{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HRWHNG2AICUMABVR6NENUL4WJG","short_pith_number":"pith:HRWHNG2A","canonical_record":{"source":{"id":"2505.08148","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-13T00:51:07Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"8bf0af731add7044d6295cd2edc290267a8812f6aa52fb001d11636d22510fee","abstract_canon_sha256":"ad4f630ebb5a01c331538d62be06dd754441861c087fa4c554448078233c1bee"},"schema_version":"1.0"},"canonical_sha256":"3c6c769b4040a8c006b1f348da2f96498beea626d418c0afa2e10df1ac8cdb2d","source":{"kind":"arxiv","id":"2505.08148","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.08148","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"arxiv_version","alias_value":"2505.08148v1","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.08148","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"pith_short_12","alias_value":"HRWHNG2AICUM","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"pith_short_16","alias_value":"HRWHNG2AICUMABVR","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"pith_short_8","alias_value":"HRWHNG2A","created_at":"2026-07-05T11:02:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HRWHNG2AICUMABVR6NENUL4WJG","target":"record","payload":{"canonical_record":{"source":{"id":"2505.08148","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-13T00:51:07Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"8bf0af731add7044d6295cd2edc290267a8812f6aa52fb001d11636d22510fee","abstract_canon_sha256":"ad4f630ebb5a01c331538d62be06dd754441861c087fa4c554448078233c1bee"},"schema_version":"1.0"},"canonical_sha256":"3c6c769b4040a8c006b1f348da2f96498beea626d418c0afa2e10df1ac8cdb2d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:02:25.529027Z","signature_b64":"UvES6J28yFwcAgkyTpxBCpjUWcEPtnLPJ3vcpMZ9B89NfbSx8Y0My+iSgjsYIp1iCkE+Kp+A99TgdAo38NTCCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c6c769b4040a8c006b1f348da2f96498beea626d418c0afa2e10df1ac8cdb2d","last_reissued_at":"2026-07-05T11:02:25.528554Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:02:25.528554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.08148","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RDHrzryDCfN6OdhtLWNcwiCaQ/kVHOaMjb8tY+hFFt9iK6wetD9/DMTh4z1c9NO9zYeelNXwb8aAOW9+k5iFBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:18:53.066791Z"},"content_sha256":"623faabc957c28388e7eeadcbc6852a653e864d3911d4f97da7727e0d283a061","schema_version":"1.0","event_id":"sha256:623faabc957c28388e7eeadcbc6852a653e864d3911d4f97da7727e0d283a061"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HRWHNG2AICUMABVR6NENUL4WJG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Large-Scale Empirical Analysis of Custom GPTs' Vulnerabilities in the OpenAI Ecosystem","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Benjamin Zi Hao Zhao, Dali Kaafar, Hassan Jameel Asghar, Muhammad Ikram, Sunday Oyinlola Ogundoyin","submitted_at":"2025-05-13T00:51:07Z","abstract_excerpt":"Millions of users leverage generative pretrained transformer (GPT)-based language models developed by leading model providers for a wide range of tasks. To support enhanced user interaction and customization, many platforms-such as OpenAI-now enable developers to create and publish tailored model instances, known as custom GPTs, via dedicated repositories or application stores. These custom GPTs empower users to browse and interact with specialized applications designed to meet specific needs. However, as custom GPTs see growing adoption, concerns regarding their security vulnerabilities have "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.08148","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.08148/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"G9hxGoPrnE58v7Tz56qPN8T3XZkerHdZc5mdQYHIvZj1dtCqVJb00Z6Iyw1SkCJgJEwcNQy54FXNUL9BqH4IAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:18:53.067377Z"},"content_sha256":"38385a1a5ee2dc95d865c3b278e5744c1df1326009c2713a02e60cc778717c21","schema_version":"1.0","event_id":"sha256:38385a1a5ee2dc95d865c3b278e5744c1df1326009c2713a02e60cc778717c21"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HRWHNG2AICUMABVR6NENUL4WJG/bundle.json","state_url":"https://pith.science/pith/HRWHNG2AICUMABVR6NENUL4WJG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HRWHNG2AICUMABVR6NENUL4WJG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T19:18:53Z","links":{"resolver":"https://pith.science/pith/HRWHNG2AICUMABVR6NENUL4WJG","bundle":"https://pith.science/pith/HRWHNG2AICUMABVR6NENUL4WJG/bundle.json","state":"https://pith.science/pith/HRWHNG2AICUMABVR6NENUL4WJG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HRWHNG2AICUMABVR6NENUL4WJG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HRWHNG2AICUMABVR6NENUL4WJG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad4f630ebb5a01c331538d62be06dd754441861c087fa4c554448078233c1bee","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-13T00:51:07Z","title_canon_sha256":"8bf0af731add7044d6295cd2edc290267a8812f6aa52fb001d11636d22510fee"},"schema_version":"1.0","source":{"id":"2505.08148","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.08148","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"arxiv_version","alias_value":"2505.08148v1","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.08148","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"pith_short_12","alias_value":"HRWHNG2AICUM","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"pith_short_16","alias_value":"HRWHNG2AICUMABVR","created_at":"2026-07-05T11:02:25Z"},{"alias_kind":"pith_short_8","alias_value":"HRWHNG2A","created_at":"2026-07-05T11:02:25Z"}],"graph_snapshots":[{"event_id":"sha256:38385a1a5ee2dc95d865c3b278e5744c1df1326009c2713a02e60cc778717c21","target":"graph","created_at":"2026-07-05T11:02:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.08148/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Millions of users leverage generative pretrained transformer (GPT)-based language models developed by leading model providers for a wide range of tasks. To support enhanced user interaction and customization, many platforms-such as OpenAI-now enable developers to create and publish tailored model instances, known as custom GPTs, via dedicated repositories or application stores. These custom GPTs empower users to browse and interact with specialized applications designed to meet specific needs. However, as custom GPTs see growing adoption, concerns regarding their security vulnerabilities have ","authors_text":"Benjamin Zi Hao Zhao, Dali Kaafar, Hassan Jameel Asghar, Muhammad Ikram, Sunday Oyinlola Ogundoyin","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-13T00:51:07Z","title":"A Large-Scale Empirical Analysis of Custom GPTs' Vulnerabilities in the OpenAI Ecosystem"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.08148","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:623faabc957c28388e7eeadcbc6852a653e864d3911d4f97da7727e0d283a061","target":"record","created_at":"2026-07-05T11:02:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad4f630ebb5a01c331538d62be06dd754441861c087fa4c554448078233c1bee","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-13T00:51:07Z","title_canon_sha256":"8bf0af731add7044d6295cd2edc290267a8812f6aa52fb001d11636d22510fee"},"schema_version":"1.0","source":{"id":"2505.08148","kind":"arxiv","version":1}},"canonical_sha256":"3c6c769b4040a8c006b1f348da2f96498beea626d418c0afa2e10df1ac8cdb2d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c6c769b4040a8c006b1f348da2f96498beea626d418c0afa2e10df1ac8cdb2d","first_computed_at":"2026-07-05T11:02:25.528554Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:02:25.528554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UvES6J28yFwcAgkyTpxBCpjUWcEPtnLPJ3vcpMZ9B89NfbSx8Y0My+iSgjsYIp1iCkE+Kp+A99TgdAo38NTCCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:02:25.529027Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.08148","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:623faabc957c28388e7eeadcbc6852a653e864d3911d4f97da7727e0d283a061","sha256:38385a1a5ee2dc95d865c3b278e5744c1df1326009c2713a02e60cc778717c21"],"state_sha256":"48c3deb09e9b5c7e568de41cade209c3bf13461c542146fb2551c4d66a2bcc2c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yB/Qp2j2OMUEt0IOYdLHWjHv+66rQhlioZ+h1M6SPdrxG8eEM7xvrYYLtg8ELc/g8OC6PROTfbFNKkP9zRodBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T19:18:53.072236Z","bundle_sha256":"57a42c5244a5edf92a653f4ba3cd63cee4d9fd443314ed17abe99b8e5a52f9bd"}}