Pith. sign in

Paper Citation Record · LEDGER

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents

As of 9 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 0 inbound Pith citation observations for arXiv:2607.05189.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.05189 v1

Coverage vector

measured 60 of 60 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-07-08T00:18:55.016013Z

measured 60 of 60 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

60 of 60 outbound references displayed

  • verified exact7
  • verified fuzzy40
  • unresolved10
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch3

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation a3054842-2a02-411b-9cf5-2b674b4e8794 · outbound

This paper cites OpenClaw: Open-source personal AI agent frame- work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents OpenClaw: Open-source personal AI agent frame- work

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.579677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:86c424c66d4935828ed170c9894d2d1560be04e5d2299c9f340aef64b6af69aa

Observation b0c93af4-2ef6-4b72-b1bb-1946fa67324b · outbound

This paper cites Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.615404Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:efcfe5881f0d9c63cfb7cb9bc7ff442505186eb546fb1dc328b03beaa8d71e45

Observation ef02c7bd-4764-445e-acf7-309b968aecd3 · outbound

This paper cites Formalizing and bench- marking prompt injection attacks and defenses,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Formalizing and bench- marking prompt injection attacks and defenses,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.611682Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b7778f84c067e587035adfe2f7e60dd89c6b562602f7e78b6191b7e5c87ee825

Observation f29c755e-a207-45bf-88fd-6bac5d5aa8cd · outbound

This paper cites Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.594455Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:858b523b81931f7971982ec8a146eb8a624e9d6d06e719151cc3b6180060ba86

Observation 6d453410-5180-409a-9376-d5b89e6d5098 · outbound

This paper cites {PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large lan- guage models,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents {PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large lan- guage models,

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.588991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8f331fd40e605568254733610d50e4e6825937c2165df0f6699d13fbcfaf215b

Observation 48cdb1a5-b19f-4554-b4ff-8ec30c2bbe46 · outbound

This paper cites Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory

Reference 6

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.456135Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b4188f0eb2f81b86e8c8398a0f09f2b40f3470534f453a5cd99b460016cacda8

Observation 1dbf73bd-0b52-4b4b-8d31-d8a46fd9e129 · outbound

This paper cites Zep: A temporal knowledge graph architecture for agent memory,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Zep: A temporal knowledge graph architecture for agent memory,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.555289Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:0590e1e7b3aa959a60515990118320b19527c6635c8a103dc11b52a0da0421d2

Observation d46ebe29-406f-4344-9a24-c062ecdd8d55 · outbound

This paper cites Hermes agent: The agent that grows with you.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes agent: The agent that grows with you

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.613543Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:06be0f7d9faf5862f8d75580d5dab9f248404a02fffc0cfc8416603143427262

Observation b80c7a36-85e4-436b-a867-116782c1c006 · outbound

This paper cites Bug: System greeting prompt and thinking blocks leaked to user chat interface.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Bug: System greeting prompt and thinking blocks leaked to user chat interface

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.581466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:7cfde89b38b64a2f394cdcb0067fbcc90558f821586581c389a1497271f72fbb

Observation cc119d62-f12c-4b72-b407-55e67bb7e457 · outbound

This paper cites Bug: Internal thoughts visible in web UI (Chrome, Open- Claw 2026.2.26).

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Bug: Internal thoughts visible in web UI (Chrome, Open- Claw 2026.2.26)

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.637311Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:a605424f27ec683e376a9dd4d2bbb085bfc2a7f5d11881fce3b2803ce558924b

Observation 5dcbee75-817a-4ba9-bd40-f78e2106ab5d · outbound

This paper cites Hermes-3 8B tool-call template leaks tool calls into content as text under realistic agent shape (Ollama).

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes-3 8B tool-call template leaks tool calls into content as text under realistic agent shape (Ollama)

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.630001Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b02c7b7706e81fa03b3df226bd03518024a344e3f6dd3d776936104ede15bc9c

Observation 44aa9991-fb1b-45b7-a629-036f206cef5b · outbound

This paper cites InjecAgent: Benchmark- ing indirect prompt injections in tool-integrated large language model agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents InjecAgent: Benchmark- ing indirect prompt injections in tool-integrated large language model agents,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.609576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:9cd9729ed4257fc55c326147d3f61acbfb5585c504447a736d91714e73bcee85

Observation 34745320-ac80-4aa6-89db-8bc1c4fb391a · outbound

This paper cites Agent security bench (ASB): Formalizing and bench- marking attacks and defenses in LLM-based agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agent security bench (ASB): Formalizing and bench- marking attacks and defenses in LLM-based agents,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.567518Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:6f9bed42b159d9e85e8f3994a19fef9f734a2c819a11821aa261e75032007faf

Observation 6d205a78-05b9-41ea-bc70-954e75aee862 · outbound

This paper cites Agent-SafetyBench: Evaluating the Safety of LLM Agents.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agent-SafetyBench: Evaluating the Safety of LLM Agents

Reference 14

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.452635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:9148373a48a367282e17f458acc28a5496cabeabfff697e4c192439be98701dd

Observation 81c0fc25-6ce2-4531-bba0-85feecfda819 · outbound

This paper cites R-judge: Benchmarking safety risk awareness for LLM agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents R-judge: Benchmarking safety risk awareness for LLM agents,

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.635525Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:05f9b6a0f8b646745734d679dedb082b8f69dcbd9cf37e1473a85606dcace5c8

Observation 0a11eb64-4f65-40a2-80d9-323827befac2 · outbound

This paper cites Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Pro- file,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Pro- file,

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.607686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8d4cf30eb97369439b4d246093acf56af617e079862c9aec395e188dce52a586

Observation 1055920d-c960-4172-817e-71a4eefa5bea · outbound

This paper cites Rubrics as rewards: Reinforcement learning beyond verifiable do- mains,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Rubrics as rewards: Reinforcement learning beyond verifiable do- mains,

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.622197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:eca88870ee936dcdb0070d4ed62f21867ecad35eef8b0988368fb1db23bc4d9c

Observation 0f9db5da-b576-426c-b48e-a1f02f8cd333 · outbound

This paper cites Deepseekmath: Pushing the limits of mathematical reasoning in open language models,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Deepseekmath: Pushing the limits of mathematical reasoning in open language models,

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.620277Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:4ddc628ea74bd40874e77247f280ccae20f574256adb6c329d5d99c5a4e30c80

Observation c6064923-038a-4282-8ae2-a0610f6e092d · outbound

This paper cites Securing llm systems against prompt injection.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Securing llm systems against prompt injection

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.618439Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:59fc054ce914ea9a36a310e2f549430b470fc08dd9a1bcef3019a8b28624b3a3

Observation 3b917e0c-a0a1-4fe2-82ec-1580eebebca4 · outbound

This paper cites Prompt injection attacks against gpt-3.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Prompt injection attacks against gpt-3

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.605058Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:2fac0728b96d5a24426890448522ecce8b2ebc12bf9663c7637f07737931cfe2

Observation 2f0d4c74-f8ba-4420-9d4d-45d24f478537 · outbound

This paper cites Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples

Reference 21

Resolution
metadata mismatch
local_arxiv, observed 2026-07-08T00:24:22.468806Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:4e965efd0ccb2952ac59ecad5b6b6fef4da039abfcdc5ca169d2aeb5b687b9af

Observation 46db4377-b5c5-40ee-a72f-b9edd8b81895 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Ignore Previous Prompt: Attack Techniques For Language Models

Reference 22

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.462080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:56c4620ee307390c7486588d47588a3439374d3674dff351addb93a966743b13

Observation f0ead309-bef3-4b21-9872-fc315f6fbcec · outbound

This paper cites Delimiters won’t save you from prompt injection.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Delimiters won’t save you from prompt injection

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.624132Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:e60e604a49f30146fcc9ec1f2042a0d2c72c9b39b8a714fe1923790bda6d931d

Observation 596ca047-6af5-42c9-8568-fadafe95891c · outbound

This paper cites The attacker moves second: Stronger adaptive attacks bypass defenses against LLM jailbreaks and prompt injections,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents The attacker moves second: Stronger adaptive attacks bypass defenses against LLM jailbreaks and prompt injections,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.565410Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:56c339d914e80913650df54022bcda42bba355c1acf215166fde8ae7300c9fed

Observation 535f49f8-dde5-42ca-ba68-8ab4db4f966a · outbound

This paper cites Thinking content leaks into text for MiniMax/Kimi — need per-model thinking control.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Thinking content leaks into text for MiniMax/Kimi — need per-model thinking control

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.577981Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:a911d8b0d15f1f9b521a7bf09599e4298834ce04288d3f77cddead54c90a8e41

Observation 53e64337-05f7-4fdc-941d-091221a52786 · outbound

This paper cites Datasentinel: A game- theoretic detection of prompt injection attacks,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Datasentinel: A game- theoretic detection of prompt injection attacks,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.561393Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:dddc507cccbdb007733810aea5c557ad5de7524839e1cfb9e2658ea611edec55

Observation 2e8b9270-331b-47b1-881c-55de3eeca208 · outbound

This paper cites Meta secalign: A secure foundation llm against prompt injection attacks.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Meta secalign: A secure foundation llm against prompt injection attacks

Reference 27

Resolution
verified exact
arxiv_id, observed 2026-07-08T00:24:22.441236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8d044b8cc3b3eaf4aa3c6c51637c6290504f7388d8a31b4810a781f9ee03034a

Observation 5a000630-fcad-4135-a713-c202e9403c88 · outbound

This paper cites Agentdog: A diagnostic guardrail framework for ai agent safety and security,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentdog: A diagnostic guardrail framework for ai agent safety and security,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.597481Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:19f1cd30e138ea4f1a292c774d087224ec0476c6d5dac4c8fc4e5e13b33a31c8

Observation 85d24812-c5f4-424b-b30e-d3f375b00d01 · outbound

This paper cites From assistant to double agent: Formalizing and benchmarking attacks on OpenClaw for personalized local AI agent.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents From assistant to double agent: Formalizing and benchmarking attacks on OpenClaw for personalized local AI agent

Reference 29

Resolution
verified exact
arxiv_id, observed 2026-07-08T00:24:22.437969Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:335f185e2cbc2333cda6b3077d5486878fe1836a91fbd4159432d9bb32244fb5

Observation 3d41f335-f9e0-4954-8317-0d15631beaa4 · outbound

This paper cites arXiv preprint arXiv:2602.14364 , year =.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents arXiv preprint arXiv:2602.14364 , year =

Reference 30

Resolution
metadata mismatch
arxiv_id, observed 2026-07-08T00:24:22.444219Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:bcb19dcce7a25bc7747505fca483190f110abda468f1b4a473ef41713dcf89d6

Observation 1b44cf50-2e9d-455a-b7d1-d2a87e88799f · outbound

This paper cites Don’t let the claw grip your hand: A security analysis and defense framework for openclaw,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Don’t let the claw grip your hand: A security analysis and defense framework for openclaw,

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.596178Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:1be665b9437b155311f229e3dbfc6abec167e2243bb2392e6dcfccf0c54c55c5

Observation 6f775051-a681-43c0-9a90-2b849a0dbf6e · outbound

This paper cites Clawdrain: Exploiting tool-calling chains for stealthy token exhaustion in OpenClaw agents.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Clawdrain: Exploiting tool-calling chains for stealthy token exhaustion in OpenClaw agents

Reference 32

Resolution
verified exact
arxiv_id, observed 2026-07-08T00:24:22.465909Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:9d984c257bbe00569a59c3623b0a4c0b29d0a52420e4fd8965a4ae07e461867f

Observation 5069d1f7-a859-476e-8c8b-3abb908637f6 · outbound

This paper cites Taming openclaw: Security analysis and mitigation of autonomous llm agent threats,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Taming openclaw: Security analysis and mitigation of autonomous llm agent threats,

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.585374Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:debe4afa607f5f1644bc228fe7062ddd219abe8c72397abe9988154893d69ca5

Observation 3ce80ce9-c79b-481f-b0de-6b36bb6ea509 · outbound

This paper cites Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.641230Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:d59901cfb87a207fbc580859b9659807421340018561532fd8c02316d5435b4a

Observation 9745d96d-3f00-489a-be72-eca7cf4b6ae7 · outbound

This paper cites Memory injection attacks on LLM agents via query-only interaction,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Memory injection attacks on LLM agents via query-only interaction,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.557135Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:834cd7628dd96e7aa86668092efc50b78cce0a7309665447dd0dfc772fdd6292

Observation 2d7ab257-7e05-44d9-8766-5d14896846d7 · outbound

This paper cites Memory poisoning attack and defense on memory based llm-agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Memory poisoning attack and defense on memory based llm-agents,

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.575739Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:ffe311530f3dc36658e8550c13c7e0880eff5924d97d1f8a827254c9950b512c

Observation ae4c7f9b-aac7-4398-a2cb-b0012550eb6c · outbound

This paper cites Agentlab: Benchmarking llm agents against long-horizon attacks,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentlab: Benchmarking llm agents against long-horizon attacks,

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.583363Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:6074042c991872adfc7a01216dde5d2904efc1a7363412ed342242084d62105c

Observation 3362f025-1935-4388-83ea-1a8fd1f257d3 · outbound

This paper cites Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.540641Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:c3a695c54dd5bcc7bd3878ff3ecc2bcecb752200bfb32ee4a3d9a55aa4831a69

Observation f02a4b00-da82-42f5-98d8-9581983985a3 · outbound

This paper cites arXiv preprint arXiv:2512.16962 , year=.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents arXiv preprint arXiv:2512.16962 , year=

Reference 39

Resolution
metadata mismatch
arxiv_id, observed 2026-07-08T00:24:22.449187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:cdfe56ceec0b9132cba605c38a52a69f7c219f07fd8a7cb9c832fdb858daa22f

Observation 235bf3eb-2b0a-4441-a2dc-a1f1b23270b8 · outbound

This paper cites Context manipulation attacks : Web agents are susceptible to corrupted memory.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Context manipulation attacks : Web agents are susceptible to corrupted memory

Reference 40

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.459420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:c367ce2cd583b1967e315f20aa386c3f5fe2c30fed208aad4667a07ba7771e71

Observation 95e224f4-cb69-43dc-8594-711c66286d11 · outbound

This paper cites Gmail API Overview.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Gmail API Overview

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.563371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:79f67fb08ab332eaa0f8889af352d02283261f82656821448d66f25448829edc

Observation 45d66257-5911-45e0-8e9f-b511ec8631cd · outbound

This paper cites Use the Microsoft Graph API.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Use the Microsoft Graph API

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.603346Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:9f16c56ed06aa89339950cb4aacc43444c7cc1934c5ad0661389281a1447511b

Observation 3c9af81a-f596-4149-8afe-355b8d9d0436 · outbound

This paper cites Decodingtrust-agent platform (dtap): A controllable and interactive red-teaming platform for ai agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Decodingtrust-agent platform (dtap): A controllable and interactive red-teaming platform for ai agents,

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.548155Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8661b43a6887c653b440af74037ef0002b0f04790cc939d4b2a21c062fa30e67

Observation e1b0cc03-f068-40a7-bc37-acb10c76a81b · outbound

This paper cites On cost-effective llm-as-a-judge improvement techniques,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents On cost-effective llm-as-a-judge improvement techniques,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.553369Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:851cf95c87b278aba36c51a77b2f48b7e08ed07ca2fa9d8d958efdd15e4c7287

Observation 9b3dabe1-11b0-4243-b79c-737d853de8cc · outbound

This paper cites Hermes agent documentation: Memory providers.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes agent documentation: Memory providers

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.631783Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:ecb698f112940df53eb5ccfc0c3b345a33d742ce5fdf6566f56f775a3c058e18

Observation cdde1a45-e212-40eb-a0ee-62355204ab9b · outbound

This paper cites NanoClaw: A lightweight alternative to OpenClaw with container isolation.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents NanoClaw: A lightweight alternative to OpenClaw with container isolation

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.639447Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:6b9b9fba0185718cd1a6793deca2da272bf3de877fd91575bcabae16fb4b0826

Observation 379e5185-d606-4a75-83ee-48fb0553292b · outbound

This paper cites Automation Templates: The Silent Pattern.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Automation Templates: The Silent Pattern

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.587150Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:bb472743160e954c51478051e50484a088a70207bf933ec3952e439a2b1b6b22

Observation 621cb83a-8d83-411b-bc0f-0fbdc8c237ec · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.543101Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b7b088ab3053231248757bab34cb7f54fc1423873890f775d4f8b1b54afdc992

Observation 67524c10-ba11-4bbb-a498-5a85d85d83ba · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 49

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.551216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:941d4dfb380f86a1362cab8ae05d31628300bb527ec092f9cffda7f8b9b07da2

Observation cef21a73-69e1-4a35-add7-be0550b0fec4 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 50

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.571791Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8ab3a269da529585ccb6f2d4dd219ff52916f576edb2535a5a15735dd65b6ac9

Observation 5a8b81da-a772-4f57-a5a5-dfe7da838120 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 51

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.573764Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8dea8a0c4f22366acaf176a5e1744b9da8a8279012c0dff8286f445407df9ac4

Observation 77cc1808-e03f-4ec5-a7bc-47c7ce2c8439 · outbound

This paper cites improvement.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents improvement

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.627707Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:ff9e11fec71c2d516e63c197263444cec569a6788228f5585f94cac19cef08f1

Observation 7365928a-8c67-4836-9fa3-ac72178eea75 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.569589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8426bab7c931cd1656798a9e15616f58c5af1e444433b0569874bcafe187452a

Observation 95938d8b-97ef-402e-a27c-0c6655781963 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 54

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.599549Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:d68fac5a97da1594acbb83cd9008aceedd94caa8a4f38bbb3e603bc7ae21465e

Observation d98e770f-07ea-4a2d-9b4e-f8ccd2531da8 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 55

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.601376Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:ec2ae840f6945d26d51c18346f7beb2ca7931584111bc26567fcfbf8e55bdafc

Observation 6288b007-0d85-465d-a008-eddf73b740c7 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 56

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.559110Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b8f9f3ab2bd71eedc9518bf1431d7bdd7cc6c72b2defc9bb07f0105bc62628f7

Observation 0695b283-8a84-4e3f-a77e-bc8482285141 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 57

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.590489Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:615bbe79da317d842522c978bc7f1a623620d9d1c20ff95889e81c5b3fb77550

Observation ecef514a-d2c0-489f-a1a8-c613ef4e737c · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 58

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.633513Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:be698af45096a28d94cb33882d5a66e21845c38a448d5088b4cd81501e101f3d

Observation 6d363062-8560-4752-8837-32f715bd4014 · outbound

This paper cites the correct answer.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents the correct answer

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.626095Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:d780a5eeb970ec0fe2b8ffd6d1d46c30f3945f69431f20ff123a0356db9bdbe8

Observation 70cac6d0-b06a-425e-ad41-c9d797cc1ade · outbound

This paper cites verdict":.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents verdict":

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.592150Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:88779fb47c40007f7d9c83c8069a65d0f066963b3998bf4bb6c898c10850aabe

Pith citing papers

No inbound Pith citation observations are available.