Paper Citation Record · LEDGER

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents

As of 7 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2607.15143.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.15143 v1

Coverage vector

measured 37 of 37 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-02T00:07:43.820637Z

measured 37 of 37 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

37 of 37 outbound references displayed

verified exact0
verified fuzzy0
unresolved37
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 20a797ea-05f2-4b84-aaa2-0568ad993f06 · outbound

This paper cites I Know What You Imported Last Summer: A study of security threats in thePython ecosystem.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents I Know What You Imported Last Summer: A study of security threats in thePython ecosystem

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:40.259266Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a471710f-d5fd-4638-aa6b-a1eb21482d7f · outbound

This paper cites an unresolved cited work.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:40.328052Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b18b5207-51a5-4e40-81d5-d192d5d739a1 · outbound

This paper cites Neupane, T.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Neupane, T

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:40.388108Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d531ca00-90f1-4d5a-98e6-593258582531 · outbound

This paper cites Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:40.428708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7f16683b-cb02-4dbe-bff0-e0f2bc8ba53a · outbound

This paper cites Slopsquatting: How AI hallucinations are fueling a new class of supply chain attacks.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Slopsquatting: How AI hallucinations are fueling a new class of supply chain attacks

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:40.551225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ee7a888-d527-441c-a8c5-03bc450be390 · outbound

This paper cites an unresolved cited work.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:40.696424Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9a358656-c0d5-40e3-967d-ac5dbd4037c5 · outbound

This paper cites Rules file backdoor in Copilot and Cur- sor.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Rules file backdoor in Copilot and Cur- sor

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:40.834692Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7677e041-b88b-4c50-909a-3e3772248dc2 · outbound

This paper cites ToxicSkills: Malicious AI agent skills.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents ToxicSkills: Malicious AI agent skills

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.016396Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 42a4816a-6c00-403a-9b96-4bd68ea483ea · outbound

This paper cites Prompts become shells: RCE vulnerabilities in AI agent frameworks.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Prompts become shells: RCE vulnerabilities in AI agent frameworks

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.216929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 567f4a89-581f-488a-9b8d-007a605987c3 · outbound

This paper cites Understanding Trust in Authentication Methods for Icelandic Digital Public Services.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Understanding Trust in Authentication Methods for Icelandic Digital Public Services

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.281535Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 405289d0-3a48-49b2-9530-57b29451850c · outbound

This paper cites Greshake, S.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Greshake, S

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.323212Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2671d199-4b11-466b-9ef9-d475f86be228 · outbound

This paper cites Debenedetti, J.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Debenedetti, J

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.361211Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aef878cc-0381-48f9-8917-241493259ed4 · outbound

This paper cites an unresolved cited work.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.399809Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7c750ae6-a7e9-4713-bf62-5b186fcf09ae · outbound

This paper cites PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.536427Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ddf426e3-135e-4171-9a06-617d989a619a · outbound

This paper cites Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.729161Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7e99c0b2-77c0-4be9-98e6-b3e4c725caa2 · outbound

This paper cites GitHub Copilot.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents GitHub Copilot

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.823134Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b8cf1aa6-b92d-4102-b53c-43fb7d73b2e9 · outbound

This paper cites Claude Code.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Claude Code

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:41.954668Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5c23c82c-78c2-4921-b38d-69205bacf2b4 · outbound

This paper cites Cursor: The AI-first Code Editor.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Cursor: The AI-first Code Editor

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.061977Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 67ce9dd4-0d53-4b6f-a06d-b7cf60ac8690 · outbound

This paper cites pypiserver: Minimal PyPI server.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents pypiserver: Minimal PyPI server

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.139037Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 150117ba-381f-49bf-82af-87b91aaa5f43 · outbound

This paper cites Ladisa, H.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Ladisa, H

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.266937Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4fd29975-23e3-43e2-8c47-94c3f054bc01 · outbound

This paper cites Ladisa, M.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Ladisa, M

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.338228Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 139a9816-5abf-4aee-bbfa-d7ba8e77080d · outbound

This paper cites Zimmermann, C.-A.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Zimmermann, C.-A

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.450659Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f6a013a4-94fb-4e1c-98b1-d1e446f36941 · outbound

This paper cites pip-audit: Auditing Python environ- ments and dependencies.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents pip-audit: Auditing Python environ- ments and dependencies

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.532837Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3fd86195-512a-4827-ac80-e2b2a96b1437 · outbound

This paper cites Sigstore: Software signing for everyone.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Sigstore: Software signing for everyone

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.627720Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3eaf0bc4-789c-4db6-8fd7-ebc536696388 · outbound

This paper cites Ty- posquatted npm packages used to steal cloud and CI/CD secrets.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Ty- posquatted npm packages used to steal cloud and CI/CD secrets

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.737821Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation de6f6b0f-763d-4476-b57d-65ec7b54914e · outbound

This paper cites Incident report: LiteLLM and Telnyx supply chain attack.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Incident report: LiteLLM and Telnyx supply chain attack

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.902548Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 078c4419-3ff1-4790-abe1-c1d056d0d5a8 · outbound

This paper cites an unresolved cited work.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:42.976805Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c047c31e-c086-4923-af22-5ddf0c57fe90 · outbound

This paper cites PyTorch dependency confusion via torchtriton.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents PyTorch dependency confusion via torchtriton

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.081035Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c895ed56-aa38-423a-bbae-8ec7807b5527 · outbound

This paper cites Tschacher.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Tschacher

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.182718Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c81f5d03-964c-4423-b9ba-7a41277b2286 · outbound

This paper cites an unresolved cited work.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Unresolved cited work

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.288294Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a96ecf0a-d6e7-40ef-86bd-ef52df55b75f · outbound

This paper cites Always contribute back.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Always contribute back

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.391898Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 92432a6a-0708-4bf0-99c1-03d2e4457035 · outbound

This paper cites Fischer, K.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Fischer, K

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.442331Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8ee09df3-d9d6-48ba-8a17-aa3230702a47 · outbound

This paper cites Perry, M.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Perry, M

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.521593Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 07ac4253-4f05-4af0-95c3-79baee757660 · outbound

This paper cites Singla, B.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Singla, B

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.599755Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8f22b6e4-ecd6-44e3-b08a-9e0834a658bc · outbound

This paper cites an unresolved cited work.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Unresolved cited work

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.668104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7fdee5d7-753b-46fc-bb36-ba620763396d · outbound

This paper cites an unresolved cited work.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Unresolved cited work

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.742561Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea26f1b3-1c40-4f37-948f-83d33249fdab · outbound

This paper cites Default to caution. When uncertain whether an action is safe, pause and ask rather than proceed.

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents Default to caution. When uncertain whether an action is safe, pause and ask rather than proceed

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-02T00:07:43.820637Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.