Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-05T05:09:40.020584Z
Paper Citation Record · LEDGER
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
As of 21 August 2026, this Paper Citation Record lists 49 of 49 outbound references and 11 inbound Pith citation observations for arXiv:2509.05755.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-04T08:06:16.098981Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-08-05T02:28:24.338817Z
Reference resolution
49 of 49 outbound references displayed
- verified exact2
- verified fuzzy28
- unresolved19
- parse uncertain0
- malformed identifier0
- metadata mismatch0
External citation measurements
0
pith, observed 2026-08-05T02:28:24.338817Z
Outbound references
Observation e9995044-7870-47d3-81cc-d43ac03c5082 · outbound
This paper cites https://jfrog.com/blog/p rompt-injection-attack-code-execution-in-vanna-ai-cve-2024-5565/, 2024.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment https://jfrog.com/blog/p rompt-injection-attack-code-execution-in-vanna-ai-cve-2024-5565/, 2024
Reference 1
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.530979Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 908d4b2e-401b-408b-ac44-14ea48069655 · outbound
This paper cites https://thehackernews.com/2024 /06/prompt-injection-flaw-in-vanna-ai.html, 2024.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment https://thehackernews.com/2024 /06/prompt-injection-flaw-in-vanna-ai.html, 2024
Reference 2
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.511326Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 97061c38-caf8-4dd3-952b-00931101f7fe · outbound
This paper cites https://www.cherry-ai.com/, 2025.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment https://www.cherry-ai.com/, 2025
Reference 3
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.485868Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 62abf537-44cd-430f-976e-e005c318ed76 · outbound
This paper cites https://docs.anthropic.com/en/docs/claude-code/overview , 2025.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment https://docs.anthropic.com/en/docs/claude-code/overview , 2025
Reference 4
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.456265Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation cd49c8f8-9c8d-4051-9592-a3964d41fb86 · outbound
This paper cites https://docs.github.com/en/copil ot/using-github-copilot/copilot-chat, 2025.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment https://docs.github.com/en/copil ot/using-github-copilot/copilot-chat, 2025
Reference 5
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.428727Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation ad5068f1-0cd3-4a4d-ab91-481c6f494f4e · outbound
This paper cites https://owasp.org/www-proje ct-top-10-for-large-language-model-applications/, 2025.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment https://owasp.org/www-proje ct-top-10-for-large-language-model-applications/, 2025
Reference 6
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.400243Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 3588386c-dd77-41c4-8838-5966f11ef3dd · outbound
This paper cites Accessed 2025-08-26.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Accessed 2025-08-26
Reference 7
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.375616Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 28026c98-05e1-415c-81ca-2b32d8c036a9 · outbound
This paper cites Accessed 2025-08-26.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Accessed 2025-08-26
Reference 8
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.352428Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 89f1ba3c-72ac-4fc3-b6d0-8f58e83df1ea · outbound
This paper cites Anthropic tool use and function calling.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Anthropic tool use and function calling
Reference 9
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.327200Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 9a0f2e10-81c2-45a2-83b3-573ddea70a5e · outbound
This paper cites Model context protocol.https://docs.anthropic.com/docs/mcp/, 2024.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Model context protocol.https://docs.anthropic.com/docs/mcp/, 2024
Reference 10
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.305113Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation c9179a97-7fa6-44f1-8062-1426bbf4cf12 · outbound
This paper cites Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications
Reference 11
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.782564Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 407c5235-9481-478b-9021-979d2501ae22 · outbound
This paper cites Accessed 2025-08-26.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Accessed 2025-08-26
Reference 12
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.278728Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 07079539-cf03-4ffe-a02d-24f475836e0e · outbound
This paper cites Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents.Advances in Neural Information Processing Systems, 37:82895–82920, 2024.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents.Advances in Neural Information Processing Systems, 37:82895–82920, 2024
Reference 13
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.256452Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation f3762e53-3c9e-461c-a296-2888f147cbac · outbound
This paper cites The Llama 3 Herd of Models.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment The Llama 3 Herd of Models
Reference 14
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.800933Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2a3bf3fe-ac71-45a1-bfe0-02f925a4b86e · outbound
This paper cites Conversational Prompt Engineering.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Conversational Prompt Engineering
Reference 15
- Resolution
- verified exact
- local_arxiv, observed 2026-08-05T05:09:40.777379Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 0e8dfd11-281a-4c09-91c8-f6ef868ce623 · outbound
This paper cites WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks
Reference 16
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.813876Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ef92fb38-1d05-47b3-8b4d-4afed1b45398 · outbound
This paper cites An Empirical Categorization of Prompting Techniques for Large Language Models: A Practitioner's Guide.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment An Empirical Categorization of Prompting Techniques for Large Language Models: A Practitioner's Guide
Reference 17
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.820844Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d868d79c-af93-469e-887d-e8428f51f636 · outbound
This paper cites What is prompt engineering? https://cloud.google.com/discover/what-is-promp t-engineering?hl=en#what-is-prompt-engineering, 2025.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment What is prompt engineering? https://cloud.google.com/discover/what-is-promp t-engineering?hl=en#what-is-prompt-engineering, 2025
Reference 18
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.232493Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation b4656a5e-5286-4acb-a1d8-2dd5e5a89746 · outbound
This paper cites Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection
Reference 19
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.835452Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a43c34b6-1182-4430-99b8-28e4822e7418 · outbound
This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations
Reference 20
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.841874Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 85e9ee6f-d778-4a05-a24d-147cab8a50b9 · outbound
This paper cites Promptshield: Deploy- able detection for prompt injection attacks.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Promptshield: Deploy- able detection for prompt injection attacks
Reference 21
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.193369Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 27b5fa44-5b19-4017-9c30-566884e56539 · outbound
This paper cites Kpmg ai quarterly pulse survey: From agent experimentation to rapid scale and deployment.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Kpmg ai quarterly pulse survey: From agent experimentation to rapid scale and deployment
Reference 22
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.172873Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation a3a3005c-09d3-4bc1-ac61-76dc3459c4f4 · outbound
This paper cites How to use chat models to call tools.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment How to use chat models to call tools
Reference 23
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.150660Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation ae5f12df-493f-4ed9-ba60-7c71131e3ff7 · outbound
This paper cites EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage
Reference 24
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.868193Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d7881e67-b55b-4f0a-a74f-5b1944d62543 · outbound
This paper cites Self-Reflection Makes Large Language Models Safer, Less Biased, and Ideologically Neutral.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Self-Reflection Makes Large Language Models Safer, Less Biased, and Ideologically Neutral
Reference 25
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.874576Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4119c212-c675-408a-81e9-0e99ba7fe945 · outbound
This paper cites Demystifying rce vulnerabilities in llm-integrated apps.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Demystifying rce vulnerabilities in llm-integrated apps
Reference 26
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.126476Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation c568f671-1bbd-4ccd-8da4-85eea6062524 · outbound
This paper cites What do you want? user-centric prompt generation for text-to-image synthesis via multi-turn guidance.arXiv preprint arXiv:2408.12910, 2024.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment What do you want? user-centric prompt generation for text-to-image synthesis via multi-turn guidance.arXiv preprint arXiv:2408.12910, 2024
Reference 27
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.887000Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d6f45d43-3a6d-4e11-bf11-4700c819a7f0 · outbound
This paper cites Formalizing and bench- marking prompt injection attacks and defenses.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Formalizing and bench- marking prompt injection attacks and defenses
Reference 28
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.098378Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 6f1910d5-5138-4ac3-8888-c7e150c90193 · outbound
This paper cites LLM In-Context Recall is Prompt Dependent.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment LLM In-Context Recall is Prompt Dependent
Reference 29
- Resolution
- verified exact
- local_arxiv, observed 2026-08-05T05:09:40.275758Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 71f603de-062e-4ca4-a6b1-0630cb42a9d4 · outbound
This paper cites Large Language Models Know Your Contextual Search Intent: A Prompting Framework for Conversational Search.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Large Language Models Know Your Contextual Search Intent: A Prompting Framework for Conversational Search
Reference 30
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.903821Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 579ea73d-e38b-4363-bf91-7ade07ccf287 · outbound
This paper cites Llama-prompt-guard-2-22m.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Llama-prompt-guard-2-22m
Reference 31
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.073052Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation c5410c68-8013-4137-b1be-d3555ec15528 · outbound
This paper cites Augmented Language Models: a Survey.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Augmented Language Models: a Survey
Reference 32
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.915182Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 39e175ac-9b83-4922-9ee4-5ad3e26f625a · outbound
This paper cites A Closer Look at System Prompt Robustness.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment A Closer Look at System Prompt Robustness
Reference 33
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.921172Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7b8a8328-08ce-48a9-b6d4-25206be9f2d5 · outbound
This paper cites Position is power: System prompts as a mechanism of bias in large language models (llms).
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Position is power: System prompts as a mechanism of bias in large language models (llms)
Reference 34
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.046186Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 51e69f08-bc38-41a7-9027-b8bb4893e81b · outbound
This paper cites What is agentic ai? https://blogs.nvidia.com/blog/what-is-agentic-ai/ , 2024.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment What is agentic ai? https://blogs.nvidia.com/blog/what-is-agentic-ai/ , 2024
Reference 35
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.025647Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 85c1f51f-3a59-46e4-8458-194e521ee7ac · outbound
This paper cites Function Calling with LLMs.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Function Calling with LLMs
Reference 36
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:41.005989Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation c045c9d2-502b-4728-a01e-b20d81f1ed24 · outbound
This paper cites Openai assistants and tool use documentation.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Openai assistants and tool use documentation
Reference 37
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:40.984125Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation d8150135-e2ca-4871-9c30-2ee3b1997c5e · outbound
This paper cites Pwc’s ai agent survey.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Pwc’s ai agent survey
Reference 38
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:40.964097Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation ea544374-55c9-45f2-8a42-10ee93d2d637 · outbound
This paper cites Tool learning with large language models: A survey.Frontiers of Computer Science, 19(8):198343, 2025.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Tool learning with large language models: A survey.Frontiers of Computer Science, 19(8):198343, 2025
Reference 39
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.957253Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0caf3c5a-5e4a-4ec4-91c4-462359a1756b · outbound
This paper cites Toolformer: Language models can teach themselves to use tools.Advances in Neural Information Processing Systems, 36:68539–68551, 2023.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Toolformer: Language models can teach themselves to use tools.Advances in Neural Information Processing Systems, 36:68539–68551, 2023
Reference 40
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:40.933641Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation fe7e9087-75fb-4593-a0a9-62ffbe2bfc75 · outbound
This paper cites Cline — ai coding, open source and uncompromised.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Cline — ai coding, open source and uncompromised
Reference 41
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:40.911858Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 9c655096-f07b-42c1-b1cc-3548e9f88d27 · outbound
This paper cites AdvAgent: Controllable Blackbox Red-teaming on Web Agents.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment AdvAgent: Controllable Blackbox Red-teaming on Web Agents
Reference 42
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.975185Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aa5368bd-9afc-4180-b2ac-059056983a7a · outbound
This paper cites React: Synergizing reasoning and acting in language models.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment React: Synergizing reasoning and acting in language models
Reference 43
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.981410Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9acb4cc3-cf41-47ab-a028-ae5e1faf9068 · outbound
This paper cites Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents
Reference 44
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.987143Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d981f5bf-91c7-408e-8196-88cd0ac27398 · outbound
This paper cites Injecagent: Benchmarking indirect prompt injections in tool-integrated llm agents.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Injecagent: Benchmarking indirect prompt injections in tool-integrated llm agents
Reference 45
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:40.876491Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 06f34892-dbc4-47f3-a2d6-a25f7954bf0a · outbound
This paper cites SPRIG: Improving Large Language Model Performance by System Prompt Optimization.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment SPRIG: Improving Large Language Model Performance by System Prompt Optimization
Reference 46
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:39.998742Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7a67a165-bd3d-411e-82f6-82ce4ba28d9c · outbound
This paper cites a helpful assistant.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment a helpful assistant
Reference 47
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-05T05:09:40.850748Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 439ec31b-2370-422d-a5ee-527c586cfa08 · outbound
This paper cites Context-faithful Prompting for Large Language Models.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Context-faithful Prompting for Large Language Models
Reference 48
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:40.014381Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cf50d8e3-a96a-4a81-9b6d-0591876bad5e · outbound
This paper cites MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents.
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents
Reference 49
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T05:09:40.020584Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Pith citing papers
Observation 9d74020d-4276-44f4-972a-d140ebd224d1 · inbound
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem cites this paper.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 50
- Resolution
- verified exact
- arxiv_id, observed 2026-06-30T02:16:09.705257Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation b2f37388-ce84-46df-a93e-5317fdf8e087 · inbound
When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents cites this paper.
When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 94
- Resolution
- unresolved
- no resolver link, observed 2026-08-04T08:06:16.098981Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 647942dc-86f7-4c34-b8d2-3c4975cffa7d · inbound
Verifiable Manifest Signing and Transparency Enforcement for Secure MCP-Based LLM Pipelines cites this paper.
Verifiable Manifest Signing and Transparency Enforcement for Secure MCP-Based LLM Pipelines Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 39
- Resolution
- unresolved
- no resolver link, observed 2026-08-03T06:18:06.545883Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aaad7391-b404-488a-bdc8-97f7d54d5713 · inbound
Security Considerations for Multi-agent Systems cites this paper.
Security Considerations for Multi-agent Systems Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 279
- Resolution
- verified exact
- arxiv_id, observed 2026-06-30T02:16:09.705257Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation ca03258d-9fd1-4e78-b649-060698daa6bc · inbound
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents cites this paper.
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 4
- Resolution
- verified exact
- arxiv_id, observed 2026-06-30T02:16:09.705257Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation ae2b9919-6ccc-4980-96d2-63039ece1e71 · inbound
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents cites this paper.
Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 4
- Resolution
- unresolved
- no resolver link, observed 2026-08-02T15:04:20.284238Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e3a483f2-a692-4cf3-af23-03f439f78a3d · inbound
When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents cites this paper.
When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 16
- Resolution
- verified exact
- local_arxiv, observed 2026-06-30T16:24:55.067215Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation eef9bcc5-a2fe-485b-ab8c-85086b0598ad · inbound
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation cites this paper.
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 208
- Resolution
- verified exact
- arxiv_id, observed 2026-06-30T02:16:09.705257Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 09dc7c45-d270-4e7a-aa73-62ff2e95d091 · inbound
Rule Taxonomy and Evolution in AI IDEs: A Mining and Survey Study cites this paper.
Rule Taxonomy and Evolution in AI IDEs: A Mining and Survey Study Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 100
- Resolution
- verified exact
- local_arxiv, observed 2026-07-03T12:08:07.100919Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 71ce2c75-eb1f-4265-a68f-6b6c27a541bd · inbound
ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP cites this paper.
ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 30
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T14:19:54.256550Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.
Observation 0c219119-2ba5-4ca1-8932-b9a863d5a04d · inbound
Where Is the Cost of Third-Party API Routers in Agentic Software Development? cites this paper.
Where Is the Cost of Third-Party API Routers in Agentic Software Development? Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 25
- Resolution
- unresolved
- no resolver link, observed 2026-07-30T17:25:46.962117Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.