{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:JUELQOO5KOSLOWGROK3OOEEUDT","short_pith_number":"pith:JUELQOO5","canonical_record":{"source":{"id":"2608.03485","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T11:22:22Z","cross_cats_sorted":[],"title_canon_sha256":"cd88e102ff07bbf45fdad7f66be89b078e3b042f6ca66ecc9a52ad969e294736","abstract_canon_sha256":"d4d805e6266afcf68bfa05596d385de81014bc9e6cac78cd0a39405604cad6de"},"schema_version":"1.0"},"canonical_sha256":"4d08b839dd53a4b758d172b6e710941cd01fb88e55c3e475b975b5dca56b1198","source":{"kind":"arxiv","id":"2608.03485","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03485","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03485v1","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03485","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"pith_short_12","alias_value":"JUELQOO5KOSL","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"pith_short_16","alias_value":"JUELQOO5KOSLOWGR","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"pith_short_8","alias_value":"JUELQOO5","created_at":"2026-08-05T01:35:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:JUELQOO5KOSLOWGROK3OOEEUDT","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03485","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T11:22:22Z","cross_cats_sorted":[],"title_canon_sha256":"cd88e102ff07bbf45fdad7f66be89b078e3b042f6ca66ecc9a52ad969e294736","abstract_canon_sha256":"d4d805e6266afcf68bfa05596d385de81014bc9e6cac78cd0a39405604cad6de"},"schema_version":"1.0"},"canonical_sha256":"4d08b839dd53a4b758d172b6e710941cd01fb88e55c3e475b975b5dca56b1198","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T01:35:57.029857Z","signature_b64":"7vbKR7NxrqV/QVDUwcOF1EnyO7QSdJtavCsFlS1VYhGPytS4ul+76iETnBe8ECzTewYPxWZw03R7K9f7gJrjBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4d08b839dd53a4b758d172b6e710941cd01fb88e55c3e475b975b5dca56b1198","last_reissued_at":"2026-08-05T01:35:57.027085Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T01:35:57.027085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03485","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:35:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GWdEA2lzqqhtp7yxgn2h67DPVS5HrQWuHgVRLU0YYN+8ocDhXk9Ctt8QuebQurPvPuIpaobaOUnMCvzS92EaBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:26:49.603635Z"},"content_sha256":"7ef86d3739bae99ff6d2b41d6c811dfde47949e432e0a2144b20cf60e2a0e9d1","schema_version":"1.0","event_id":"sha256:7ef86d3739bae99ff6d2b41d6c811dfde47949e432e0a2144b20cf60e2a0e9d1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:JUELQOO5KOSLOWGROK3OOEEUDT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SkillSentry: Adaptive Honey Worlds for Dynamic Safety Testing of Agent Skills","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hao Zhang, Jiaye Lin, Nizhang Li, Quanchen Zou, Wenxin Zhang, Xiangfan Wu, Xiangzheng Zhang, Xixun Lin, Zonghao Ying, Zonglei Jing","submitted_at":"2026-08-04T11:22:22Z","abstract_excerpt":"External skills extend the capabilities of large language model agents, but also introduce an execution-time attack surface: a skill that appears benign under inspection may reveal harmful behavior only after particular environmental states, resources, or interaction histories are encountered. Existing scanners primarily rely on static analysis, predefined rules, or one-shot semantic judgments, making such conditional behavior difficult to elicit and attribute. We present SkillSentry, a dynamic safety-testing framework based on adaptive honey worlds. SkillSentry infers the intended capability "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03485","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03485/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:35:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b5J+AJKleiIqKVTzsSfq9Nd7d/qcjPD0CnLgVkqfpziKBL0NnI39hrkIgHoDEm7tb4Ovv91so1kY69dtscjjAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:26:49.604036Z"},"content_sha256":"2ca227bd85a020df3a2090214a1481750d27ebb9672bce8034bf8555da7e87d4","schema_version":"1.0","event_id":"sha256:2ca227bd85a020df3a2090214a1481750d27ebb9672bce8034bf8555da7e87d4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JUELQOO5KOSLOWGROK3OOEEUDT/bundle.json","state_url":"https://pith.science/pith/JUELQOO5KOSLOWGROK3OOEEUDT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JUELQOO5KOSLOWGROK3OOEEUDT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T20:26:49Z","links":{"resolver":"https://pith.science/pith/JUELQOO5KOSLOWGROK3OOEEUDT","bundle":"https://pith.science/pith/JUELQOO5KOSLOWGROK3OOEEUDT/bundle.json","state":"https://pith.science/pith/JUELQOO5KOSLOWGROK3OOEEUDT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JUELQOO5KOSLOWGROK3OOEEUDT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:JUELQOO5KOSLOWGROK3OOEEUDT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d4d805e6266afcf68bfa05596d385de81014bc9e6cac78cd0a39405604cad6de","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T11:22:22Z","title_canon_sha256":"cd88e102ff07bbf45fdad7f66be89b078e3b042f6ca66ecc9a52ad969e294736"},"schema_version":"1.0","source":{"id":"2608.03485","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03485","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03485v1","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03485","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"pith_short_12","alias_value":"JUELQOO5KOSL","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"pith_short_16","alias_value":"JUELQOO5KOSLOWGR","created_at":"2026-08-05T01:35:57Z"},{"alias_kind":"pith_short_8","alias_value":"JUELQOO5","created_at":"2026-08-05T01:35:57Z"}],"graph_snapshots":[{"event_id":"sha256:2ca227bd85a020df3a2090214a1481750d27ebb9672bce8034bf8555da7e87d4","target":"graph","created_at":"2026-08-05T01:35:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03485/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"External skills extend the capabilities of large language model agents, but also introduce an execution-time attack surface: a skill that appears benign under inspection may reveal harmful behavior only after particular environmental states, resources, or interaction histories are encountered. Existing scanners primarily rely on static analysis, predefined rules, or one-shot semantic judgments, making such conditional behavior difficult to elicit and attribute. We present SkillSentry, a dynamic safety-testing framework based on adaptive honey worlds. SkillSentry infers the intended capability ","authors_text":"Hao Zhang, Jiaye Lin, Nizhang Li, Quanchen Zou, Wenxin Zhang, Xiangfan Wu, Xiangzheng Zhang, Xixun Lin, Zonghao Ying, Zonglei Jing","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T11:22:22Z","title":"SkillSentry: Adaptive Honey Worlds for Dynamic Safety Testing of Agent Skills"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03485","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7ef86d3739bae99ff6d2b41d6c811dfde47949e432e0a2144b20cf60e2a0e9d1","target":"record","created_at":"2026-08-05T01:35:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d4d805e6266afcf68bfa05596d385de81014bc9e6cac78cd0a39405604cad6de","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T11:22:22Z","title_canon_sha256":"cd88e102ff07bbf45fdad7f66be89b078e3b042f6ca66ecc9a52ad969e294736"},"schema_version":"1.0","source":{"id":"2608.03485","kind":"arxiv","version":1}},"canonical_sha256":"4d08b839dd53a4b758d172b6e710941cd01fb88e55c3e475b975b5dca56b1198","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4d08b839dd53a4b758d172b6e710941cd01fb88e55c3e475b975b5dca56b1198","first_computed_at":"2026-08-05T01:35:57.027085Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T01:35:57.027085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7vbKR7NxrqV/QVDUwcOF1EnyO7QSdJtavCsFlS1VYhGPytS4ul+76iETnBe8ECzTewYPxWZw03R7K9f7gJrjBw==","signature_status":"signed_v1","signed_at":"2026-08-05T01:35:57.029857Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03485","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7ef86d3739bae99ff6d2b41d6c811dfde47949e432e0a2144b20cf60e2a0e9d1","sha256:2ca227bd85a020df3a2090214a1481750d27ebb9672bce8034bf8555da7e87d4"],"state_sha256":"99e3236989388e652bc1e05062da5741fad32041507ff0ed763325534f2df18a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3htvF5gzvyyuMcaoKF2I3vMohU/7FlxoJUQrfTQRXx7dKE/tWXcoT5w2PbzuXoUMRszxPfpwu2S0Yo+zIDDvAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T20:26:49.606546Z","bundle_sha256":"11d8a51eda881eaebfdbb96e5e2bdf37d29f6b7e1dcef901ef41a6d38d37dc55"}}