{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QP5XOMEBXT326KIGA7B5H7KVC7","short_pith_number":"pith:QP5XOMEB","canonical_record":{"source":{"id":"2504.09841","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-14T03:22:04Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5cc80331bd6187fadb9fab30573b2b0f70c5a443917f13a35808b927e6cbaa95","abstract_canon_sha256":"ecaa0d5f20a05cfb618b10188247f221d94b4e3b3358d140789969a9f49acdb7"},"schema_version":"1.0"},"canonical_sha256":"83fb773081bcf7af290607c3d3fd5517e1cc77896435f7ca84cd55f21c797598","source":{"kind":"arxiv","id":"2504.09841","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.09841","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"arxiv_version","alias_value":"2504.09841v1","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.09841","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"pith_short_12","alias_value":"QP5XOMEBXT32","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"pith_short_16","alias_value":"QP5XOMEBXT326KIG","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"pith_short_8","alias_value":"QP5XOMEB","created_at":"2026-07-05T10:48:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QP5XOMEBXT326KIGA7B5H7KVC7","target":"record","payload":{"canonical_record":{"source":{"id":"2504.09841","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-14T03:22:04Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5cc80331bd6187fadb9fab30573b2b0f70c5a443917f13a35808b927e6cbaa95","abstract_canon_sha256":"ecaa0d5f20a05cfb618b10188247f221d94b4e3b3358d140789969a9f49acdb7"},"schema_version":"1.0"},"canonical_sha256":"83fb773081bcf7af290607c3d3fd5517e1cc77896435f7ca84cd55f21c797598","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:48:43.556807Z","signature_b64":"FktLRNZnu6G3GznlKXEykuVccRL2NvHnCdqT+4XyWj5Z8Ean024ZyTZnZTnn3IQ5256p5Qv0GDePJlggPc42Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"83fb773081bcf7af290607c3d3fd5517e1cc77896435f7ca84cd55f21c797598","last_reissued_at":"2026-07-05T10:48:43.556364Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:48:43.556364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.09841","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:48:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e/qWAt3auxJiw0/MBtnX3syuvUuNp72vXzsR4+/xiyyX2Z/+o1fdfB37sJM67a9tyVozBUdz/vw+87p3MLXHCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:47:26.959710Z"},"content_sha256":"2b9ba10ab8a8a2224567ebb1d2326d23c391c56a8790a514e9fb8bbdbb8c585d","schema_version":"1.0","event_id":"sha256:2b9ba10ab8a8a2224567ebb1d2326d23c391c56a8790a514e9fb8bbdbb8c585d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QP5XOMEBXT326KIGA7B5H7KVC7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"StruPhantom: Evolutionary Injection Attacks on Black-Box Tabular Agents Powered by Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Xudong Pan, Yang Feng","submitted_at":"2025-04-14T03:22:04Z","abstract_excerpt":"The proliferation of autonomous agents powered by large language models (LLMs) has revolutionized popular business applications dealing with tabular data, i.e., tabular agents. Although LLMs are observed to be vulnerable against prompt injection attacks from external data sources, tabular agents impose strict data formats and predefined rules on the attacker's payload, which are ineffective unless the agent navigates multiple layers of structural data to incorporate the payload. To address the challenge, we present a novel attack termed StruPhantom which specifically targets black-box LLM-powe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.09841","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.09841/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:48:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q/Pl4zYvig6SezW513wkj9zG9TMd5AqzcqyZRYDkhr6C6aUvfnw6nt85DAU7QFI9PBDU5b8tRin8Lf93ICtTAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:47:26.960190Z"},"content_sha256":"6a2cdb327638bc3f7a27a111ffac3711642b9d5383a0dd3283755f4c2b676696","schema_version":"1.0","event_id":"sha256:6a2cdb327638bc3f7a27a111ffac3711642b9d5383a0dd3283755f4c2b676696"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QP5XOMEBXT326KIGA7B5H7KVC7/bundle.json","state_url":"https://pith.science/pith/QP5XOMEBXT326KIGA7B5H7KVC7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QP5XOMEBXT326KIGA7B5H7KVC7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:47:26Z","links":{"resolver":"https://pith.science/pith/QP5XOMEBXT326KIGA7B5H7KVC7","bundle":"https://pith.science/pith/QP5XOMEBXT326KIGA7B5H7KVC7/bundle.json","state":"https://pith.science/pith/QP5XOMEBXT326KIGA7B5H7KVC7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QP5XOMEBXT326KIGA7B5H7KVC7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QP5XOMEBXT326KIGA7B5H7KVC7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ecaa0d5f20a05cfb618b10188247f221d94b4e3b3358d140789969a9f49acdb7","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-14T03:22:04Z","title_canon_sha256":"5cc80331bd6187fadb9fab30573b2b0f70c5a443917f13a35808b927e6cbaa95"},"schema_version":"1.0","source":{"id":"2504.09841","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.09841","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"arxiv_version","alias_value":"2504.09841v1","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.09841","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"pith_short_12","alias_value":"QP5XOMEBXT32","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"pith_short_16","alias_value":"QP5XOMEBXT326KIG","created_at":"2026-07-05T10:48:43Z"},{"alias_kind":"pith_short_8","alias_value":"QP5XOMEB","created_at":"2026-07-05T10:48:43Z"}],"graph_snapshots":[{"event_id":"sha256:6a2cdb327638bc3f7a27a111ffac3711642b9d5383a0dd3283755f4c2b676696","target":"graph","created_at":"2026-07-05T10:48:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.09841/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The proliferation of autonomous agents powered by large language models (LLMs) has revolutionized popular business applications dealing with tabular data, i.e., tabular agents. Although LLMs are observed to be vulnerable against prompt injection attacks from external data sources, tabular agents impose strict data formats and predefined rules on the attacker's payload, which are ineffective unless the agent navigates multiple layers of structural data to incorporate the payload. To address the challenge, we present a novel attack termed StruPhantom which specifically targets black-box LLM-powe","authors_text":"Xudong Pan, Yang Feng","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-14T03:22:04Z","title":"StruPhantom: Evolutionary Injection Attacks on Black-Box Tabular Agents Powered by Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.09841","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2b9ba10ab8a8a2224567ebb1d2326d23c391c56a8790a514e9fb8bbdbb8c585d","target":"record","created_at":"2026-07-05T10:48:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ecaa0d5f20a05cfb618b10188247f221d94b4e3b3358d140789969a9f49acdb7","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-14T03:22:04Z","title_canon_sha256":"5cc80331bd6187fadb9fab30573b2b0f70c5a443917f13a35808b927e6cbaa95"},"schema_version":"1.0","source":{"id":"2504.09841","kind":"arxiv","version":1}},"canonical_sha256":"83fb773081bcf7af290607c3d3fd5517e1cc77896435f7ca84cd55f21c797598","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"83fb773081bcf7af290607c3d3fd5517e1cc77896435f7ca84cd55f21c797598","first_computed_at":"2026-07-05T10:48:43.556364Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:48:43.556364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FktLRNZnu6G3GznlKXEykuVccRL2NvHnCdqT+4XyWj5Z8Ean024ZyTZnZTnn3IQ5256p5Qv0GDePJlggPc42Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:48:43.556807Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.09841","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2b9ba10ab8a8a2224567ebb1d2326d23c391c56a8790a514e9fb8bbdbb8c585d","sha256:6a2cdb327638bc3f7a27a111ffac3711642b9d5383a0dd3283755f4c2b676696"],"state_sha256":"a92b25f0e783cfdea678992638dc6d5fc6054199d94ca1450bc8892b56927209"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BKtXjgmSX/PNDL/WflBUMe2dfb5GZ1J+1e32r++EgKqPjvMiWDqqeQTalEy/hq6475aVSy7B9hYA9CdfcIeFCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:47:26.964912Z","bundle_sha256":"07a9a115ac40f37519f45d08b2a2bacf688d43a7d22571ac14c0440746d81ec5"}}