{"as_of":"2026-08-12T21:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4d30f74e49ae469292f1ded279cdd9761177417b6e0b17b17da39ceac111593e","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T02:00:13.598465Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.25619/citation-record","integrity":"/paper/2607.25619/integrity","json":"/paper/2607.25619/citation-record.json","paper":"/paper/2607.25619"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:11.595029Z","title":"Clawhavoc poisons openclaw’s clawhub with 1,184 malicious skills,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:11.595029Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:7a75d5c25136572b5e3e8fe30a16455e25652e7b20608a5ee912f7f6096c7740","observation_id":"6763f43c-1bbf-4fbc-b1c6-352bf4b942c4","resolution":{"observed_at":"2026-08-01T02:00:11.595029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19443","last_updated":"2025-05-26T03:00:21Z","snapshot_observed_at":"2026-08-07T14:11:48.229560Z","submitted_at":"2025-05-26T03:00:21Z","title":"Vibe Coding vs. Agentic Coding: Fundamentals and Practical Implications of Agentic AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19443","snapshot_observed_at":"2026-08-01T02:00:11.643739Z","title":"Vibe coding vs. agentic coding: Fundamentals and practical implications of agentic ai,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:11.643739Z"},"links":{"cited_paper":"/paper/2505.19443","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:c1f8a2f1003d065bb8498f09eee832dfdf9c4c881ebdd41a4bcb392664a0e5cf","observation_id":"5a6ea652-8cd3-4c11-82e9-53389606877f","resolution":{"observed_at":"2026-08-01T02:00:11.643739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:11.730763Z","title":"Usage, effects and requirements for ai coding assistants in the enterprise: An empirical study,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:11.730763Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:ab80cbe7cd6cf4b56e7a98a1a9071c154ae567e2673e2c24e31094c64caccf49","observation_id":"0f2c24a5-8336-4e29-9fa5-c8656748a570","resolution":{"observed_at":"2026-08-01T02:00:11.730763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:11.829957Z","title":"Stack overflow developer survey 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:11.829957Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:7e0710a732859fbd2e4da36c7fa477b26a8eb7d89fd1be7112ba43ed9f18f086","observation_id":"a319f87f-95ff-4669-a065-e6c91a825b35","resolution":{"observed_at":"2026-08-01T02:00:11.829957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:12.259530Z","title":"Swe-bench: Can language models resolve real-world github issues?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.259530Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:e7b535903df21aa6ad7e34091a4dfaaf2a1c2059201af0e5219820b7910a3f22","observation_id":"6ac3eb18-4322-4cf5-ba63-0da34578dee3","resolution":{"observed_at":"2026-08-01T02:00:12.259530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:12.427106Z","title":"Model Context Protocol specification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.427106Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:62565a51f8425566e7bd6239235de7efad36cfadbf32a02f64949c43734d5999","observation_id":"96a803b1-6073-4444-874d-438f96a56f3a","resolution":{"observed_at":"2026-08-01T02:00:12.427106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:12.552990Z","title":"Backstabber’s knife collection: A review of open source software supply chain attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.552990Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:3dd9d404333976b678328ccd47a0b1538434a9ec6141616ebe61c694eef8a207","observation_id":"e286e700-c207-4272-91ee-06193055ed11","resolution":{"observed_at":"2026-08-01T02:00:12.552990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:12.689085Z","title":"Small world with high risks: A study of security threats in the npm ecosystem,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.689085Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:9769c34420093544016fe88c55617d2f49ac7f0b87c3099be5b3234b6a735afb","observation_id":"0084e253-9172-4e81-a4ab-1d1b7e8cf3bf","resolution":{"observed_at":"2026-08-01T02:00:12.689085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:12.797447Z","title":"Sok: Taxonomy of attacks on open-source software supply chains,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.797447Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:56658c1161c9729e100fff04b7035e5d8b5df092662267ee55f5b0f28414812f","observation_id":"21b61df0-05e4-462b-a513-83e58edb8be1","resolution":{"observed_at":"2026-08-01T02:00:12.797447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:12.887724Z","title":"Semgrep: Static analysis at ludicrous speed,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.887724Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:90dca65af18c5e5d21b22497d6da79ca60c8a86cb0d358159d9b0017ca106bd2","observation_id":"b9c934c7-be9e-4e82-be16-3a9479d567ec","resolution":{"observed_at":"2026-08-01T02:00:12.887724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:12.993557Z","title":"Snyk: Security platform for developers,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.993557Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:e757e6b51ed36ae469031443d3270481086539c45906c368652d8605faf242da","observation_id":"5a045591-1842-4d24-a50c-906e1ead14a2","resolution":{"observed_at":"2026-08-01T02:00:12.993557Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.06547","last_updated":"2026-06-10T03:31:37Z","snapshot_observed_at":"2026-08-03T04:00:06.220291Z","submitted_at":"2026-02-06T09:52:27Z","title":"\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.06547","snapshot_observed_at":"2026-08-01T02:00:13.102765Z","title":"Malicious agent skills in the wild: A large-scale security empirical study,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.102765Z"},"links":{"cited_paper":"/paper/2602.06547","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:bd3c622e64d423ff711d9e58a2e7abd060f5331d8532ba8123c7822b54061125","observation_id":"2fb915f4-56ae-4dad-884d-5afb23e030c2","resolution":{"observed_at":"2026-08-01T02:00:13.102765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.20156","last_updated":"2026-02-25T18:14:01Z","snapshot_observed_at":"2026-08-11T16:43:10.190893Z","submitted_at":"2026-02-23T18:59:27Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.20156","snapshot_observed_at":"2026-08-01T02:00:13.207810Z","title":"Skill-inject: Measuring agent vulnerability to skill file attacks,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.207810Z"},"links":{"cited_paper":"/paper/2602.20156","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:b6097e10ec5d6feec828b3146c5f4821d2bbe854c8bc44918695d9713ff80d9d","observation_id":"a56964a0-d1ac-405f-b85e-01009b3ed6a0","resolution":{"observed_at":"2026-08-01T02:00:13.207810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.271794Z","title":"MITRE ATT&CK: Adversarial tactics, techniques, and common knowledge,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.271794Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:20f9ce6867615fcfc59f38338e456271dfcb751891917559985f2e0d5ac7b1f3","observation_id":"88b9eb42-0e5d-4b59-b908-9b3a30087143","resolution":{"observed_at":"2026-08-01T02:00:13.271794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.443965Z","title":"Sigma: Generic signature format for SIEM systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.443965Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:11e2552ee4924fe40b25c9f3ec900c082a2c5cf8448afc7100782505965fd9ba","observation_id":"5a460739-1132-4275-adf9-ab6beac95ba6","resolution":{"observed_at":"2026-08-01T02:00:13.443965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.503646Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.503646Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:5d340ea4c6da91ec41c3ee6d4cac1efbe17fb6bc47b42c59dc7a629941b0222d","observation_id":"932a853f-faa3-4253-977a-e6d9488f8bbc","resolution":{"observed_at":"2026-08-01T02:00:13.503646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04761","last_updated":"2023-02-09T16:49:57Z","snapshot_observed_at":"2026-07-06T14:50:07.491434Z","submitted_at":"2023-02-09T16:49:57Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04761","snapshot_observed_at":"2026-08-01T02:00:13.517607Z","title":"Toolformer: Language models can teach themselves to use tools,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.517607Z"},"links":{"cited_paper":"/paper/2302.04761","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:610f2184fe6ce20656f00809d640a80a985b7f23d59d5178a6c7bd265a65f54f","observation_id":"594d3109-49d1-4ebf-b9dc-c485812e8cca","resolution":{"observed_at":"2026-08-01T02:00:13.517607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.16789","last_updated":"2023-10-03T14:45:48Z","snapshot_observed_at":"2026-07-06T16:00:46.542753Z","submitted_at":"2023-07-31T15:56:53Z","title":"ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.16789","snapshot_observed_at":"2026-08-01T02:00:13.527163Z","title":"Toolllm: Facilitating large language models to master 16000+ real-world apis,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.527163Z"},"links":{"cited_paper":"/paper/2307.16789","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:8abaceaeaf847d64da4618a55c49af3712bf349f7af85909be2704e073c3981c","observation_id":"a3a66830-0e38-4d3c-91b9-ab17ba37d3cd","resolution":{"observed_at":"2026-08-01T02:00:13.527163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.531333Z","title":"Asleep at the keyboard? assessing the security of github copilot’s code con- tributions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.531333Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:bb2e50362243bfcf13d6347da95841072438b690b95ae469470dcc68eec9a027","observation_id":"47e11240-ee1b-41ca-9180-e60e16fd4b14","resolution":{"observed_at":"2026-08-01T02:00:13.531333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.535258Z","title":"Do users write more insecure code with ai assistants?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.535258Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:f67a1d0f9d3b9453cc7a4f1c3264c72a4ec6269b38fb1c41e142322c009ece86","observation_id":"6ced6c73-4590-4ab5-917d-ef9e4cb6b737","resolution":{"observed_at":"2026-08-01T02:00:13.535258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.539275Z","title":"Practical automated detection of malicious npm packages,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.539275Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:d036bf470cd0fc27f790796a9b257dc43ffffef8a1ac243efeee2184648ade32","observation_id":"df6d87ed-05b0-46b1-a165-48127f1e9623","resolution":{"observed_at":"2026-08-01T02:00:13.539275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.543477Z","title":"SkillsBench-1650: A benchmark for AI agent skill safety detection,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.543477Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:6d10d4ea7a6db85dcc9a2b445716aa9b2511f92797efe78c6762adf6043096f6","observation_id":"d374a5c3-461d-44c4-8232-2dbe742a5081","resolution":{"observed_at":"2026-08-01T02:00:13.543477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.547203Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.547203Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:baa81829e14f3b5e231153748cf854e801c0c65496b98c7ecc1821d129a09fbb","observation_id":"4911228b-9a5e-420a-b00c-81aeed75d70f","resolution":{"observed_at":"2026-08-01T02:00:13.547203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.550815Z","title":"Open Source Security Foundation: Dependency review and SCA tooling,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.550815Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:bfa01cf794fe8875013183c8335e2147147bde8a8dd5e8f9f80bb708e5682257","observation_id":"66223cfa-3042-4559-90f2-f144d6591917","resolution":{"observed_at":"2026-08-01T02:00:13.550815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-01T02:00:13.554635Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.554635Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:bfdbf720768bb46516642ef10005dfc4ea0f609901052bc690bf75b5ad1e7619","observation_id":"0107f286-2bd5-41dc-8504-249ee614077b","resolution":{"observed_at":"2026-08-01T02:00:13.554635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.559113Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.559113Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:a95897afef61cd4bafec19511ccf00359f238b91a7330770b5eeb7acae23b8fd","observation_id":"f39b4cd7-4535-4466-b430-dff46eb48631","resolution":{"observed_at":"2026-08-01T02:00:13.559113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.563237Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.563237Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:62ae011d1e702bdf895a0ad7eb4bc649a25793403d4a681bd34ff958dd40e1d6","observation_id":"5b88294f-b252-436a-89c7-0ec1a19ad1a5","resolution":{"observed_at":"2026-08-01T02:00:13.563237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.566932Z","title":"Defending against indirect prompt injection attacks with spotlighting,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.566932Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:a6568df4b5f665b4f5557c0a503196f2c4275015b9490c2209c7ba2a96aa95a9","observation_id":"17beaf4f-1bf5-4402-b4d0-3e3b5a37f456","resolution":{"observed_at":"2026-08-01T02:00:13.566932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.570744Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.570744Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:bca863c2544315ed79e9063f5f3b3a1719234b74dc75f00e5e2f4be3e843fb81","observation_id":"834fec72-69d6-4890-b663-31526e22f6b4","resolution":{"observed_at":"2026-08-01T02:00:13.570744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.574657Z","title":"Prompt injection and privilege separation in LLM applica- tions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.574657Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:6ba42e3396182b9915760986465e6304abe8aa212a18128a3808697b0d38e0c5","observation_id":"b9ecdb16-2806-4f0a-a366-a493e158790e","resolution":{"observed_at":"2026-08-01T02:00:13.574657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-01T02:00:13.578651Z","title":"Llama guard: LLM- based input-output safeguard for human-AI conversations,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.578651Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:b9d5e7e0b1e721cdf7860dbf8d84e0460b3a5aedcf24ea80bd1957c8c9f13060","observation_id":"1145033e-c602-4558-bc54-221d05f2b546","resolution":{"observed_at":"2026-08-01T02:00:13.578651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.582818Z","title":"OpenAI moderation API,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.582818Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:9c143d5cac8269dce82b16d39952de3d894976d43b09d16182cdace281943a47","observation_id":"113f8630-8195-48ed-a0d4-9337c3fc7fba","resolution":{"observed_at":"2026-08-01T02:00:13.582818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.586595Z","title":"ClawVet: Static analysis for MCP skill security,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.586595Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:5fe96bae3d9525e78cd933215eed6df493ef87e44da338b39796f785b292f1b9","observation_id":"884cac1e-ec43-4585-b341-618426f12e00","resolution":{"observed_at":"2026-08-01T02:00:13.586595Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.590449Z","title":"skill-scanner: MCP skill security scanner,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.590449Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:b3bddde4dbdecfe2bdad54edafbb2233861900376aa172384da72e32a5477d04","observation_id":"b3126426-85ef-4004-a4d1-b61bf432ed0f","resolution":{"observed_at":"2026-08-01T02:00:13.590449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05685","last_updated":"2023-12-24T02:01:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-06-09T05:55:52Z","title":"Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05685","snapshot_observed_at":"2026-08-01T02:00:13.594108Z","title":"Judging llm-as-a-judge with mt-bench and chatbot arena,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.594108Z"},"links":{"cited_paper":"/paper/2306.05685","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:a7f6c74200dbe8ac831ddd454f13c3cff6c0c52fb796b04ece842647306540d9","observation_id":"780ef3cd-6349-4370-b678-88ebc32b6639","resolution":{"observed_at":"2026-08-01T02:00:13.594108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T02:00:13.598465Z","title":"The advantages of the matthews correlation coefficient (mcc) over f1 score and accuracy in binary classification evaluation,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.598465Z"},"links":{"citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:2c7d0d2663fcbcc8b1cff960808cfa256be24aa739caa061b58e11c5361541e8","observation_id":"747e01bf-88e0-4360-ac20-b0d6e89cd6a0","resolution":{"observed_at":"2026-08-01T02:00:13.598465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.03374","last_updated":"2021-07-14T17:16:02Z","snapshot_observed_at":"2026-08-08T11:58:24.516369Z","submitted_at":"2021-07-07T17:41:24Z","title":"Evaluating Large Language Models Trained on Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.03374","snapshot_observed_at":"2026-08-01T02:00:12.126729Z","title":"Available: https://arxiv.org/abs/2107.03374","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:12.126729Z"},"links":{"cited_paper":"/paper/2107.03374","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:cd551f9ca7b39bc05a257722b736f33b2424326f389d51580b88883fc6dacf80","observation_id":"505e73d5-31a7-4b63-bc08-57fa473957a3","resolution":{"observed_at":"2026-08-01T02:00:12.126729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04761","last_updated":"2023-02-09T16:49:57Z","snapshot_observed_at":"2026-07-06T14:50:07.491434Z","submitted_at":"2023-02-09T16:49:57Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04761","snapshot_observed_at":"2026-08-01T02:00:13.522692Z","title":"Available: https://doi.org/10.48550/arXiv.2302.04761","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-01T02:00:13.522692Z"},"links":{"cited_paper":"/paper/2302.04761","citing_paper":"/paper/2607.25619"},"observation_digest":"sha256:d63699078e4b82f65ec61a6c7dedc14521306a8bc172d76b76c9e68da6b6752d","observation_id":"fe096eb2-f239-45ed-a84b-89f02b29ba84","resolution":{"observed_at":"2026-08-01T02:00:13.522692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.25619","last_updated":"2026-07-28T11:50:19Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-10T22:38:13.110734Z","submitted_at":"2026-07-28T11:50:19Z","title":"SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2607.25619."}