Paper Citation Record · LEDGER

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills

As of 5 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2607.20121.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.20121 v2

Coverage vector

measured 37 of 37 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-01T10:46:12.210194Z

measured 37 of 37 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

37 of 37 outbound references displayed

verified exact0
verified fuzzy0
unresolved36
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 0c545b05-2d41-4965-8d90-2fc73f88a39f · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.132686Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 074c0e98-b6bc-496c-a90b-cd4b70ecbac2 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.135262Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7a06a227-e7cd-433c-8266-dd376676b65a · outbound

This paper cites Large Language Model Agent: A Survey on Methodology, Applications and Challenges.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Large Language Model Agent: A Survey on Methodology, Applications and Challenges

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.122548Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9b61b33f-596c-4a82-b0ee-6e901bf894e1 · outbound

This paper cites is_risky_skill.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills is_risky_skill

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.140352Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 318adf43-5bab-4aa5-8768-892d6d869930 · outbound

This paper cites Agent-SafetyBench: Evaluating the Safety of LLM Agents.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Agent-SafetyBench: Evaluating the Safety of LLM Agents

Reference 5

Resolution: malformed identifier; no resolver link, observed 2026-08-01T10:46:12.128752Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ebd1e969-a008-4294-9db9-02d524fce695 · outbound

This paper cites keep": true/false,.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills keep": true/false,

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.168344Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d9635a42-6c8c-4ea3-a817-435bf81b6e68 · outbound

This paper cites Figure 15: Static Task Review Prompt 25 Execution-Trace Review Prompt Review this sandbox execution trace for task-design quality.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Figure 15: Static Task Review Prompt 25 Execution-Trace Review Prompt Review this sandbox execution trace for task-design quality

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.193255Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 431b037c-e28f-4ce7-b849-f93bfba81ca6 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.137833Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation af24cf18-7026-452d-bee1-6ac7e5879721 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.143059Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 41090398-2ae9-4fcd-9c4e-3ee6a325fd6e · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.145871Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5b918456-e8ce-457a-9d58-c0757f731652 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.148341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3968fa2f-e9f6-48db-b949-208532d7e762 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.150802Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e32a3682-f732-45e5-b68d-fba29e2b9f60 · outbound

This paper cites keep": true/false,.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills keep": true/false,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.153214Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 786590f8-1bc6-4eb0-abf4-bba0938a154d · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.155785Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation db493fc8-d9e6-49fa-b1e2-38f1eb610c2f · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.158377Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d3179996-1f5b-4c77-ba5f-74946de077ab · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.160961Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 592e9ae0-3365-4296-b164-23e169d1193a · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.163553Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f972bc9a-58b5-4b84-953a-f5ff6f56c4fd · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.165996Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c8f89b5-abec-40ee-86c3-c9a83a40bea1 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.170855Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c8e58f6-d6a6-45c5-ad16-c66d350148b9 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.173315Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a530d06d-a6b4-42d4-92ca-a897afb880b6 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.175715Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation badda1c2-052b-4cb1-9a5a-45ea0cdc45ec · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.178221Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 68461e21-60d7-4160-9dde-21c467fca95b · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.180559Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9e4ebd37-4ab6-4fea-a954-1cb2b4156a17 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.182930Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a3eb7c65-f046-4efc-8703-a0b2af3eba4d · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.185502Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1406de59-d2de-47a6-b254-39482a4a1218 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.188169Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e0e4baa3-e295-4f98-ab2c-67a9af5bed19 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.190591Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a28e2712-e81b-46d1-9cb8-2afbd01a1c47 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.195727Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a8b4ba1b-ad1f-4a90-b54d-2320a295611e · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.198065Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a04ce00-d75e-46a8-8601-0dd0f96a9f06 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.200333Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35af5324-af21-4a90-8fdf-430a2d295959 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.202787Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b3997511-42c5-41ae-bd11-91264159a668 · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.205164Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 40a04cdd-7510-48b1-a579-845e43da7c6c · outbound

This paper cites an unresolved cited work.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Unresolved cited work

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.207771Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b2ddb2e7-f01b-4909-a83f-627ea5422c0e · outbound

This paper cites dangerous_behavior.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills dangerous_behavior

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.210194Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f697812c-e428-49e4-a77d-a32b33c6f5a2 · outbound

This paper cites Reflexion: Language Agents with Verbal Reinforcement Learning.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Reflexion: Language Agents with Verbal Reinforcement Learning

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.125684Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eba9ee5a-d9c0-41d2-a03b-c352064f9f39 · outbound

This paper cites Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.119553Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 057f8e17-85c2-4233-9828-e0ffd4034873 · outbound

This paper cites SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents.

OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents

Reference 2026

Resolution: unresolved; no resolver link, observed 2026-08-01T10:46:12.115831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.