Pith Number

pith:GFSTCVOA

pith:2025:GFSTCVOALHBEHC2YXIUDHGJDQO

not attested not anchored not stored refs pending

Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution

Daria Stetsenko, Fabrizio Gilardi, Meysam Alizadeh, Zeynab Samei

arxiv:2506.01055 v1 · 2025-06-01 · cs.CR · cs.CL

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{GFSTCVOALHBEHC2YXIUDHGJDQO}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

13 papers in Pith

Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents

GIF: Locally Sound Geometric Information Flow Control for LLMs

TRAP: Benchmark for Task-completion and Resistance to Active Privacy-extraction

Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents

CAPED: Context-Aware Privacy Exposure Defense for Mobile GUI Agents

Receipt and verification

First computed	2026-07-05T11:13:45.220366Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

31653155c059c2438b58ba28339923838684cbec207badbfd392b3fd403275eb

Aliases

arxiv: 2506.01055 · arxiv_version: 2506.01055v1 · doi: 10.48550/arxiv.2506.01055 · pith_short_12: GFSTCVOALHBE · pith_short_16: GFSTCVOALHBEHC2Y · pith_short_8: GFSTCVOA

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/GFSTCVOALHBEHC2YXIUDHGJDQO \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 31653155c059c2438b58ba28339923838684cbec207badbfd392b3fd403275eb

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "bf3549d23a45af39999f7583e1649286995ccf7f0b9b99db5c4a00359598232d",
    "cross_cats_sorted": [
      "cs.CL"
    ],
    "license": "http://creativecommons.org/licenses/by/4.0/",
    "primary_cat": "cs.CR",
    "submitted_at": "2025-06-01T15:48:06Z",
    "title_canon_sha256": "f336d0bc202212495c9c365a05f352e690ec281f264138fd61fc274101642763"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2506.01055",
    "kind": "arxiv",
    "version": 1
  }
}