{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:V7IQLTLPP2HRY6MD7KS3U47UU5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a18d39ddf147821a97d3646e6b61ba1bce47569f931f0ef3d9b541b377ef2bba","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-22T12:24:41Z","title_canon_sha256":"ffd00f50f6189b6c3b31228a3b2a79e0e4c88857c5ecc1ada25be51254c6292d"},"schema_version":"1.0","source":{"id":"2410.16950","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.16950","created_at":"2026-07-05T09:24:09Z"},{"alias_kind":"arxiv_version","alias_value":"2410.16950v1","created_at":"2026-07-05T09:24:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.16950","created_at":"2026-07-05T09:24:09Z"},{"alias_kind":"pith_short_12","alias_value":"V7IQLTLPP2HR","created_at":"2026-07-05T09:24:09Z"},{"alias_kind":"pith_short_16","alias_value":"V7IQLTLPP2HRY6MD","created_at":"2026-07-05T09:24:09Z"},{"alias_kind":"pith_short_8","alias_value":"V7IQLTLP","created_at":"2026-07-05T09:24:09Z"}],"graph_snapshots":[{"event_id":"sha256:5c1fae3ada30a5f8da1ae3e0a68251c7b53c6c49bf82f3bec56886b735a6dbc5","target":"graph","created_at":"2026-07-05T09:24:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.16950/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Following the advancement of large language models (LLMs), the development of LLM-based autonomous agents has become increasingly prevalent. As a result, the need to understand the security vulnerabilities of these agents has become a critical task. We examine how ReAct agents can be exploited using a straightforward yet effective method we refer to as the foot-in-the-door attack. Our experiments show that indirect prompt injection attacks, prompted by harmless and unrelated requests (such as basic calculations) can significantly increase the likelihood of the agent performing subsequent malic","authors_text":"Ateret Anaby-Tavor, George Kour, Guy Uziel, Itay Nakash","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.16950","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:95012f3419532a81457bdd4ccb64ac15586369b1f179a956372bedf345e1d2b5","target":"record","created_at":"2026-07-05T09:24:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a18d39ddf147821a97d3646e6b61ba1bce47569f931f0ef3d9b541b377ef2bba","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-22T12:24:41Z","title_canon_sha256":"ffd00f50f6189b6c3b31228a3b2a79e0e4c88857c5ecc1ada25be51254c6292d"},"schema_version":"1.0","source":{"id":"2410.16950","kind":"arxiv","version":1}},"canonical_sha256":"afd105cd6f7e8f1c7983faa5ba73f4a7478242e1d8aab4bc02a0659d2ef3a4d5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"afd105cd6f7e8f1c7983faa5ba73f4a7478242e1d8aab4bc02a0659d2ef3a4d5","first_computed_at":"2026-07-05T09:24:09.234346Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:24:09.234346Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qtL70SDX/JWxJbp7u5AlXRqZbYMwCElEcRJmlc1A0X6KcVpOwEGraiQ50BHfGLNDH4Vo4R5sVyNl0rSlhbxwAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:24:09.234885Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.16950","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:95012f3419532a81457bdd4ccb64ac15586369b1f179a956372bedf345e1d2b5","sha256:5c1fae3ada30a5f8da1ae3e0a68251c7b53c6c49bf82f3bec56886b735a6dbc5"],"state_sha256":"e7da4ab921cb14c1785d2cbf3a9f79bd563a4d244ca20542fd19c9d856a5a22c"}