Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-10T12:20:03.672480Z
Paper Citation Record · LEDGER
As of 20 August 2026, this Paper Citation Record lists 100 of 106 outbound references and 0 inbound Pith citation observations for arXiv:2607.08147.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-10T12:20:03.672480Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
100 of 106 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 9ed1892d-39d2-4ea4-ad76-3765c435f643 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 4bbf902e-ede2-472a-86ea-c25213a10203 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents 2024.Developing a computer use model
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 92b31706-380e-4579-a44a-4535e34d21d5 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 3842d1b1-8c53-4580-85f6-2212d4c876c6 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation a36b4759-687b-4218-b34c-8c7b3ba7ef37 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 8b8b7c08-e707-4e6d-be6f-35f2f1b72de3 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation bfd5d8d7-340e-4927-ae45-9a02af7cf509 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Design Patterns for Securing LLM Agents against Prompt Injections
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5e9c24f0-64b6-4dac-9c4b-6bee8bdb43f5 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 8
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 99efca18-b351-4e11-9a95-253f05c0b8ea · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 207b19ef-cb81-4389-bde3-75545df790e4 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents StruQ: Defending Against Prompt Injection with Structured Queries
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation a1942c66-4eca-43c5-bafc-0ca199290442 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents
Reference 11
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 151b74eb-56d5-4b21-92e5-22db732711eb · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation cb7212e2-1c6c-4d47-adc1-190ef77d029d · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents How not to detect prompt injections with an llm
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 89914b78-06bf-40c5-8a52-327441f0fbe9 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 7408b8a4-a073-4472-80b1-eb5883f95fda · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation bfc1bfe1-7559-4a8a-a14f-47131b9b8ece · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Securing AI Agents with Information-Flow Control
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation ccfd81c9-52d2-4ac0-9354-4e2fa0f23205 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Defeating Prompt Injections by Design
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation ef897733-b2f0-41ce-b9d6-449eb170e45f · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 0bb260aa-9fd6-4607-ac1d-c59548ad975d · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Mind2Web: Towards a Generalist Agent for the Web
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 0c0702df-0000-48b6-a172-b8e96a90b381 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Laradji, Manuel Del Verme, Tom Marty, David Vazquez, Nicolas Chapados, and Alexandre Lacoste
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 959e9625-3a02-4e1f-aadd-af2e8403dbaf · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation feca462b-7ad3-437f-8232-bfc0be91fb3e · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 645a0073-6baf-4156-a77e-90fd89d8fc14 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 430b0bf1-c1e4-49a4-a930-c90914908f98 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts , booktitle =
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 13c0f375-bf0f-436d-a492-a35d7f2350d7 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 91638d94-6088-4f4f-970a-5ab824b3f64c · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2f1be916-6107-4a88-9bbc-4bed212cab73 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 06f3fbdd-6444-4892-8c70-bc32bac3d968 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 63d4aa18-e918-4c2b-bc5e-241e1a3c0bbc · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents 2024.Buying Spying: Insights into Commercial Surveillance Vendors
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation b5cdfa6e-58b3-4daf-bfff-6ad7bc32e81f · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023)
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2fc42c52-b94d-4f3e-85ba-2c8742f0d43a · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents 2007.XSS Attacks: Cross-Site Scripting Exploits and Defense
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 61b8c471-2866-4a18-b028-6d0983ecbedc · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 732c8734-c522-42e8-81c8-8e2133a7244c · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 680a7689-331d-4284-9dfc-bf4d93a7b01e · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation bd275a84-b3a0-44d0-bf6a-7fbc054cf662 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 05ca91fa-5da8-4657-af49-32317ee5d4a0 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents 2014.SafeFrames v1.1 Specification
Reference 36
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 29b0161e-57a1-4447-b999-729208bedcbd · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents A Critical Evaluation of Defenses against Prompt Injection Attacks
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 90bb07a5-8afa-45e1-884c-6b85788bbca7 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents When ai meets the web: Prompt injection risks in third-party ai chatbot plugins
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 833f5c4d-1bd5-4524-b943-85d8532a93d1 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2a71e710-8ad6-41b6-9c23-e08f9cd1fd82 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents VisualWebArena: Evaluating Multimodal Agents on Realistic Visual Web Tasks
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 1f405e3c-67a4-4724-8bd9-de026c7e52cd · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Communications of the ACM , volume =
Reference 41
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2390903c-db00-4ea5-89de-59768591be00 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents The cognitive firewall: Securing browser based ai agents against indirect prompt injection via hybrid edge cloud defense
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation c77b9ee5-464a-4e11-b2d5-86cec6f6ce57 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2d606753-37e1-48b1-b1fe-9f38415b8e9a · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 9b8e1877-6ef2-483e-a8fb-b7d0c296f5dc · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents In25th USENIX Security Symposium
Reference 45
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 54082bad-c27e-4015-95d7-64cc6507fe2f · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 09232739-3b47-4587-adea-ada3ad50082f · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage
Reference 47
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation c27d4fe3-3efb-44b6-9110-e463d8b64179 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Prompt Injection attack against LLM-integrated Applications
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation a7deb793-7bca-4f46-ac89-962beb6c5db5 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 49
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation d27de9fc-ce34-490d-8364-84501722e9c7 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents In: IEEE Symposium on Security and Privacy (S&P)
Reference 50
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 21a81851-ca04-49ef-b2d3-172fc0dc118b · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 51
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 92656bb2-3fb7-4004-9f97-7bfa0401a037 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 7904fe81-fece-46ee-8132-b25f5b83fce0 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5e902364-51d7-46a1-a3d6-204eb5b15ee4 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Towards Enterprise-Ready Computer Using Generalist Agent
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 00e84308-fbbf-454c-b33e-a0fef468a261 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 55
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation dc5bd7ee-c62d-47e4-96d7-0a2a50f5f758 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 56
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation ef81614d-e34c-4405-890d-2f7fd7205994 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents cellmate: Sandboxing browser ai agents
Reference 57
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 17701626-789a-4c4e-9f53-54bcfee671ea · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections
Reference 58
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 8e8d4b0c-b21f-40a9-9a74-678b1c51ef98 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 59
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 20dd7db3-5ea4-415d-b30f-29e01c6cf4ca · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 60
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 494ff69d-8bb1-4415-b94c-e1a88d88592a · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 61
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 254f794a-d47d-4e97-95d5-73f8db1c3d4c · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 62
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation c681dc94-a2db-4778-9b37-264705c01290 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 63
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 85dc5f5a-4993-45bb-b021-a405f594eb0a · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 64
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation ad541f5c-7ebf-457f-bab0-461e31634381 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Saltzer and M.D
Reference 65
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation c54ba00b-4323-4ba8-9389-33e17707c647 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Prompt Injection Attack to Tool Selection in LLM Agents
Reference 66
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation e5f45ecf-29d2-411b-ad54-07be45a7b9c3 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Progent: Securing AI Agents with Privilege Control
Reference 67
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 9a1f4561-8eab-4941-80f5-7d97e8cb4a52 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Permissive information-flow analysis for large language models
Reference 68
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation cfa8d287-1809-4204-9775-f8d971f0e754 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 69
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 737caae7-e131-4865-b120-83794369873e · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents In23rd USENIX Security Symposium
Reference 70
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 05047864-36a8-4ff6-96fa-7ecc5a30f9e7 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Muzzle: Adaptive agentic red-teaming of web agents against indirect prompt injection attacks
Reference 71
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 102d94c4-3dd0-492e-9b55-2fe3bd25ccd0 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 72
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 3015d79e-0d7e-4d34-bc59-f64bed6703a5 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Several-Dream9346
Reference 73
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 280721ae-b7db-4420-ad02-43e5cd1243b0 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 74
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation e3f2e3fa-8e8d-43ad-9396-f7c8d468f808 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions
Reference 75
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 593f5839-afb9-4175-822f-a50c9e2e8399 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery
Reference 76
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation efe5319e-c2a5-4ea8-9d4a-fd3e9f94bf1b · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 77
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation aa747bc6-6c7f-4daa-85c4-e0f56b167321 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents naacl-long.360/
Reference 78
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5a419fc8-8061-47c1-ae80-015b7a8ff266 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Envinjection: Environmental prompt injection attack to multi-modal web agents
Reference 79
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation be2cbff8-bb01-46ab-b495-6eed47a6abd2 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Websentinel: Detecting and localizing prompt injection attacks for web agents
Reference 80
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 4284a130-0cc6-49e4-ac64-3454b577a0c2 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Agent Workflow Memory
Reference 81
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation c6df2688-65a4-4c48-ab96-34c4ff7fd75b · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Rl is a hammer and llms are nails: A simple reinforcement learning recipe for strong prompt injection
Reference 82
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 1b60801b-a6aa-42d3-b24f-b11d4d71a40a · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 83
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation d3ec3667-e441-40ec-9399-ccafe6926c71 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 84
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 35dc037d-3251-4c14-b2a4-73943c510597 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective
Reference 85
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation cb960af1-81a6-4e98-a54a-079faccbfd01 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent,
Reference 86
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2fe81d14-9813-4695-9bb3-4a11d27154d1 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 87
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation c9a13f31-a8b4-478e-9db2-77d30dd93cac · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents
Reference 88
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 12d728dd-dcde-49c6-9955-2f216d931798 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Xu, Yufan Song, Boxuan Li, et al
Reference 89
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 41439c36-a94e-403d-939f-c818d5b6d2c8 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 90
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5f1f778f-518f-417c-89f8-17ceac40fee6 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 91
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 694bbf41-e247-41b9-ad6e-701bbca72553 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Set-of-Mark Prompting Unleashes Extraordinary Visual Grounding in GPT-4V
Reference 92
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation ab21f29e-908f-42b6-ac87-4314f602e0c3 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents AgentOccam: A Simple Yet Strong Baseline for LLM-Based Web Agents
Reference 93
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 4c0466ee-3251-48fd-9c94-74ce26b92cab · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents In-Context Defense in Computer Agents: An Empirical Study
Reference 94
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 236b8136-c51f-4c14-bb1e-30bb05ab5cdf · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Unresolved cited work
Reference 95
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 9bdea333-236e-45d2-a5cd-346eb16398e7 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents ISBN 979-8-89176-195-7
Reference 96
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 6267cd72-2123-43bd-a78a-12204f61f320 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents
Reference 97
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2d2a1655-e1e4-4da2-b4e9-fa2f64318076 · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents WebPilot: A Versatile and Autonomous Multi-Agent System for Web Task Execution with Strategic Exploration
Reference 98
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation e4cb4ee9-5f1b-4149-9cf8-5b7143bff42b · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents Attacking Vision-Language Computer Agents via Pop-ups
Reference 99
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation e33b4044-cd5d-4fb9-a931-f3dfbcbf16fe · outbound
Prismata: Confining Cross-Site Prompt Injection in Web Agents WebGuard: Building a Generalizable Guardrail for Web Agents
Reference 100
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
No inbound Pith citation observations are available.