{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:5KD5VPYBGQNJ5FXTZMJ7TER5X6","short_pith_number":"pith:5KD5VPYB","schema_version":"1.0","canonical_sha256":"ea87dabf01341a9e96f3cb13f9923dbf839e6cae965794c04c0bfa729f80b73e","source":{"kind":"arxiv","id":"2508.19500","version":1},"attestation_state":"computed","paper":{"title":"Servant, Stalker, Predator: How An Honest, Helpful, And Harmless (3H) Agent Unlocks Adversarial Skills","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"David Noever","submitted_at":"2025-08-27T01:11:59Z","abstract_excerpt":"This paper identifies and analyzes a novel vulnerability class in Model Context Protocol (MCP) based agent systems. The attack chain describes and demonstrates how benign, individually authorized tasks can be orchestrated to produce harmful emergent behaviors. Through systematic analysis using the MITRE ATLAS framework, we demonstrate how 95 agents tested with access to multiple services-including browser automation, financial analysis, location tracking, and code deployment-can chain legitimate operations into sophisticated attack sequences that extend beyond the security boundaries of any in"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2508.19500","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-27T01:11:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"70e6a8e72b9a228af5e3f6740aa08daa1c7d6b07efa929dd239fd19b0ec473a5","abstract_canon_sha256":"271aed470644c8f563a8c83af451a52caffc4ac8827206d8c11cac17ff654377"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:00:12.675273Z","signature_b64":"qS/fGmn5C3KjQwa5YtXwDN4b1D9WiIgvL0LzN7xI4+xLGtpdUMYsJ7NDizqybn64j53F1CzeSVC9Dja/9BEKAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ea87dabf01341a9e96f3cb13f9923dbf839e6cae965794c04c0bfa729f80b73e","last_reissued_at":"2026-07-05T12:00:12.674753Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:00:12.674753Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Servant, Stalker, Predator: How An Honest, Helpful, And Harmless (3H) Agent Unlocks Adversarial Skills","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"David Noever","submitted_at":"2025-08-27T01:11:59Z","abstract_excerpt":"This paper identifies and analyzes a novel vulnerability class in Model Context Protocol (MCP) based agent systems. The attack chain describes and demonstrates how benign, individually authorized tasks can be orchestrated to produce harmful emergent behaviors. Through systematic analysis using the MITRE ATLAS framework, we demonstrate how 95 agents tested with access to multiple services-including browser automation, financial analysis, location tracking, and code deployment-can chain legitimate operations into sophisticated attack sequences that extend beyond the security boundaries of any in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.19500","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.19500/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2508.19500","created_at":"2026-07-05T12:00:12.674831+00:00"},{"alias_kind":"arxiv_version","alias_value":"2508.19500v1","created_at":"2026-07-05T12:00:12.674831+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.19500","created_at":"2026-07-05T12:00:12.674831+00:00"},{"alias_kind":"pith_short_12","alias_value":"5KD5VPYBGQNJ","created_at":"2026-07-05T12:00:12.674831+00:00"},{"alias_kind":"pith_short_16","alias_value":"5KD5VPYBGQNJ5FXT","created_at":"2026-07-05T12:00:12.674831+00:00"},{"alias_kind":"pith_short_8","alias_value":"5KD5VPYB","created_at":"2026-07-05T12:00:12.674831+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6","json":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6.json","graph_json":"https://pith.science/api/pith-number/5KD5VPYBGQNJ5FXTZMJ7TER5X6/graph.json","events_json":"https://pith.science/api/pith-number/5KD5VPYBGQNJ5FXTZMJ7TER5X6/events.json","paper":"https://pith.science/paper/5KD5VPYB"},"agent_actions":{"view_html":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6","download_json":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6.json","view_paper":"https://pith.science/paper/5KD5VPYB","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2508.19500&json=true","fetch_graph":"https://pith.science/api/pith-number/5KD5VPYBGQNJ5FXTZMJ7TER5X6/graph.json","fetch_events":"https://pith.science/api/pith-number/5KD5VPYBGQNJ5FXTZMJ7TER5X6/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6/action/timestamp_anchor","attest_storage":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6/action/storage_attestation","attest_author":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6/action/author_attestation","sign_citation":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6/action/citation_signature","submit_replication":"https://pith.science/pith/5KD5VPYBGQNJ5FXTZMJ7TER5X6/action/replication_record"}},"created_at":"2026-07-05T12:00:12.674831+00:00","updated_at":"2026-07-05T12:00:12.674831+00:00"}