{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:T3GKG2GLKDA2VTIXKRAVQNK3DI","short_pith_number":"pith:T3GKG2GL","canonical_record":{"source":{"id":"2406.08689","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-12T23:16:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dc29a237b475836a0db90b961aa7b05c660f104d2b8fcfc382f94c2977849853","abstract_canon_sha256":"00f8b28fbef47d3f2fab7e5fe68a826f975a810218be4f86c3413267ec3429c2"},"schema_version":"1.0"},"canonical_sha256":"9ecca368cb50c1aacd17544158355b1a0ce79b48f159b55989f2967806a17570","source":{"kind":"arxiv","id":"2406.08689","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.08689","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"arxiv_version","alias_value":"2406.08689v3","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.08689","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"pith_short_12","alias_value":"T3GKG2GLKDA2","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"pith_short_16","alias_value":"T3GKG2GLKDA2VTIX","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"pith_short_8","alias_value":"T3GKG2GL","created_at":"2026-07-05T09:50:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:T3GKG2GLKDA2VTIXKRAVQNK3DI","target":"record","payload":{"canonical_record":{"source":{"id":"2406.08689","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-12T23:16:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dc29a237b475836a0db90b961aa7b05c660f104d2b8fcfc382f94c2977849853","abstract_canon_sha256":"00f8b28fbef47d3f2fab7e5fe68a826f975a810218be4f86c3413267ec3429c2"},"schema_version":"1.0"},"canonical_sha256":"9ecca368cb50c1aacd17544158355b1a0ce79b48f159b55989f2967806a17570","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:50:48.450972Z","signature_b64":"UaKYEG5Mvva7hdQY+AlL7qLiWT8TjfUM6dY5lTYf3VQ3Yzd2GHykYLdMea1VoAF2ADHgNr+5VnKQcPz0Oa0XAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9ecca368cb50c1aacd17544158355b1a0ce79b48f159b55989f2967806a17570","last_reissued_at":"2026-07-05T09:50:48.450463Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:50:48.450463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.08689","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZqcNDFTLR3g1xOrRMjT7ckxHIM4d0X4XH0DeqPmePXSujFDigMqqWh+/1UEZ5qCQQDMWileafLtVTmTXTrnODA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:52:00.301580Z"},"content_sha256":"8b5c48f3176ed15b6ea9958962aaeaa9aa08c96ffab2f9974cfbfb513d9cd61d","schema_version":"1.0","event_id":"sha256:8b5c48f3176ed15b6ea9958962aaeaa9aa08c96ffab2f9974cfbfb513d9cd61d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:T3GKG2GLKDA2VTIXKRAVQNK3DI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Security of AI Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Ethan Wang, Hao Chen, Yifeng He, Yuyang Rong, Zifei Cheng","submitted_at":"2024-06-12T23:16:45Z","abstract_excerpt":"AI agents have been boosted by large language models. AI agents can function as intelligent assistants and complete tasks on behalf of their users with access to tools and the ability to execute commands in their environments. Through studying and experiencing the workflow of typical AI agents, we have raised several concerns regarding their security. These potential vulnerabilities are not addressed by the frameworks used to build the agents, nor by research aimed at improving the agents. In this paper, we identify and describe these vulnerabilities in detail from a system security perspectiv"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.08689","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.08689/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"51uhYHBCJv08fvmGRF1EcHryyQH+iVp5U8dQQFbf0tKtAsl+t+N1G6ITtxXR40gOSEXnuEg8Uhq9RUJmgQFnDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:52:00.302225Z"},"content_sha256":"b082e6aee4319ee983abac546c7c6643e475c0fb0ab9532ac8b7d1b1abd122c9","schema_version":"1.0","event_id":"sha256:b082e6aee4319ee983abac546c7c6643e475c0fb0ab9532ac8b7d1b1abd122c9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/T3GKG2GLKDA2VTIXKRAVQNK3DI/bundle.json","state_url":"https://pith.science/pith/T3GKG2GLKDA2VTIXKRAVQNK3DI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/T3GKG2GLKDA2VTIXKRAVQNK3DI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T13:52:00Z","links":{"resolver":"https://pith.science/pith/T3GKG2GLKDA2VTIXKRAVQNK3DI","bundle":"https://pith.science/pith/T3GKG2GLKDA2VTIXKRAVQNK3DI/bundle.json","state":"https://pith.science/pith/T3GKG2GLKDA2VTIXKRAVQNK3DI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/T3GKG2GLKDA2VTIXKRAVQNK3DI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:T3GKG2GLKDA2VTIXKRAVQNK3DI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"00f8b28fbef47d3f2fab7e5fe68a826f975a810218be4f86c3413267ec3429c2","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-12T23:16:45Z","title_canon_sha256":"dc29a237b475836a0db90b961aa7b05c660f104d2b8fcfc382f94c2977849853"},"schema_version":"1.0","source":{"id":"2406.08689","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.08689","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"arxiv_version","alias_value":"2406.08689v3","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.08689","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"pith_short_12","alias_value":"T3GKG2GLKDA2","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"pith_short_16","alias_value":"T3GKG2GLKDA2VTIX","created_at":"2026-07-05T09:50:48Z"},{"alias_kind":"pith_short_8","alias_value":"T3GKG2GL","created_at":"2026-07-05T09:50:48Z"}],"graph_snapshots":[{"event_id":"sha256:b082e6aee4319ee983abac546c7c6643e475c0fb0ab9532ac8b7d1b1abd122c9","target":"graph","created_at":"2026-07-05T09:50:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.08689/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI agents have been boosted by large language models. AI agents can function as intelligent assistants and complete tasks on behalf of their users with access to tools and the ability to execute commands in their environments. Through studying and experiencing the workflow of typical AI agents, we have raised several concerns regarding their security. These potential vulnerabilities are not addressed by the frameworks used to build the agents, nor by research aimed at improving the agents. In this paper, we identify and describe these vulnerabilities in detail from a system security perspectiv","authors_text":"Ethan Wang, Hao Chen, Yifeng He, Yuyang Rong, Zifei Cheng","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-12T23:16:45Z","title":"Security of AI Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.08689","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8b5c48f3176ed15b6ea9958962aaeaa9aa08c96ffab2f9974cfbfb513d9cd61d","target":"record","created_at":"2026-07-05T09:50:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"00f8b28fbef47d3f2fab7e5fe68a826f975a810218be4f86c3413267ec3429c2","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-12T23:16:45Z","title_canon_sha256":"dc29a237b475836a0db90b961aa7b05c660f104d2b8fcfc382f94c2977849853"},"schema_version":"1.0","source":{"id":"2406.08689","kind":"arxiv","version":3}},"canonical_sha256":"9ecca368cb50c1aacd17544158355b1a0ce79b48f159b55989f2967806a17570","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9ecca368cb50c1aacd17544158355b1a0ce79b48f159b55989f2967806a17570","first_computed_at":"2026-07-05T09:50:48.450463Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:50:48.450463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UaKYEG5Mvva7hdQY+AlL7qLiWT8TjfUM6dY5lTYf3VQ3Yzd2GHykYLdMea1VoAF2ADHgNr+5VnKQcPz0Oa0XAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:50:48.450972Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.08689","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8b5c48f3176ed15b6ea9958962aaeaa9aa08c96ffab2f9974cfbfb513d9cd61d","sha256:b082e6aee4319ee983abac546c7c6643e475c0fb0ab9532ac8b7d1b1abd122c9"],"state_sha256":"9a753911fbb3cb56e23823aaf9be16755987acf32d7caa79b2a243b377fdf54d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f41lphSSCc+Ec9wWkmtXNqxVqqnnMDFgkpU+8S0SQDY9CYrelruajeyTXnWucHSZe+X0xACSx/3XZoYD2X6GAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T13:52:00.306675Z","bundle_sha256":"b6fd4b26d04846e332779fbd9717913b9801cd80a42fb70633b96bc7ceda5826"}}