{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AKZ4YIQMEMQOM235I4TLV5WCGG","short_pith_number":"pith:AKZ4YIQM","canonical_record":{"source":{"id":"2505.12981","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-19T11:17:46Z","cross_cats_sorted":["cs.AI","cs.HC"],"title_canon_sha256":"0f459e5b5ae467fc1c5b292ea8a44bc44c95c6a76a6defd8f9e8786f98aa2065","abstract_canon_sha256":"19d03e3d9cee6d6d4ce81ae79d6ed5d4ba913ee805c0489b4c83ff54aed04cea"},"schema_version":"1.0"},"canonical_sha256":"02b3cc220c2320e66b7d4726baf6c2319e151ce1e850b3acd15a821af91e4fa4","source":{"kind":"arxiv","id":"2505.12981","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12981","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12981v2","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12981","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"pith_short_12","alias_value":"AKZ4YIQMEMQO","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"pith_short_16","alias_value":"AKZ4YIQMEMQOM235","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"pith_short_8","alias_value":"AKZ4YIQM","created_at":"2026-07-05T11:05:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AKZ4YIQMEMQOM235I4TLV5WCGG","target":"record","payload":{"canonical_record":{"source":{"id":"2505.12981","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-19T11:17:46Z","cross_cats_sorted":["cs.AI","cs.HC"],"title_canon_sha256":"0f459e5b5ae467fc1c5b292ea8a44bc44c95c6a76a6defd8f9e8786f98aa2065","abstract_canon_sha256":"19d03e3d9cee6d6d4ce81ae79d6ed5d4ba913ee805c0489b4c83ff54aed04cea"},"schema_version":"1.0"},"canonical_sha256":"02b3cc220c2320e66b7d4726baf6c2319e151ce1e850b3acd15a821af91e4fa4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:05:45.735135Z","signature_b64":"Me2gCugJC3PMC5UP9KSXNvCMFtwQ1ZG4MhqAKf028twyiMfT9jMPGn3zITcfBdsi3FmxOyaPYgjz8NAbfNAyAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"02b3cc220c2320e66b7d4726baf6c2319e151ce1e850b3acd15a821af91e4fa4","last_reissued_at":"2026-07-05T11:05:45.734727Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:05:45.734727Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.12981","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:05:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JJ7PinqE6ojyQWl1JpYWNwHcGSEVlu9BYbHD0tEkIOCBhNGdXR6ahuA6czcPUeGz9U1jrU688HERBUyiSJT0Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:54:29.691706Z"},"content_sha256":"325b506284680be597cba9beecbfd26b148ce32e00247acfa7796236db25136e","schema_version":"1.0","event_id":"sha256:325b506284680be597cba9beecbfd26b148ce32e00247acfa7796236db25136e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AKZ4YIQMEMQOM235I4TLV5WCGG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.HC"],"primary_cat":"cs.CR","authors_text":"Chao Wang, Haoyu Wang, Liangxuan Wu, Tianming Liu, Yanjie Zhao","submitted_at":"2025-05-19T11:17:46Z","abstract_excerpt":"The growing adoption of large language models (LLMs) has led to a new paradigm in mobile computing--LLM-powered mobile AI agents--capable of decomposing and automating complex tasks directly on smartphones. However, the security implications of these agents remain largely unexplored. In this paper, we present the first comprehensive security analysis of mobile LLM agents, encompassing three representative categories: System-level AI Agents developed by original equipment manufacturers (e.g., YOYO Assistant), Third-party Universal Agents (e.g., Zhipu AI AutoGLM), and Emerging Agent Frameworks ("},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12981","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.12981/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:05:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PkiiYTgdJjiJOBpKeR/FxTlp54OUwOgSX5rvHelXrLRF9cJNTfPHn2TRXGTa8xmVA85Kp+tZZ/zbFW5T/OxrDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:54:29.692598Z"},"content_sha256":"0626479ac3ebcf20a0e29b3755516640fcb0b7a55c8d0f49067946fbf30bd90e","schema_version":"1.0","event_id":"sha256:0626479ac3ebcf20a0e29b3755516640fcb0b7a55c8d0f49067946fbf30bd90e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AKZ4YIQMEMQOM235I4TLV5WCGG/bundle.json","state_url":"https://pith.science/pith/AKZ4YIQMEMQOM235I4TLV5WCGG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AKZ4YIQMEMQOM235I4TLV5WCGG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T04:54:29Z","links":{"resolver":"https://pith.science/pith/AKZ4YIQMEMQOM235I4TLV5WCGG","bundle":"https://pith.science/pith/AKZ4YIQMEMQOM235I4TLV5WCGG/bundle.json","state":"https://pith.science/pith/AKZ4YIQMEMQOM235I4TLV5WCGG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AKZ4YIQMEMQOM235I4TLV5WCGG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AKZ4YIQMEMQOM235I4TLV5WCGG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"19d03e3d9cee6d6d4ce81ae79d6ed5d4ba913ee805c0489b4c83ff54aed04cea","cross_cats_sorted":["cs.AI","cs.HC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-19T11:17:46Z","title_canon_sha256":"0f459e5b5ae467fc1c5b292ea8a44bc44c95c6a76a6defd8f9e8786f98aa2065"},"schema_version":"1.0","source":{"id":"2505.12981","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12981","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12981v2","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12981","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"pith_short_12","alias_value":"AKZ4YIQMEMQO","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"pith_short_16","alias_value":"AKZ4YIQMEMQOM235","created_at":"2026-07-05T11:05:45Z"},{"alias_kind":"pith_short_8","alias_value":"AKZ4YIQM","created_at":"2026-07-05T11:05:45Z"}],"graph_snapshots":[{"event_id":"sha256:0626479ac3ebcf20a0e29b3755516640fcb0b7a55c8d0f49067946fbf30bd90e","target":"graph","created_at":"2026-07-05T11:05:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.12981/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The growing adoption of large language models (LLMs) has led to a new paradigm in mobile computing--LLM-powered mobile AI agents--capable of decomposing and automating complex tasks directly on smartphones. However, the security implications of these agents remain largely unexplored. In this paper, we present the first comprehensive security analysis of mobile LLM agents, encompassing three representative categories: System-level AI Agents developed by original equipment manufacturers (e.g., YOYO Assistant), Third-party Universal Agents (e.g., Zhipu AI AutoGLM), and Emerging Agent Frameworks (","authors_text":"Chao Wang, Haoyu Wang, Liangxuan Wu, Tianming Liu, Yanjie Zhao","cross_cats":["cs.AI","cs.HC"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12981","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:325b506284680be597cba9beecbfd26b148ce32e00247acfa7796236db25136e","target":"record","created_at":"2026-07-05T11:05:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"19d03e3d9cee6d6d4ce81ae79d6ed5d4ba913ee805c0489b4c83ff54aed04cea","cross_cats_sorted":["cs.AI","cs.HC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-19T11:17:46Z","title_canon_sha256":"0f459e5b5ae467fc1c5b292ea8a44bc44c95c6a76a6defd8f9e8786f98aa2065"},"schema_version":"1.0","source":{"id":"2505.12981","kind":"arxiv","version":2}},"canonical_sha256":"02b3cc220c2320e66b7d4726baf6c2319e151ce1e850b3acd15a821af91e4fa4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"02b3cc220c2320e66b7d4726baf6c2319e151ce1e850b3acd15a821af91e4fa4","first_computed_at":"2026-07-05T11:05:45.734727Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:05:45.734727Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Me2gCugJC3PMC5UP9KSXNvCMFtwQ1ZG4MhqAKf028twyiMfT9jMPGn3zITcfBdsi3FmxOyaPYgjz8NAbfNAyAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:05:45.735135Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.12981","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:325b506284680be597cba9beecbfd26b148ce32e00247acfa7796236db25136e","sha256:0626479ac3ebcf20a0e29b3755516640fcb0b7a55c8d0f49067946fbf30bd90e"],"state_sha256":"05f9b1814afcf0d2133b3fe48534b72ee66209fe36c352d7b610b3cc9dc9c443"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6joxDZA4cpZhERu1xsoMjejrWMj4TgU0aIiHL6HU/1BUNIOsN1mGgo04ebQRXWFEacuYN01XlW741fg6+BbFDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T04:54:29.698543Z","bundle_sha256":"edad51dab271f409ad5e0e6302aa512fcd8a904dcdecccb055334723d0451042"}}