{"as_of":"2026-08-16T03:52:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:90a62d29d2a8c0c7b41c61e87faa1b4f54c0ecbf6df295d09551fd769eb366de","coverage":[{"denominator":162,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T14:21:42.411193Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.10530/citation-record","integrity":"/paper/2608.10530/integrity","json":"/paper/2608.10530/citation-record.json","paper":"/paper/2608.10530"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.12503","last_updated":"2025-06-11T23:27:36Z","snapshot_observed_at":"2026-08-13T13:24:48.016930Z","submitted_at":"2024-03-19T07:10:58Z","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12503","snapshot_observed_at":"2026-08-15T14:21:41.761755Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.761755Z"},"links":{"cited_paper":"/paper/2403.12503","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:233db43c335d3906a90c0796fb07fc79fcf3ca949353e3794d5f2118fdc90b0a","observation_id":"be9dba93-dd12-4b13-b621-93b7de6dcbdb","resolution":{"observed_at":"2026-08-15T14:21:41.761755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13434","last_updated":"2025-06-16T12:52:19Z","snapshot_observed_at":"2026-08-10T20:55:41.907974Z","submitted_at":"2025-06-16T12:52:19Z","title":"From Promise to Peril: Rethinking Cybersecurity Red and Blue Teaming in the Age of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.13434","snapshot_observed_at":"2026-08-15T14:21:41.770140Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.770140Z"},"links":{"cited_paper":"/paper/2506.13434","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:3551c5f98e270fa29478d3943a8d610d50d0596d763994ec9d5f2f208cfac5cf","observation_id":"03afa743-c61b-4090-95bb-011e4fd1797d","resolution":{"observed_at":"2026-08-15T14:21:41.770140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.12688/f1000research.169927.1","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:35.322510Z","title":null,"venue":null,"work_id":"54c51f05-526f-4d5d-bcc3-02aaada700a8","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.775718Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:442617052aea333c1fbb98a58e0348c8cee46b059efc44d7eb25c71c4d536ac7","observation_id":"0a348a21-2a91-40ee-b186-560a1f38d811","resolution":{"observed_at":"2026-08-15T14:23:35.327230Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2510.25445","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:35.240668Z","title":null,"venue":null,"work_id":"c7e6a9f6-0da1-4b90-a8ca-69af405476a6","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.780898Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7b15e0790f5690a5d46a58cf3a01932d98ec91d070dddadaa0577c48e7e5f995","observation_id":"43094c58-36d0-47dd-9633-3edf60ac8a1c","resolution":{"observed_at":"2026-08-15T14:23:35.282673Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15396","last_updated":"2024-10-20T14:07:24Z","snapshot_observed_at":"2026-08-15T16:11:31.073978Z","submitted_at":"2024-10-20T14:07:24Z","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","version":1},"cited_work":{"arxiv_id":"2410.15396","doi":"10.48550/arxiv.2410.15396","metadata_source":"pith","pith_arxiv_id":"2410.15396","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","venue":"cs.CR","work_id":"1937f526-5470-42e2-ab97-eac27b887769","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.786001Z"},"links":{"cited_paper":"/paper/2410.15396","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ed422f043ecd7859f8533ec662bb1977041f453c855386953308c5f323398fa4","observation_id":"b66b7867-adac-4c78-97c7-5068b00ec8b4","resolution":{"observed_at":"2026-08-15T14:23:35.154072Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.792446Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.792446Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9663896b2db883771110240bd0440ee882c0304e0609342ab17af918c98eaa09","observation_id":"2f9d3e0c-c261-4dd4-9812-f666714f0eb7","resolution":{"observed_at":"2026-08-15T14:21:41.792446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.04442","last_updated":"2024-04-05T22:59:02Z","snapshot_observed_at":"2026-08-13T19:08:38.601926Z","submitted_at":"2024-04-05T22:59:02Z","title":"Exploring Autonomous Agents through the Lens of Large Language Models: A Review","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.04442","snapshot_observed_at":"2026-08-15T14:21:41.798547Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.798547Z"},"links":{"cited_paper":"/paper/2404.04442","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:acd74a4a831141857cb076eab4e136e1edf3c15927a697a5902a439094326bff","observation_id":"6c8b572c-4f19-4acd-b562-d9ef95802fa7","resolution":{"observed_at":"2026-08-15T14:21:41.798547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.10374","last_updated":"2025-04-14T16:22:11Z","snapshot_observed_at":"2026-08-07T16:05:49.364751Z","submitted_at":"2025-04-14T16:22:11Z","title":"Ctrl-Z: Controlling AI Agents via Resampling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.10374","snapshot_observed_at":"2026-08-15T14:21:41.804267Z","title":"Kaufman, Tyler Tracy, Vasil Georgiev, Dávid Matolcsi, Akbir Khan, and Buck Shlegeris","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.804267Z"},"links":{"cited_paper":"/paper/2504.10374","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:b861a2ea3e4b76f191e5f86af5fa1c8171af32f439ec9bc45c55e9f58bc06cb6","observation_id":"86eab773-fbaa-4b43-90a6-05297c586783","resolution":{"observed_at":"2026-08-15T14:21:41.804267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.05159","last_updated":"2026-08-03T18:11:09Z","snapshot_observed_at":"2026-08-07T23:09:07.293633Z","submitted_at":"2025-10-03T12:47:21Z","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.05159","snapshot_observed_at":"2026-08-15T14:21:41.809018Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.809018Z"},"links":{"cited_paper":"/paper/2510.05159","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:e40c100b74c43966679fec13e8864e8273c3add23caae514abded0d6abb83966","observation_id":"362c3b4d-8ff3-42a2-9141-879488d4adf4","resolution":{"observed_at":"2026-08-15T14:21:41.809018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16222","last_updated":"2025-05-30T11:02:54Z","snapshot_observed_at":"2026-08-12T22:18:19.821562Z","submitted_at":"2024-10-21T17:27:01Z","title":"An Interpretable N-gram Perplexity Threat Model for Large Language Model Jailbreaks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.16222","snapshot_observed_at":"2026-08-15T14:21:41.814524Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.814524Z"},"links":{"cited_paper":"/paper/2410.16222","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ca4b3af713cc4ac1d65777da04ba7d5f540b6b8121226af9ab19f06aa3cd0da6","observation_id":"9bce1d34-fbfa-4ea8-a428-cf12b691cf1b","resolution":{"observed_at":"2026-08-15T14:21:41.814524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.3390/a18080499","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:34.930357Z","title":null,"venue":null,"work_id":"09894a8d-a05a-4aaa-868f-befd3715fc19","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.820157Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0661a3b5ab355d4b12542952bf0614ee70730f66048cf94ef7386d994810dc08","observation_id":"a5d083b6-5bb4-4c2c-a490-5748ca2f9041","resolution":{"observed_at":"2026-08-15T14:23:34.974041Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.826064Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.826064Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:8cbf13dcd65aa14af5404ad41ebeffd0b36c62f761bfa39c09dd3b6d123aa8c4","observation_id":"25775e0c-70f9-4fdf-b917-f47aec4c5734","resolution":{"observed_at":"2026-08-15T14:21:41.826064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18002","last_updated":"2025-01-29T21:33:02Z","snapshot_observed_at":"2026-08-11T08:12:38.089495Z","submitted_at":"2025-01-29T21:33:02Z","title":"Agentic Workflows for Conversational Human-AI Interaction Design","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18002","snapshot_observed_at":"2026-08-15T14:21:41.832539Z","title":"Verma, Atieh Taheri, Radha Kumaran, Zichen Chen, Jiaao Chen, Tobias Höllerer, and Misha Sra","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.832539Z"},"links":{"cited_paper":"/paper/2501.18002","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:45014083627379995df4ea31a8acc450566f0b5d731ad379878ba1a33dccfcdf","observation_id":"fd89136a-5836-403d-97bd-d0c6d1360ded","resolution":{"observed_at":"2026-08-15T14:21:41.832539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17922","last_updated":"2025-02-09T03:34:47Z","snapshot_observed_at":"2026-08-12T22:16:39.464079Z","submitted_at":"2024-10-23T14:40:37Z","title":"Dynamic Guided and Domain Applicable Safeguards for Enhanced Security in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17922","snapshot_observed_at":"2026-08-15T14:21:41.837763Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.837763Z"},"links":{"cited_paper":"/paper/2410.17922","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:2c01244e2eb1bd78fe7df032023736794a963755308a2318f5c2f6ab88b9aca0","observation_id":"ac9f0e27-d326-4eec-9f14-b301ec887b20","resolution":{"observed_at":"2026-08-15T14:21:41.837763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.843756Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.843756Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6a7edd1f5636a58a19e70cd84a89c5abd3ea1376995da65e0162028b09b946a1","observation_id":"e3827e7c-9b9e-4355-818e-4624a814da23","resolution":{"observed_at":"2026-08-15T14:21:41.843756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00384","last_updated":"2025-03-01T07:17:18Z","snapshot_observed_at":"2026-08-10T14:56:02.135612Z","submitted_at":"2025-03-01T07:17:18Z","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","version":1},"cited_work":{"arxiv_id":"2503.00384","doi":"10.48550/arxiv.2503.00384","metadata_source":"pith","pith_arxiv_id":"2503.00384","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","venue":"cs.CV","work_id":"499e7379-724e-4b41-a650-94d683b08cd3","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.852561Z"},"links":{"cited_paper":"/paper/2503.00384","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:f62acb0434e19293780e6b52a19a5ccea8d2873ad62de974f559aac1b836f5fb","observation_id":"0d5260d1-8def-4835-869f-f18f05ebae5c","resolution":{"observed_at":"2026-08-15T14:23:34.803627Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-08-15T07:38:32.361902Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-15T14:21:41.862200Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.862200Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:fad2522ad71aba77432d60e856828405da79d1c013104f64ac66c64efd30e4c8","observation_id":"c5f3f421-b485-4e17-bab6-46092d2d418e","resolution":{"observed_at":"2026-08-15T14:21:41.862200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.879771Z","title":"do anything now","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.879771Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ee29a04f9976d300f9c39c1b5a96dadf8ea54f45b3396963b3f2a36dce087cc9","observation_id":"c8a6f5e4-644e-411b-bb48-df949d41fdca","resolution":{"observed_at":"2026-08-15T14:21:41.879771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2512.01295","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:34.616678Z","title":null,"venue":null,"work_id":"11dd4768-0caa-4ae2-9db5-f78544874d1e","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.886856Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:b12b84cf983faa52c8647e06fe6dfdb347a79504be0643ee891c0f761db1912b","observation_id":"6fb35f92-cf24-45f4-a2e6-d955280d7661","resolution":{"observed_at":"2026-08-15T14:23:34.659697Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.03274","last_updated":"2024-12-02T08:53:40Z","snapshot_observed_at":"2026-08-14T01:29:12.213184Z","submitted_at":"2024-09-05T06:31:37Z","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.03274","snapshot_observed_at":"2026-08-15T14:21:41.892761Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.892761Z"},"links":{"cited_paper":"/paper/2409.03274","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:feea6c748f97de4990c4d59505dc38413bb91116a28c7a579087f3ec5d363775","observation_id":"7d91ad27-fbb6-4124-82e5-65ee3a358257","resolution":{"observed_at":"2026-08-15T14:21:41.892761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13038","last_updated":"2025-07-17T12:09:39Z","snapshot_observed_at":"2026-08-15T19:18:14.079695Z","submitted_at":"2025-07-17T12:09:39Z","title":"MAD-Spear: A Conformity-Driven Prompt Injection Attack on Multi-Agent Debate Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.13038","snapshot_observed_at":"2026-08-15T14:21:41.898216Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.898216Z"},"links":{"cited_paper":"/paper/2507.13038","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:8988f1e9f46ce211f7d315b4923b9b0ed899abd1a4f2108293a90b6612095881","observation_id":"47065ae6-7c85-42a3-befa-b7d4826b116b","resolution":{"observed_at":"2026-08-15T14:21:41.898216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.12872","last_updated":"2025-07-17T07:45:53Z","snapshot_observed_at":"2026-08-11T10:32:07.446828Z","submitted_at":"2025-07-17T07:45:53Z","title":"Manipulation Attacks by Misaligned AI: Risk Analysis and Safety Case Framework","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.12872","snapshot_observed_at":"2026-08-15T14:21:41.905782Z","title":"Lentati, Jason R","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.905782Z"},"links":{"cited_paper":"/paper/2507.12872","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:00a122ea9b096f1ae3aedb51e622743f956b81fbf02e77f9f15b51865e4a4d05","observation_id":"1ba874dc-285f-4dae-979c-1a8a1a803003","resolution":{"observed_at":"2026-08-15T14:21:41.905782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-13T20:52:15.127327Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.23883","snapshot_observed_at":"2026-08-15T14:21:41.911301Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.911301Z"},"links":{"cited_paper":"/paper/2510.23883","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9676d11123f99b170d17fa4f6b41f5f9ca00fa139a52f4bbf8d566244b1d2eb9","observation_id":"94c483af-1147-4dc6-8420-3d4f2f4b4f4f","resolution":{"observed_at":"2026-08-15T14:21:41.911301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-15T14:21:41.916506Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.916506Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7534ebc4f790a4ea284c2e94d1cbe56c1d4c64f8dfda7197f480a42d508672ef","observation_id":"095b62c7-a70a-4a14-9cd6-d3349e6e5644","resolution":{"observed_at":"2026-08-15T14:21:41.916506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.24380","last_updated":"2026-07-04T03:50:21Z","snapshot_observed_at":"2026-08-14T09:02:55.806123Z","submitted_at":"2025-09-29T07:29:18Z","title":"Agentic Services Computing","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.24380","snapshot_observed_at":"2026-08-15T14:21:41.923024Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.923024Z"},"links":{"cited_paper":"/paper/2509.24380","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:dc36d30ff76432f60fde2ecbe0cadbde398d669df98e98403c2ee853a9548907","observation_id":"b710b2b9-9f24-47e5-b51a-98c560be80f0","resolution":{"observed_at":"2026-08-15T14:21:41.923024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.930118Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.930118Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:b239a275357468d40a4b96d67ad42fc843d152060e0fe896b5f255e1ebd96145","observation_id":"71ebae16-d051-4db5-97d2-42a80323458c","resolution":{"observed_at":"2026-08-15T14:21:41.930118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.935211Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.935211Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0022d8d7fc4eccefe84c2aa1c0fb3429adcf4345048c0e4e5081a99243610e2d","observation_id":"879fad1b-6be0-463b-9645-24de41a7c5f1","resolution":{"observed_at":"2026-08-15T14:21:41.935211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.18359","last_updated":"2025-02-25T16:49:06Z","snapshot_observed_at":"2026-08-07T17:49:37.440403Z","submitted_at":"2025-02-25T16:49:06Z","title":"Responsible AI Agents","version":1},"cited_work":{"arxiv_id":"2502.18359","doi":"10.48550/arxiv.2502.18359","metadata_source":"pith","pith_arxiv_id":"2502.18359","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Responsible AI Agents","venue":"cs.CY","work_id":"0b8b9281-84c0-4460-a5be-e60b82041329","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.940662Z"},"links":{"cited_paper":"/paper/2502.18359","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d612731c48b972c5cfa350b7fb281fe455672dae907ea98068ecb9b49bf5098f","observation_id":"587a1dca-d9e3-4aad-8416-1f25414657cf","resolution":{"observed_at":"2026-08-15T14:23:34.337957Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02077","last_updated":"2026-04-29T10:47:33Z","snapshot_observed_at":"2026-08-14T09:14:00.327752Z","submitted_at":"2025-05-04T12:03:29Z","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02077","snapshot_observed_at":"2026-08-15T14:21:41.946780Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.946780Z"},"links":{"cited_paper":"/paper/2505.02077","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:91dcf266cd07835dea2b489c39c17d9f5468416aaf5f86f97447685de76c0fc9","observation_id":"52b8ad62-4dde-4923-afda-80d80d2a378e","resolution":{"observed_at":"2026-08-15T14:21:41.946780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.952668Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.952668Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:277a0ca9447fbdb8aa24d3bea6ccb6fe04590139799f2964565530112afbaf3a","observation_id":"a32a70cb-59dd-4abc-a863-a5dd275709de","resolution":{"observed_at":"2026-08-15T14:21:41.952668Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.02622","last_updated":"2024-06-03T19:27:46Z","snapshot_observed_at":"2026-08-12T23:51:10.026999Z","submitted_at":"2024-06-03T19:27:46Z","title":"Safeguarding Large Language Models: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.02622","snapshot_observed_at":"2026-08-15T14:21:41.957376Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.957376Z"},"links":{"cited_paper":"/paper/2406.02622","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:e2a67d5f0b3dd423129b674fa61caeb13dd85c7f28973e9ed91776aacd43dd15","observation_id":"692f1e92-cfde-4121-a3b6-811b0bb08bd2","resolution":{"observed_at":"2026-08-15T14:21:41.957376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00523","last_updated":"2025-06-24T18:55:29Z","snapshot_observed_at":"2026-08-13T21:05:36.732753Z","submitted_at":"2024-08-01T12:54:46Z","title":"Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00523","snapshot_observed_at":"2026-08-15T14:21:41.963559Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.963559Z"},"links":{"cited_paper":"/paper/2408.00523","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c1463f302305553eb0cd6a7c3f8163bf419b3910eb938a3f5aed79b256665506","observation_id":"ae63b5dc-4936-4c1d-b63e-38e9360641dd","resolution":{"observed_at":"2026-08-15T14:21:41.963559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.969059Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.969059Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9ea47715750f703bd79287a196f0d8ad27c339a50398c46a184e26a9b7de25d4","observation_id":"21d800e5-11cb-4603-b43e-4bf802fae26c","resolution":{"observed_at":"2026-08-15T14:21:41.969059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2502.0","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.950424Z","title":null,"venue":null,"work_id":"ccca24d0-9785-439a-a45b-bbf269a1d460","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.974948Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:448c075f4b6034d0b80c4d9642e1a9b2fd97fd6fd00739252eb09e811f77e814","observation_id":"1e10f1f8-356f-48b7-b6e7-2683ae39999c","resolution":{"observed_at":"2026-08-15T14:23:34.022122Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.07940","last_updated":"2024-06-10T15:51:16Z","snapshot_observed_at":"2026-08-13T00:08:41.289903Z","submitted_at":"2024-05-13T17:15:14Z","title":"RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.07940","snapshot_observed_at":"2026-08-15T14:21:41.988817Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.988817Z"},"links":{"cited_paper":"/paper/2405.07940","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:e51c53536437f55a00195e5f02587b437c1f7620714ccfd4c1c42497c5ec9bd3","observation_id":"c5e19eb0-328b-4c68-b63c-f40a6f807a06","resolution":{"observed_at":"2026-08-15T14:21:41.988817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.997469Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.997469Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:40ae4f54e8e4c908b1f85a1356ee969cdfefad633e6a245b2b98c9588bf17eca","observation_id":"f4a7469d-da36-40b0-b7cb-1461e88ddd39","resolution":{"observed_at":"2026-08-15T14:21:41.997469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.004072Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.004072Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7f4d4837efbdd58b8621bc67ebf3b371001f927e50ba4f0c6b04dd05fcd48061","observation_id":"355cffa6-a04f-4bdf-a975-96e6fd132fca","resolution":{"observed_at":"2026-08-15T14:21:42.004072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06922","last_updated":"2026-04-21T14:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-02-10T11:07:24Z","title":"Whispers in the Machine: Confidentiality in Agentic Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06922","snapshot_observed_at":"2026-08-15T14:21:42.011056Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.011056Z"},"links":{"cited_paper":"/paper/2402.06922","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7412fcd049404e2a93c90a06e965de51bc4913ba70e908db02a4349bc4dc86ee","observation_id":"85c31f77-0c33-4dc3-8f3c-64f6754b62f0","resolution":{"observed_at":"2026-08-15T14:21:42.011056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00865","last_updated":"2025-03-02T11:53:55Z","snapshot_observed_at":"2026-08-14T11:10:49.109724Z","submitted_at":"2025-03-02T11:53:55Z","title":"Babel: Open Multilingual Large Language Models Serving Over 90% of Global Speakers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00865","snapshot_observed_at":"2026-08-15T14:21:42.018789Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.018789Z"},"links":{"cited_paper":"/paper/2503.00865","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:8a0c7815e7b69ed3fa6e5240a1ae139d03a9b18d3ade53741286fd55978f68a4","observation_id":"cc3a6c73-6ce5-4d45-97dd-35ec41de697b","resolution":{"observed_at":"2026-08-15T14:21:42.018789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1006.2024","last_updated":"2010-06-11T07:21:59Z","snapshot_observed_at":"2026-08-15T05:16:50.040424Z","submitted_at":"2010-06-10T13:22:15Z","title":"The helium spread in the Globular cluster 47 Tuc","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1006.2024","snapshot_observed_at":"2026-08-15T14:21:42.025204Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.025204Z"},"links":{"cited_paper":"/paper/1006.2024","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:3dcfc36e62151c39307ddd7a3768bd2c6efd0d09dfa54f04eb5af611d757f1b1","observation_id":"9430410b-0750-4e7d-9945-b367c39f9944","resolution":{"observed_at":"2026-08-15T14:21:42.025204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.05075","last_updated":"2022-11-09T18:07:10Z","snapshot_observed_at":"2026-08-13T13:45:51.114750Z","submitted_at":"2022-11-09T18:07:10Z","title":"Supporting AI/ML Security Workers through an Adversarial Techniques, Tools, and Common Knowledge (AI/ML ATT&CK) Framework","version":1},"cited_work":{"arxiv_id":"2211.05075","doi":"10.48550/arxiv.2211.05075","metadata_source":"pith","pith_arxiv_id":"2211.05075","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Supporting AI/ML Security Workers through an Adversarial Techniques, Tools, and Common Knowledge (AI/ML ATT&CK) Framework","venue":"cs.CR","work_id":"910b71bb-c511-40da-a44c-62a1a46672ae","year":2022},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.030720Z"},"links":{"cited_paper":"/paper/2211.05075","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:e2bec1c209261da1ebb9eefee1714704c9fb2470650a347d613ecc959f29157f","observation_id":"573835bf-2a9d-44c6-a6df-351bf2117f76","resolution":{"observed_at":"2026-08-15T14:23:33.843869Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.037533Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.037533Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:de53aaea6f70d7234f9f024b6626890c0acad93c9bd41c98a21fb1f78b8a1ce9","observation_id":"5be363e7-bce7-4fc8-9766-c3b1c02a0dc8","resolution":{"observed_at":"2026-08-15T14:21:42.037533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.043932Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.043932Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7ddfd99d2a2e9d7b242a15862174978450562414104c0668faa6decc47009136","observation_id":"cca6c6da-7d46-4a19-9ad6-8f97070908dc","resolution":{"observed_at":"2026-08-15T14:21:42.043932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00371","last_updated":"2024-07-04T23:37:40Z","snapshot_observed_at":"2026-08-13T04:29:31.091122Z","submitted_at":"2024-02-01T06:21:19Z","title":"What Does the Bot Say? Opportunities and Risks of Large Language Models in Social Media Bot Detection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00371","snapshot_observed_at":"2026-08-15T14:21:42.049978Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.049978Z"},"links":{"cited_paper":"/paper/2402.00371","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:fe6c3b8f3b8c34effcebcbe4346e5aa78fc685b52a441c8d69c67fc4cba40b15","observation_id":"7afd8002-8b18-41e9-9587-eb61a42cae98","resolution":{"observed_at":"2026-08-15T14:21:42.049978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.056127Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.056127Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9eca27ae302f608ff5fa155d5734224657e12a265e92d8a2f260cadfcf1d2a33","observation_id":"01e6a189-736f-44b8-807a-78f892f82ea6","resolution":{"observed_at":"2026-08-15T14:21:42.056127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.sysarc.2010.04.005","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.512829Z","title":null,"venue":null,"work_id":"63dbc777-5b10-4616-be8f-15f79bd1f2a2","year":2010},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.063139Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:37f564da3a91fc5cef2d504e23aabe9d4007d8081df13f95b01db5d17387bd2f","observation_id":"16478b87-196a-4ace-8d89-dc2d3ea89cc5","resolution":{"observed_at":"2026-08-15T14:23:33.606668Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03275","last_updated":"2025-05-06T08:05:35Z","snapshot_observed_at":"2026-08-15T23:53:17.486647Z","submitted_at":"2025-05-06T08:05:35Z","title":"RAG-MCP: Mitigating Prompt Bloat in LLM Tool Selection via Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.03275","snapshot_observed_at":"2026-08-15T14:21:42.068204Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.068204Z"},"links":{"cited_paper":"/paper/2505.03275","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:1cbcfa9655745858acc4f2489b73e1472742df508158028f676949d2d7fc2707","observation_id":"a785bded-1e3d-49cf-9003-73025b12f846","resolution":{"observed_at":"2026-08-15T14:21:42.068204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09523","last_updated":"2024-11-14T15:40:04Z","snapshot_observed_at":"2026-08-14T07:59:07.134456Z","submitted_at":"2024-11-14T15:40:04Z","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09523","snapshot_observed_at":"2026-08-15T14:21:42.078865Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.078865Z"},"links":{"cited_paper":"/paper/2411.09523","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d83c07fa1a32c960217661e551a507b30a7e91759b30f41ba799f605c0560a72","observation_id":"2b7cf3f1-d160-424d-b2f6-0925487d670a","resolution":{"observed_at":"2026-08-15T14:21:42.078865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.083338Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.083338Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:cad924c793d2373960c8eda2c00940be8f223d4adbe1860fc96fe22d94815ff6","observation_id":"543fd9cb-b289-43d7-b303-79fa0b970848","resolution":{"observed_at":"2026-08-15T14:21:42.083338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03578","last_updated":"2026-01-28T04:55:23Z","snapshot_observed_at":"2026-07-06T17:25:53.950578Z","submitted_at":"2024-02-05T23:06:42Z","title":"LLM Multi-Agent Systems: Challenges and Open Problems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03578","snapshot_observed_at":"2026-08-15T14:21:42.088433Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.088433Z"},"links":{"cited_paper":"/paper/2402.03578","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:aea74807ed32ba544a17c53c70a0239fa5684f2395eea9fe7b129019c1040948","observation_id":"96fd72ce-cab0-447d-b7f7-a7ff1dd94fb4","resolution":{"observed_at":"2026-08-15T14:21:42.088433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19883","last_updated":"2024-07-20T06:00:22Z","snapshot_observed_at":"2026-08-12T23:54:22.710210Z","submitted_at":"2024-05-30T09:42:54Z","title":"From Words to Actions: Unveiling the Theoretical Underpinnings of LLM-Driven Autonomous Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19883","snapshot_observed_at":"2026-08-15T14:21:42.094467Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.094467Z"},"links":{"cited_paper":"/paper/2405.19883","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9f48268830575ca98c0e94aea0d1a79004871350e044f442d58d38ee20c1e63c","observation_id":"8e259adc-548a-4f8f-b346-b94698fe05b4","resolution":{"observed_at":"2026-08-15T14:21:42.094467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2506.01245","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.373791Z","title":null,"venue":null,"work_id":"e49bbca2-e966-4bf0-8646-b21a148c812a","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.099569Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:78e1bbf5cb7062338acbc4b29c339df044e9a85967f323a6e1fa53aca5661c29","observation_id":"951220a8-604e-4952-9c87-f0ecc5ba5cbc","resolution":{"observed_at":"2026-08-15T14:23:33.437228Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08689","last_updated":"2024-12-17T21:58:19Z","snapshot_observed_at":"2026-08-14T15:34:26.866806Z","submitted_at":"2024-06-12T23:16:45Z","title":"Security of AI Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.08689","snapshot_observed_at":"2026-08-15T14:21:42.104532Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.104532Z"},"links":{"cited_paper":"/paper/2406.08689","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:2859d986748f7694271a71415f15daf62ee799ce2d86472320627481504b766e","observation_id":"ef56fc60-122a-4274-a7d8-f435274d5c89","resolution":{"observed_at":"2026-08-15T14:21:42.104532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.15476","snapshot_observed_at":"2026-08-15T14:21:42.111376Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.111376Z"},"links":{"cited_paper":"/paper/2510.15476","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:f96fedd21b23fbf89ba5646ea4968aecf6d7f04055e4fadc37b770eb4ab07831","observation_id":"ca626d7d-baee-4340-9308-ab6edb5fb7a4","resolution":{"observed_at":"2026-08-15T14:21:42.111376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.01604","last_updated":"2024-11-03T15:20:21Z","snapshot_observed_at":"2026-08-12T22:08:50.015165Z","submitted_at":"2024-11-03T15:20:21Z","title":"Large Language Model Supply Chain: Open Problems From the Security Perspective","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.01604","snapshot_observed_at":"2026-08-15T14:21:42.117509Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.117509Z"},"links":{"cited_paper":"/paper/2411.01604","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:b678540918218087592301a513f64aafcf1b30a15dd6638bb44379db5106af57","observation_id":"9753bc53-40aa-4071-9f09-a605e9f31257","resolution":{"observed_at":"2026-08-15T14:21:42.117509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14296","last_updated":"2026-05-15T15:43:44Z","snapshot_observed_at":"2026-08-15T05:15:04.246228Z","submitted_at":"2025-02-20T06:20:36Z","title":"On the Trustworthiness of Generative Foundation Models: Guideline, Assessment, and Perspective","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14296","snapshot_observed_at":"2026-08-15T14:21:42.123996Z","title":"Huang et al","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.123996Z"},"links":{"cited_paper":"/paper/2502.14296","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c52dcacd21c635486d659bf9ce7b081d29650793f1475e906d176ffe7e4e66f7","observation_id":"df9c3234-fae3-4b0b-83f9-8272f537b082","resolution":{"observed_at":"2026-08-15T14:21:42.123996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09540","last_updated":"2025-04-07T08:55:40Z","snapshot_observed_at":"2026-08-16T02:04:08.340199Z","submitted_at":"2024-11-14T15:56:11Z","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","version":2},"cited_work":{"arxiv_id":"2411.09540","doi":"10.48550/arxiv.2411.09540","metadata_source":"pith","pith_arxiv_id":"2411.09540","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","venue":"cs.CV","work_id":"34e88cb7-aab0-41be-a0f0-135356eee40b","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.130463Z"},"links":{"cited_paper":"/paper/2411.09540","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:83ed0b8acc6ef9e1f5a2ad42dea7cecc5ad62e145be30c585de02ece07108d07","observation_id":"2ea066c2-1397-45ab-8bca-43269cf8597d","resolution":{"observed_at":"2026-08-15T14:23:33.257433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2511.15998","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.033504Z","title":null,"venue":null,"work_id":"dc0ff642-9aea-4c5a-a5fa-4975a5aaa9cd","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.138463Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:1323b4502005532eef831b52efdf4a4b087e22dadaaacccf73573ef19b6c94ef","observation_id":"cd897e72-98a1-4382-ae65-a8f9d6d16901","resolution":{"observed_at":"2026-08-15T14:23:33.111975Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-13T04:10:30.076865Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-15T14:21:42.143512Z","title":"Pappas, Hamed Hassani, Shuicheng Yan, Eric Wong, and Shiyu Chang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.143512Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c74836d519477f424c3f3567e97ae9ae63b6e83451a448c6159ee01e0b7d991d","observation_id":"cabab389-55ab-47da-8ee7-8785c95eae69","resolution":{"observed_at":"2026-08-15T14:21:42.143512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18333","last_updated":"2025-05-23T19:39:56Z","snapshot_observed_at":"2026-08-07T14:30:46.734293Z","submitted_at":"2025-05-23T19:39:56Z","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18333","snapshot_observed_at":"2026-08-15T14:21:42.150151Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.150151Z"},"links":{"cited_paper":"/paper/2505.18333","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:eb9d25e3d77580f2680eb0d47b68463a3fbcf6da2261fce3c26770e7b0a695bc","observation_id":"bc96a6d4-658e-4a0a-baf7-21b672dc8117","resolution":{"observed_at":"2026-08-15T14:21:42.150151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.70777/si.v2i2.14609","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:32.883374Z","title":null,"venue":null,"work_id":"b95dc3a8-2a49-42ea-93b3-1ad98c6e08f8","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.155874Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:93fa239a73ab3b9a4765d9cd8b2fc0c904362fcccf8dbd9d38d2d542315943a1","observation_id":"7efddd07-df96-478b-8d04-e2bf5ae9c0c9","resolution":{"observed_at":"2026-08-15T14:23:32.948785Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-15T01:24:10.205984Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-15T14:21:42.161059Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.161059Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:770e7a3fd55eb38edd64b6105d37ca0ea2d7f73d30aa988d84c5afbf3357672d","observation_id":"da484228-3a02-49a9-bec2-f19653f480d9","resolution":{"observed_at":"2026-08-15T14:21:42.161059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07791","last_updated":"2024-07-23T01:59:54Z","snapshot_observed_at":"2026-08-13T22:53:55.009344Z","submitted_at":"2024-07-10T16:08:46Z","title":"Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07791","snapshot_observed_at":"2026-08-15T14:21:42.169556Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.169556Z"},"links":{"cited_paper":"/paper/2407.07791","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d29702a02fda172a26e672db9f2677ee27f2eddc9639e7b2960101b61c5a9cba","observation_id":"a98b5659-e3f5-48de-a1cf-559e6d9f37fe","resolution":{"observed_at":"2026-08-15T14:21:42.169556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.08296","last_updated":"2026-04-08T21:31:49Z","snapshot_observed_at":"2026-08-12T20:57:33.174036Z","submitted_at":"2025-12-09T06:52:21Z","title":"Towards a Science of Scaling Agent Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.08296","snapshot_observed_at":"2026-08-15T14:21:42.175394Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.175394Z"},"links":{"cited_paper":"/paper/2512.08296","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ad9a09462eb36677936a058af71683de6036c71ef8a8772e58d99248217636aa","observation_id":"76b496f9-6cac-46e1-b244-0df97e86ddef","resolution":{"observed_at":"2026-08-15T14:21:42.175394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.19145","last_updated":"2025-06-04T18:25:06Z","snapshot_observed_at":"2026-08-07T17:46:16.837966Z","submitted_at":"2025-02-26T14:00:35Z","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.19145","snapshot_observed_at":"2026-08-15T14:21:42.182513Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.182513Z"},"links":{"cited_paper":"/paper/2502.19145","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:475e6718a0ea945c981097777ad17cf6e8e453bc26b6b0f0511f922fa95b751a","observation_id":"dc1f3025-e571-4a1e-923d-f8a4ec18ab5d","resolution":{"observed_at":"2026-08-15T14:21:42.182513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.12132","last_updated":"2023-03-21T18:45:09Z","snapshot_observed_at":"2026-08-13T12:19:41.154892Z","submitted_at":"2023-03-21T18:45:09Z","title":"Fundamentals of Generative Large Language Models and Perspectives in Cyber-Defense","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.12132","snapshot_observed_at":"2026-08-15T14:21:42.190210Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.190210Z"},"links":{"cited_paper":"/paper/2303.12132","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:34cefda3a9b10ece5849fb3f8a79d01471221d4e1fe3e522a2eefa32e295d9ec","observation_id":"b9045ec9-b9d4-4229-a3be-417c6812f80f","resolution":{"observed_at":"2026-08-15T14:21:42.190210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15560","last_updated":"2025-03-18T22:30:17Z","snapshot_observed_at":"2026-08-09T12:25:31.655495Z","submitted_at":"2025-03-18T22:30:17Z","title":"Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.15560","snapshot_observed_at":"2026-08-15T14:21:42.199903Z","title":"Kulkarni and Assaf Namer","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.199903Z"},"links":{"cited_paper":"/paper/2503.15560","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:2f85d1d930e62f8b6b31c882cc4b5fc600bceb2aa04af970881e5e0579e9e764","observation_id":"0e8edfdc-d6dd-45e2-8003-6b822c637d7f","resolution":{"observed_at":"2026-08-15T14:21:42.199903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.02844","last_updated":"2025-06-18T06:49:09Z","snapshot_observed_at":"2026-08-15T13:30:06.376395Z","submitted_at":"2025-02-05T02:59:23Z","title":"Wolfpack Adversarial Attack for Robust Multi-Agent Reinforcement Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.02844","snapshot_observed_at":"2026-08-15T14:21:42.205816Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.205816Z"},"links":{"cited_paper":"/paper/2502.02844","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:a01d6463736435590aa336c9ef0dda2e7634aa49a1a0019560f9dcd08842cd4f","observation_id":"7f20c2f6-0bcd-4e84-959d-9f3cbededcf3","resolution":{"observed_at":"2026-08-15T14:21:42.205816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.212803Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.212803Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:aae38d0ede91071211812f4ffaf132e0300fc26e861cb0598e6c92e4c208b143","observation_id":"9d271585-b974-4107-890a-160eea579338","resolution":{"observed_at":"2026-08-15T14:21:42.212803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18889","last_updated":"2025-08-24T03:15:13Z","snapshot_observed_at":"2026-08-16T02:12:41.000185Z","submitted_at":"2025-05-24T22:22:43Z","title":"Security Concerns for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18889","snapshot_observed_at":"2026-08-15T14:21:42.218395Z","title":"Li and Benjamin C","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.218395Z"},"links":{"cited_paper":"/paper/2505.18889","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:1c5b002796111e59c64b58497588c272c8474b1753d378878755541229f20c71","observation_id":"79ff8357-3ae3-4bda-89ad-947a812d98c8","resolution":{"observed_at":"2026-08-15T14:21:42.218395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04415","last_updated":"2024-12-05T18:38:30Z","snapshot_observed_at":"2026-08-14T06:12:22.608403Z","submitted_at":"2024-12-05T18:38:30Z","title":"Targeting the Core: A Simple and Effective Method to Attack RAG-based Agents via Direct LLM Manipulation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04415","snapshot_observed_at":"2026-08-15T14:21:42.223114Z","title":"Li et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.223114Z"},"links":{"cited_paper":"/paper/2412.04415","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ab5ec43b8224cc18a060c42b232d1b2d5fda55f663215abcaa68c86ebb9ffada","observation_id":"6dbd78a5-83f0-4b92-94e9-d305640d6b60","resolution":{"observed_at":"2026-08-15T14:21:42.223114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.08201","last_updated":"2024-12-11T08:44:15Z","snapshot_observed_at":"2026-08-15T09:51:52.666502Z","submitted_at":"2024-12-11T08:44:15Z","title":"Model-Editing-Based Jailbreak against Safety-aligned Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.08201","snapshot_observed_at":"2026-08-15T14:21:42.227801Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.227801Z"},"links":{"cited_paper":"/paper/2412.08201","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:5855b3434985f044c5472fdb6410afe4e8163073eefc022ddb8e960a6e392db4","observation_id":"cd7be9f7-9a57-4b53-96a0-3feab9f6d498","resolution":{"observed_at":"2026-08-15T14:21:42.227801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.00976","last_updated":"2025-05-02T03:37:52Z","snapshot_observed_at":"2026-08-15T23:33:23.102703Z","submitted_at":"2025-05-02T03:37:52Z","title":"Attack and defense techniques in large language models: A survey and new perspectives","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.00976","snapshot_observed_at":"2026-08-15T14:21:42.232920Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.232920Z"},"links":{"cited_paper":"/paper/2505.00976","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:91fac940d961c982ca79747c40021c926f7aa2924179217b320d2a81f7dee810","observation_id":"b45ec352-e572-4bcf-abc0-7b9131838e10","resolution":{"observed_at":"2026-08-15T14:21:42.232920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13141","last_updated":"2025-02-18T18:59:00Z","snapshot_observed_at":"2026-08-14T11:12:40.062131Z","submitted_at":"2025-02-18T18:59:00Z","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13141","snapshot_observed_at":"2026-08-15T14:21:42.239461Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.239461Z"},"links":{"cited_paper":"/paper/2502.13141","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:76d1aa622cd3404842b279759df02271cd3bccd2012fd2395070e5e5258a87e7","observation_id":"1c461d32-9f0b-4334-a293-d624010e3e3c","resolution":{"observed_at":"2026-08-15T14:21:42.239461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02882","last_updated":"2024-08-06T01:20:12Z","snapshot_observed_at":"2026-08-12T23:08:05.171551Z","submitted_at":"2024-08-06T01:20:12Z","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02882","snapshot_observed_at":"2026-08-15T14:21:42.244876Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.244876Z"},"links":{"cited_paper":"/paper/2408.02882","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:f8b7bc08c6b6c818215110992b9cefec566bfdcc4f4d22aa5c5b3925cdf2e4f7","observation_id":"d9f855f5-312b-4645-986b-e971b510356d","resolution":{"observed_at":"2026-08-15T14:21:42.244876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.01990","last_updated":"2025-08-02T12:44:02Z","snapshot_observed_at":"2026-08-12T16:45:40.094278Z","submitted_at":"2025-03-31T18:00:29Z","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.01990","snapshot_observed_at":"2026-08-15T14:21:42.256321Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.256321Z"},"links":{"cited_paper":"/paper/2504.01990","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c765e320395bd879af7819207f8ac3fb4fdba6c9f98dff975887372eb20cdedf","observation_id":"8fcd3c26-0180-4152-9ddb-4761c3d8f045","resolution":{"observed_at":"2026-08-15T14:21:42.256321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-16T00:34:08.535360Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-15T14:21:42.261625Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.261625Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:5f9b54872f4cccd0c55561e456cdf834c04450b727bce22a47b8a21d0af42471","observation_id":"f913ff73-2441-45cb-9540-727e700ff668","resolution":{"observed_at":"2026-08-15T14:21:42.261625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.267490Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.267490Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:30f76abe9f4085a97660d9d27d171be6585fdbb517175b1b1afad3a6ca08d8dc","observation_id":"9ba0ece1-70eb-458f-b077-25dfb79d73b7","resolution":{"observed_at":"2026-08-15T14:21:42.267490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11584","last_updated":"2024-04-17T17:32:41Z","snapshot_observed_at":"2026-08-04T23:37:27.678120Z","submitted_at":"2024-04-17T17:32:41Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11584","snapshot_observed_at":"2026-08-15T14:21:42.279376Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.279376Z"},"links":{"cited_paper":"/paper/2404.11584","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:56602cc042eda187b6b588855a9e8d14bfe68a7f25f5166e720e8410939a797c","observation_id":"8a64f505-be65-4265-b636-622ad1b61cfc","resolution":{"observed_at":"2026-08-15T14:21:42.279376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.17283","last_updated":"2024-09-25T18:49:21Z","snapshot_observed_at":"2026-08-12T22:37:29.196990Z","submitted_at":"2024-09-25T18:49:21Z","title":"Investigating Privacy Attacks in the Gray-Box Setting to Enhance Collaborative Learning Schemes","version":1},"cited_work":{"arxiv_id":"2409.17283","doi":"10.48550/arxiv.2409.17283","metadata_source":"pith","pith_arxiv_id":"2409.17283","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Investigating Privacy Attacks in the Gray-Box Setting to Enhance Collaborative Learning Schemes","venue":"cs.CR","work_id":"4cbff5a9-1aef-4524-beb6-a28ee313bbfb","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.285658Z"},"links":{"cited_paper":"/paper/2409.17283","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6ecad68f3936bbdef0730da8bd6a6ca51fc245cc2ce4f36320392edfbeaa0ad3","observation_id":"67ce1a38-a189-4aa9-b058-c5dc94eb1fcd","resolution":{"observed_at":"2026-08-15T14:21:44.794527Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09880","last_updated":"2024-10-14T02:11:29Z","snapshot_observed_at":"2026-08-14T10:48:24.376975Z","submitted_at":"2024-02-15T11:08:10Z","title":"Inadequacies of Large Language Model Benchmarks in the Era of Generative Artificial Intelligence","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09880","snapshot_observed_at":"2026-08-15T14:21:42.295405Z","title":"McIntosh, Teo Sušnjak, Tong Liu, Paul Watters, and Malka N","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.295405Z"},"links":{"cited_paper":"/paper/2402.09880","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:687db48b17ce5a4a862ecce8192321e58fdeab2826eb335a3494702f2a7d7918","observation_id":"f048fec4-5089-41f1-94ff-05cae9564ebe","resolution":{"observed_at":"2026-08-15T14:21:42.295405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.06292","last_updated":"2019-12-02T22:49:28Z","snapshot_observed_at":"2026-08-14T16:47:21.960100Z","submitted_at":"2019-04-12T16:05:21Z","title":"Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.06292","snapshot_observed_at":"2026-08-15T14:21:42.300945Z","title":"Miller, Zhen Xiang, and George Kesidis","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.300945Z"},"links":{"cited_paper":"/paper/1904.06292","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ac291e3b0082a9b0a8ab964fd45d417c66d6fd74b23a33873a28844be54e3b24","observation_id":"b9316548-2dda-4e68-a868-ee1dbba71992","resolution":{"observed_at":"2026-08-15T14:21:42.300945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10196","last_updated":"2024-02-15T18:51:32Z","snapshot_observed_at":"2026-08-16T01:25:23.464251Z","submitted_at":"2024-02-15T18:51:32Z","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10196","snapshot_observed_at":"2026-08-15T14:21:42.307404Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.307404Z"},"links":{"cited_paper":"/paper/2402.10196","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:852e1b90a152aa089e09f0b3a848c4b8601d142c40537d3b6d7b48d88582ae24","observation_id":"541a3df5-9526-46cc-a6a6-86187cdd9bf1","resolution":{"observed_at":"2026-08-15T14:21:42.307404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2506.13324","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:44.701701Z","title":null,"venue":null,"work_id":"997ec35f-d7ee-4e96-a8dd-3d83ab6028a4","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.312250Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:1796741dbc2ed85d26ec08cedfa5be91944888323ccadf8c69ded0cf42312804","observation_id":"df3b7f2e-9590-4fca-8279-955a6553fb77","resolution":{"observed_at":"2026-08-15T14:21:44.707023Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21083","last_updated":"2025-03-06T12:38:42Z","snapshot_observed_at":"2026-08-12T22:13:43.839054Z","submitted_at":"2024-10-28T14:48:05Z","title":"Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring","version":2},"cited_work":{"arxiv_id":"2410.21083","doi":"10.48550/arxiv.2410.21083","metadata_source":"pith","pith_arxiv_id":"2410.21083","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring","venue":"cs.CL","work_id":"e445c181-e867-468c-9dee-c2ab9eb297e6","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.316820Z"},"links":{"cited_paper":"/paper/2410.21083","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:dadb1eabd2355d32d13645407355376f1c5c93b2f7b294bd4771f71c65f5820f","observation_id":"06888835-5ea9-4eb8-b93b-09692e559ce2","resolution":{"observed_at":"2026-08-15T14:21:44.640548Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-15T05:49:36.290554Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-15T14:21:42.322122Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.322122Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6109a77d160b19e19480d59bf4e2a4a622d6b47371e92662122e56d1583807b4","observation_id":"18c21100-5fc1-433b-896b-5d2b3b548701","resolution":{"observed_at":"2026-08-15T14:21:42.322122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-15T07:47:42.680001Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-15T14:21:42.327871Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.327871Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c3d6e2b4b519ce903bc7e554fba1c830e599f74bd2abf4e2edace73662eb8396","observation_id":"fbca349d-659a-47a0-bdae-45ef47e6c78c","resolution":{"observed_at":"2026-08-15T14:21:42.327871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.11824","last_updated":"2025-08-15T22:13:54Z","snapshot_observed_at":"2026-08-14T15:51:32.003258Z","submitted_at":"2025-08-15T22:13:54Z","title":"Rethinking Autonomy: Preventing Failures in AI-Driven Software Engineering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.11824","snapshot_observed_at":"2026-08-15T14:21:42.332980Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.332980Z"},"links":{"cited_paper":"/paper/2508.11824","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d0008910cbb4b615297285a2c05f0477c7eb412ff30e975613425e131c56fd4b","observation_id":"3e11afc6-f838-496f-ab1a-d73fc134f262","resolution":{"observed_at":"2026-08-15T14:21:42.332980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.3390/s23136067","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:44.563154Z","title":null,"venue":null,"work_id":"1fabd0be-a73d-4f60-b4ca-02100a29566b","year":2023},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.338582Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0b4fac913ef3504042091115a17e04cc501fb13a5c4b5a0ace856128e25f860f","observation_id":"0c8956ca-4400-48ee-aa9e-7dce832e5ced","resolution":{"observed_at":"2026-08-15T14:21:44.568139Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03391","last_updated":"2024-07-03T14:52:09Z","snapshot_observed_at":"2026-08-15T07:16:57.942618Z","submitted_at":"2024-07-03T14:52:09Z","title":"Soft Begging: Modular and Efficient Shielding of LLMs against Prompt Injection and Jailbreaking based on Prompt Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.03391","snapshot_observed_at":"2026-08-15T14:21:42.343240Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.343240Z"},"links":{"cited_paper":"/paper/2407.03391","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:52ebb8c93b8f749fa03981afa9f6036b53fa04ac73a2a638364da7afaf52a2cc","observation_id":"b18b2425-c7e8-4444-9bcd-ae47ba148e1f","resolution":{"observed_at":"2026-08-15T14:21:42.343240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.04123","last_updated":"2026-06-04T19:57:38Z","snapshot_observed_at":"2026-08-15T15:06:48.125460Z","submitted_at":"2025-12-02T16:45:10Z","title":"Measuring Agents in Production","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.04123","snapshot_observed_at":"2026-08-15T14:21:42.352678Z","title":"Pan, Negar Arabzadeh, Riccardo Cogo, et al","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.352678Z"},"links":{"cited_paper":"/paper/2512.04123","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:913c8d3b164c387cd6baa8f1da731e9c02a7608fd325a0266279e1cd70d3ed89","observation_id":"8f781612-17fc-4adc-aa2c-0469ebb6f462","resolution":{"observed_at":"2026-08-15T14:21:42.352678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.362515Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.362515Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c15a2364d204a6101f46df1ffb24e6485f81fdf457bc2fde93420f1c6c03184d","observation_id":"cdcca64c-652a-48ba-a4a5-6e7b2989e000","resolution":{"observed_at":"2026-08-15T14:21:42.362515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16248","last_updated":"2025-07-09T01:38:20Z","snapshot_observed_at":"2026-08-15T22:00:16.397160Z","submitted_at":"2025-03-20T15:44:31Z","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16248","snapshot_observed_at":"2026-08-15T14:21:42.368091Z","title":"Ashwin Hebbar, Prateek Mittal, and Pramod Viswanath","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.368091Z"},"links":{"cited_paper":"/paper/2503.16248","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9b15b373da4fbf25697edb105a9853ba405e5985b2fc2919a2af1aa1c7584e7e","observation_id":"b2c992ca-c444-48b4-983d-fb121bc47cbb","resolution":{"observed_at":"2026-08-15T14:21:42.368091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.05710","last_updated":"2024-07-08T08:10:18Z","snapshot_observed_at":"2026-08-12T23:27:00.090332Z","submitted_at":"2024-07-08T08:10:18Z","title":"Saltzer & Schroeder for 2030: Security engineering principles in a world of AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.05710","snapshot_observed_at":"2026-08-15T14:21:42.374359Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.374359Z"},"links":{"cited_paper":"/paper/2407.05710","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:1b8b420856f058d98e0efba60c841368b542af099128d52c855e72ed19b73c16","observation_id":"b5cef070-7067-4065-bab4-b7de93fae92f","resolution":{"observed_at":"2026-08-15T14:21:42.374359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01606","last_updated":"2024-10-02T14:47:05Z","snapshot_observed_at":"2026-08-12T22:32:29.046663Z","submitted_at":"2024-10-02T14:47:05Z","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01606","snapshot_observed_at":"2026-08-15T14:21:42.380858Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.380858Z"},"links":{"cited_paper":"/paper/2410.01606","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:358333934f65c853a94564e9bd0057eccbe0c639cebb424cb7bcc4585079370e","observation_id":"d7920fdf-1b26-4147-be22-94e46feba56d","resolution":{"observed_at":"2026-08-15T14:21:42.380858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12926","last_updated":"2024-07-17T18:01:07Z","snapshot_observed_at":"2026-08-12T23:20:05.096365Z","submitted_at":"2024-07-17T18:01:07Z","title":"Single-Pulse Gamma-Ray Bursts have Prevalent Hard-to-Soft Spectral Evolution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12926","snapshot_observed_at":"2026-08-15T14:21:42.386268Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.386268Z"},"links":{"cited_paper":"/paper/2407.12926","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:917572a20ad12c15d9dea4e8047d953aaf3b4b4fe1f56e907ba7374986394297","observation_id":"94a50cff-1756-4361-9ace-c98b10786de1","resolution":{"observed_at":"2026-08-15T14:21:42.386268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15236","last_updated":"2026-05-27T16:38:46Z","snapshot_observed_at":"2026-08-14T15:17:01.627689Z","submitted_at":"2024-10-20T00:00:56Z","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15236","snapshot_observed_at":"2026-08-15T14:21:42.392917Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.392917Z"},"links":{"cited_paper":"/paper/2410.15236","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:e329fb3a6df8daeab77c894a2accd2429b9f8b876d30af13fa2b211bb5f8f25b","observation_id":"e329e801-7a61-407c-8d7e-23ed80723be2","resolution":{"observed_at":"2026-08-15T14:21:42.392917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-15T06:26:47.552378Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-15T14:21:42.399009Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.399009Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:56ef7ee8bfd2bf7c06d3fd2c5c25a05e3d81b244d35bdae515a3f1ba534294a9","observation_id":"0010ba4e-613a-4d4a-bdcd-ef865102bc15","resolution":{"observed_at":"2026-08-15T14:21:42.399009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.06512","last_updated":"2021-05-13T18:59:15Z","snapshot_observed_at":"2026-08-15T00:00:56.386968Z","submitted_at":"2021-05-13T18:59:15Z","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","version":1},"cited_work":{"arxiv_id":"2105.06512","doi":"10.48550/arxiv.2105.06512","metadata_source":"pith","pith_arxiv_id":"2105.06512","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","venue":"cs.LG","work_id":"b47a6158-ce0c-485e-a3bd-d4ff4c0bb02a","year":2021},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":103,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.405967Z"},"links":{"cited_paper":"/paper/2105.06512","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:18c1010c725e537e3510cb20dfe39972bf27b900c40cc226eadfb0be76b0f553","observation_id":"e090ee1f-c6f8-4399-8b75-25b814ed7eb2","resolution":{"observed_at":"2026-08-15T14:21:44.418131Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-13T11:34:39.546416Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-15T14:21:42.411193Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":104,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.411193Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:8b5cd3e8e881c43d0d4529955db80b2b59a40461d84f82201aa3ea7e5a10269b","observation_id":"df73cb37-0c7b-4e25-9751-b931ded22cc1","resolution":{"observed_at":"2026-08-15T14:21:42.411193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T16:11:19.795474Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":80,"verified_exact":19,"verified_fuzzy":0},"total_outbound_references":162},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 100 of 162 outbound references and 0 inbound Pith citation observations for arXiv:2608.10530."}