{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:YTSOP5UX2LEEWARYIRDZYHUBJZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d3bfa28afd165a09db1cf1edbd2333af56fe6970b388c783497769d0bc71afd1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T12:03:32Z","title_canon_sha256":"b7faecd7848b8868d172a0d522032b317d4b7a728e86d621e528926b8c2d7c3d"},"schema_version":"1.0","source":{"id":"2407.08422","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08422","created_at":"2026-07-05T08:49:36Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08422v2","created_at":"2026-07-05T08:49:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08422","created_at":"2026-07-05T08:49:36Z"},{"alias_kind":"pith_short_12","alias_value":"YTSOP5UX2LEE","created_at":"2026-07-05T08:49:36Z"},{"alias_kind":"pith_short_16","alias_value":"YTSOP5UX2LEEWARY","created_at":"2026-07-05T08:49:36Z"},{"alias_kind":"pith_short_8","alias_value":"YTSOP5UX","created_at":"2026-07-05T08:49:36Z"}],"graph_snapshots":[{"event_id":"sha256:b755e916aefd4d0f18c25e207b8f9290bbb2f2a054d26430176b03f1f4d5de69","target":"graph","created_at":"2026-07-05T08:49:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.08422/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM app stores have seen rapid growth, leading to the proliferation of numerous custom LLM apps. However, this expansion raises security concerns. In this study, we propose a three-layer concern framework to identify the potential security risks of LLM apps, i.e., LLM apps with abusive potential, LLM apps with malicious intent, and LLM apps with exploitable vulnerabilities. Over five months, we collected 786,036 LLM apps from six major app stores: GPT Store, FlowGPT, Poe, Coze, Cici, and Character.AI. Our research integrates static and dynamic analysis, the development of a large-scale toxic w","authors_text":"Haoyu Wang, Xinyi Hou, Yanjie Zhao","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T12:03:32Z","title":"On the (In)Security of LLM App Stores"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08422","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e5d35fb668e23fc520c98b88862ccf87f0f0e6dd291fb0f20e2497ec0c22339f","target":"record","created_at":"2026-07-05T08:49:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d3bfa28afd165a09db1cf1edbd2333af56fe6970b388c783497769d0bc71afd1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T12:03:32Z","title_canon_sha256":"b7faecd7848b8868d172a0d522032b317d4b7a728e86d621e528926b8c2d7c3d"},"schema_version":"1.0","source":{"id":"2407.08422","kind":"arxiv","version":2}},"canonical_sha256":"c4e4e7f697d2c84b023844479c1e814e5cd32a795ffef28f9b355fa3c2ea87a0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c4e4e7f697d2c84b023844479c1e814e5cd32a795ffef28f9b355fa3c2ea87a0","first_computed_at":"2026-07-05T08:49:36.317955Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:49:36.317955Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ISnpiuFWSEh1RxF4/dzOdnaga3dU47t7iujtMC+CCki/rOwlyREx/rYxbedEXpQKtR7Csjpl+rTY19kq1ZTgAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:49:36.318389Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.08422","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e5d35fb668e23fc520c98b88862ccf87f0f0e6dd291fb0f20e2497ec0c22339f","sha256:b755e916aefd4d0f18c25e207b8f9290bbb2f2a054d26430176b03f1f4d5de69"],"state_sha256":"f1f0d39925cf415e8abb6a80424624656a9172a8fef4d1a086994d8e30984fff"}