Paper Citation Record · LEDGER

BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

As of 13 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 14 inbound Pith citation observations for arXiv:2511.20597.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2511.20597 v2

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 14 of 14 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-13T06:32:02.005865+00:00

measured 14 of 14 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-07-10T12:20:03.672480Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

1
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation ec163114-becf-44a3-93ab-fe9b0a9c4a98 · inbound

The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems cites this paper.

The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 139

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation baf82be7-dfea-4b6b-8cd6-4670ce1b7429 · inbound

Security Considerations for Multi-agent Systems cites this paper.

Security Considerations for Multi-agent Systems BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 128

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation da654f9d-7022-4680-9295-d23daa2bc74c · inbound

Security Considerations for Artificial Intelligence Agents cites this paper.

Security Considerations for Artificial Intelligence Agents BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 55

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation d7e137b8-c2d8-4911-adc2-736c8e256432 · inbound

TRUSTDESC: Preventing Tool Poisoning in LLM Applications via Trusted Description Generation cites this paper.

TRUSTDESC: Preventing Tool Poisoning in LLM Applications via Trusted Description Generation BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 76

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 773fa62e-314f-4ca0-8b5b-8efa398cc30a · inbound

Indirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives cites this paper.

Indirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 97

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation d0eae604-3357-4766-a29f-6d9294fc6bb5 · inbound

Toward a Principled Framework for Agent Safety Measurement cites this paper.

Toward a Principled Framework for Agent Safety Measurement BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 23

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 7b423caf-0233-4add-b9cb-150bac94caa5 · inbound

WAAA! Web Adversaries Against Agentic Browsers cites this paper.

WAAA! Web Adversaries Against Agentic Browsers BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 57

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 27dd033b-ee7d-416e-8881-03289350d7e4 · inbound

Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability cites this paper.

Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 191

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation e903b718-ddd9-484f-8d4d-39f3ae39dbc1 · inbound

Web Agents Should Adopt the Plan-Then-Execute Paradigm cites this paper.

Web Agents Should Adopt the Plan-Then-Execute Paradigm BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 38

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation a9f8880c-dfec-4ced-aff0-e506b530688d · inbound

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections cites this paper.

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 78

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 6a8e7267-cf47-44be-b914-0f8d010ee7d7 · inbound

Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback cites this paper.

Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 38

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation beaaeae9-eb3c-42f4-9656-2dfc7c89dad6 · inbound

Same-Origin Policy for Agentic Browsers cites this paper.

Same-Origin Policy for Agentic Browsers BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 30

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation a3f6ca82-9601-47c5-b96a-4c7e8323c4ab · inbound

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense cites this paper.

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 87

Resolution: metadata mismatch; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 6267cd72-2123-43bd-a78a-12204f61f320 · inbound

Prismata: Confining Cross-Site Prompt Injection in Web Agents cites this paper.

Prismata: Confining Cross-Site Prompt Injection in Web Agents BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

Reference 97

Resolution: verified exact; arxiv_id, observed 2026-08-13T01:24:45.972029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.