Skills Work Across Diverse Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.12670","snapshot_observed_at":"2026-08-02T03:09:54.380836Z","title":"and others , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.380836Z"},"links":{"cited_paper":"/paper/2602.12670","citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:acf3d1db7a45e9055394fbd6e04d1437cdbd863248b076cd5e5e40b2e5e4d466","observation_id":"a547c4f5-08ae-495c-850b-d583f85f4441","resolution":{"observed_at":"2026-08-02T03:09:54.380836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.20156","last_updated":"2026-02-25T18:14:01Z","snapshot_observed_at":"2026-08-11T16:43:10.190893Z","submitted_at":"2026-02-23T18:59:27Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.20156","snapshot_observed_at":"2026-08-02T03:09:54.383286Z","title":"and Beurer-Kellner, L","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.383286Z"},"links":{"cited_paper":"/paper/2602.20156","citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:3fff9279435c088199aa4fe7e6391260c25faf8a2f949f214eb59d6479942069","observation_id":"81cfdfa0-6348-44c6-84b0-a3cf613ac928","resolution":{"observed_at":"2026-08-02T03:09:54.383286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10338","last_updated":"2026-01-15T12:31:52Z","snapshot_observed_at":"2026-08-20T05:43:02.471919Z","submitted_at":"2026-01-15T12:31:52Z","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.10338","snapshot_observed_at":"2026-08-02T03:09:54.385719Z","title":"and Wang, W","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.385719Z"},"links":{"cited_paper":"/paper/2601.10338","citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:b0256e217386568aca3bab4da56635c22d75fb710afc1958b57ea2457d0c4499","observation_id":"cf821782-25fa-4d9f-9836-4fe903465c3e","resolution":{"observed_at":"2026-08-02T03:09:54.385719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.06547","last_updated":"2026-06-10T03:31:37Z","snapshot_observed_at":"2026-08-14T07:49:09.150281Z","submitted_at":"2026-02-06T09:52:27Z","title":"\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.06547","snapshot_observed_at":"2026-08-02T03:09:54.388070Z","title":"and Chen, Z","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.388070Z"},"links":{"cited_paper":"/paper/2602.06547","citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:7d2c514d5c9b3e08cacee3cf9d1a3f24228bb043e53fecd9e353a4ea397f7ef3","observation_id":"99d22276-df8b-4e01-87b5-c84aa00f8381","resolution":{"observed_at":"2026-08-02T03:09:54.388070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.390569Z","title":"and others , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.390569Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:6728067ab88b10f172dbbffdb2e3a5ef43c613b08fa1bdc6c82b5d1626c6c154","observation_id":"4c0b8187-cdcb-4538-8358-c484c8e2b10d","resolution":{"observed_at":"2026-08-02T03:09:54.390569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.392806Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.392806Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:77b71073c9f8ee227454f4775df66d4ab2b125751cb29e4fd789bf2872828b2a","observation_id":"d46f439c-2dfa-4873-86fb-8076c4084063","resolution":{"observed_at":"2026-08-02T03:09:54.392806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T03:09:54.394990Z","title":"and Chen, Z","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-02T03:09:54.394990Z"},"links":{"citing_paper":"/paper/2607.13987"},"observation_digest":"sha256:40fc425d799ff7dbf1d4a6a87043dfadd24561cea6eca6dc075e4b1e2936801f","observation_id":"9c6d80cf-0d7f-4e58-aadb-46dc59a7d0d8","resolution":{"observed_at":"2026-08-02T03:09:54.394990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.13987","last_updated":"2026-07-15T16:15:46Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-20T08:14:27.083019Z","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation"},"reference_resolution":{"displayed":33,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":33},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 33 of 33 outbound references and 1 inbound Pith citation observation for arXiv:2607.13987."}