Pith Number

pith:ZXSPO5EE

pith:2024:ZXSPO5EECTYFQO3AZDT7U36ZK6

not attested not anchored not stored refs pending

Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents

Jie Zhou, Sishuo Chen, Wenkai Yang, Xiaohan Bi, Xu Sun, Yankai Lin

arxiv:2402.11208 v2 · 2024-02-17 · cs.CR · cs.AI · cs.CL

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{ZXSPO5EECTYFQO3AZDT7U36ZK6}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

4 papers in Pith

Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees

SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Using LLM Agents

Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents

HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?

Receipt and verification

First computed	2026-07-05T09:27:52.514568Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

cde4f7748414f0583b60c8e7fa6fd957968024f2bf2392f82e5b441865990173

Aliases

arxiv: 2402.11208 · arxiv_version: 2402.11208v2 · doi: 10.48550/arxiv.2402.11208 · pith_short_12: ZXSPO5EECTYF · pith_short_16: ZXSPO5EECTYFQO3A · pith_short_8: ZXSPO5EE

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/ZXSPO5EECTYFQO3AZDT7U36ZK6 \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: cde4f7748414f0583b60c8e7fa6fd957968024f2bf2392f82e5b441865990173

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "9bf1c29edc761705eda1ee42ba7dcb029243e58b8fd78efa0f23a215b911a7be",
    "cross_cats_sorted": [
      "cs.AI",
      "cs.CL"
    ],
    "license": "http://creativecommons.org/licenses/by/4.0/",
    "primary_cat": "cs.CR",
    "submitted_at": "2024-02-17T06:48:45Z",
    "title_canon_sha256": "e4419a68754466bb673fee088e7dba9ec40d789d3560d8ba87594aeeac73ade4"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2402.11208",
    "kind": "arxiv",
    "version": 2
  }
}