Paper Citation Record · LEDGER

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection

As of 18 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2608.08939.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.08939 v1

Coverage vector

measured 28 of 28 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-14T04:23:15.117560Z

measured 28 of 28 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-18T06:34:40.430872+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

28 of 28 outbound references displayed

verified exact5
verified fuzzy3
unresolved20
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 15b34c7f-370a-4811-9055-407b2809abd9 · outbound

This paper cites d.].Create an Accessibility Service.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection d.].Create an Accessibility Service

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T04:23:15.922131Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 28b738a1-d8e5-48fa-9f83-1b55847501ed · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:14.960244Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 853cccc8-4d90-4893-b60d-01faa66785a3 · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 3

Resolution: unresolved; raw_fallback, observed 2026-08-14T04:23:15.910553Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation d6fb0979-add3-4412-9220-69f22f59e604 · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-14T04:23:15.898685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 53978734-cb75-4b47-90af-920beca94fac · outbound

This paper cites Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels

Reference 5

Resolution: verified exact; local_arxiv, observed 2026-08-14T04:23:15.520468Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation f4c0c169-6695-4da7-83fb-ed5670ae53bd · outbound

This paper cites Roush, Judah Goldfeder, and Ravid Shwartz-Ziv.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Roush, Judah Goldfeder, and Ravid Shwartz-Ziv

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:14.985094Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f2214a97-ce33-47eb-a1fb-dc2363de597f · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:14.990283Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation db784329-50fd-467a-86b2-c9dee847e31e · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 8

Resolution: unresolved; raw_fallback, observed 2026-08-14T04:23:15.885199Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 08254851-edcd-4a87-a354-4fb40767f96b · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:14.998345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 795c775b-eba5-433c-949e-c3d986b4bfb9 · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 10

Resolution: verified exact; raw_fallback, observed 2026-08-14T04:23:15.694097Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 2d7dc466-6842-4e8f-bfd6-d7fac843c233 · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.021438Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 54992195-e40d-41b8-bca5-1cc9f50365a6 · outbound

This paper cites MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.028834Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5743538c-27ae-4719-a5ae-17c3ece7a404 · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.034663Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5ddecaba-e93e-45c2-8b5b-649d5e7445f1 · outbound

This paper cites 2026.App Cards Feature Documentation.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection 2026.App Cards Feature Documentation

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T04:23:15.871436Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 6454b155-3bfd-42e2-a4e9-197b62119f8e · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-08-14T04:23:15.858429Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 428f7bf9-0d71-44af-845b-a28f040fd237 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Ignore Previous Prompt: Attack Techniques For Language Models

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.049508Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b50538ce-10a3-4983-ab6f-b5dee63ddee9 · outbound

This paper cites AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.054921Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5b1b35a1-afe4-4526-a6bc-a494319bcfc8 · outbound

This paper cites Gemma 4 Technical Report.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Gemma 4 Technical Report

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.060376Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b21b94d0-96fd-40c6-a878-958b31e2928e · outbound

This paper cites 2026.Qwen Studio.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection 2026.Qwen Studio

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T04:23:15.846832Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation eeebed71-d21a-4e4d-ba0a-6b96f252ee3f · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 20

Resolution: unresolved; raw_fallback, observed 2026-08-14T04:23:15.835430Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation d49ee131-ac9b-41c6-8ad1-890747ca746f · outbound

This paper cites Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.076505Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7b5c189b-9ec8-4004-86b6-ea382af66ede · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 22

Resolution: unresolved; raw_fallback, observed 2026-08-14T04:23:15.823957Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 6f5e6447-fe81-456e-886f-cc2ab526079d · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 23

Resolution: unresolved; raw_fallback, observed 2026-08-14T04:23:15.810119Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 6abd1676-9430-43cc-9dee-b6bf4097b977 · outbound

This paper cites AppAgent: Multimodal Agents as Smartphone Users.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection AppAgent: Multimodal Agents as Smartphone Users

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:15.098579Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 01495d6d-056b-4ac5-b6f5-c5f1f1dbc8d6 · outbound

This paper cites an unresolved cited work.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Unresolved cited work

Reference 25

Resolution: verified exact; doi, observed 2026-08-14T04:23:15.317068Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation adebfe8e-1dcf-4961-92da-d4fd3645920d · outbound

This paper cites (A)I Sees What You Don't: Exploiting New Attack Surfaces in Third-Party Mobile Agents.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection (A)I Sees What You Don't: Exploiting New Attack Surfaces in Third-Party Mobile Agents

Reference 26

Resolution: verified exact; local_arxiv, observed 2026-08-14T04:23:15.256242Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation 5063c1b9-70ed-4fa5-90e0-90b50b6ffa11 · outbound

This paper cites testtag.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection testtag

Reference 27

Resolution: verified exact; doi, observed 2026-08-14T04:23:15.236474Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.

Observation a1b29b8d-06da-4521-b774-cf41a577b432 · outbound

This paper cites Defeating Prompt Injections by Design.

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection Defeating Prompt Injections by Design

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-14T04:23:14.968841Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.