{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SOKPKVDNVCG5AMUWWZDLSCU3DO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"57224d3f5c00c82a254127784520a63d471f91f0955cf13c0d0ee21c8672d7e5","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-26T19:01:54Z","title_canon_sha256":"ee15df50106b0e0b6d8eae7bc376388b208826fce6f6b8a83f6bd0778926ae3a"},"schema_version":"1.0","source":{"id":"2402.16965","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16965","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16965v1","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16965","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_12","alias_value":"SOKPKVDNVCG5","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_16","alias_value":"SOKPKVDNVCG5AMUW","created_at":"2026-07-05T07:49:39Z"},{"alias_kind":"pith_short_8","alias_value":"SOKPKVDN","created_at":"2026-07-05T07:49:39Z"}],"graph_snapshots":[{"event_id":"sha256:d8b358f6d2092ad30045d550f43629591d4fc54449cb094ec366bb367bb3f12b","target":"graph","created_at":"2026-07-05T07:49:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.16965/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the fast development of large language models (LLMs), LLM-driven Web Agents (Web Agents for short) have obtained tons of attention due to their superior capability where LLMs serve as the core part of making decisions like the human brain equipped with multiple web tools to actively interact with external deployed websites. As uncountable Web Agents have been released and such LLM systems are experiencing rapid development and drawing closer to widespread deployment in our daily lives, an essential and pressing question arises: \"Are these Web Agents secure?\". In this paper, we introduce a","authors_text":"Chaowei Xiao, Fangzhou Wu, Shutong Wu, Yulong Cao","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16965","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f7c6cef4e9fd35e18601656f1c18d03d1a011f7f5cb4bd85ae2907c8cac8f9cf","target":"record","created_at":"2026-07-05T07:49:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"57224d3f5c00c82a254127784520a63d471f91f0955cf13c0d0ee21c8672d7e5","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-26T19:01:54Z","title_canon_sha256":"ee15df50106b0e0b6d8eae7bc376388b208826fce6f6b8a83f6bd0778926ae3a"},"schema_version":"1.0","source":{"id":"2402.16965","kind":"arxiv","version":1}},"canonical_sha256":"9394f5546da88dd03296b646b90a9b1b99ac1eebfad8d3155d30e09ddb367381","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9394f5546da88dd03296b646b90a9b1b99ac1eebfad8d3155d30e09ddb367381","first_computed_at":"2026-07-05T07:49:39.573552Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:49:39.573552Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8qRcZ2pjOd33ZvQ3yCbs6dWtek4wUzNLx/vzibuVvnOqNBOSjJNDO+H0s+pRdIsG11TeleT5a1z/Z3ZTx3H6Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:49:39.573978Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.16965","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f7c6cef4e9fd35e18601656f1c18d03d1a011f7f5cb4bd85ae2907c8cac8f9cf","sha256:d8b358f6d2092ad30045d550f43629591d4fc54449cb094ec366bb367bb3f12b"],"state_sha256":"f2950d05da42cd1a43994c248238a3b474d9063a71b9640ea7e8838862da194f"}