Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-08T00:18:55.016013Z
Paper Citation Record · LEDGER
As of 9 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 0 inbound Pith citation observations for arXiv:2607.05189.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-08T00:18:55.016013Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
60 of 60 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation a3054842-2a02-411b-9cf5-2b674b4e8794 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents OpenClaw: Open-source personal AI agent frame- work
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation b0c93af4-2ef6-4b72-b1bb-1946fa67324b · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation ef02c7bd-4764-445e-acf7-309b968aecd3 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Formalizing and bench- marking prompt injection attacks and defenses,
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation f29c755e-a207-45bf-88fd-6bac5d5aa8cd · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 6d453410-5180-409a-9376-d5b89e6d5098 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents {PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large lan- guage models,
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 48cdb1a5-b19f-4554-b4ff-8ec30c2bbe46 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 1dbf73bd-0b52-4b4b-8d31-d8a46fd9e129 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Zep: A temporal knowledge graph architecture for agent memory,
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation d46ebe29-406f-4344-9a24-c062ecdd8d55 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes agent: The agent that grows with you
Reference 8
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation b80c7a36-85e4-436b-a867-116782c1c006 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Bug: System greeting prompt and thinking blocks leaked to user chat interface
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation cc119d62-f12c-4b72-b407-55e67bb7e457 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Bug: Internal thoughts visible in web UI (Chrome, Open- Claw 2026.2.26)
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 5dcbee75-817a-4ba9-bd40-f78e2106ab5d · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes-3 8B tool-call template leaks tool calls into content as text under realistic agent shape (Ollama)
Reference 11
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 44aa9991-fb1b-45b7-a629-036f206cef5b · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents InjecAgent: Benchmark- ing indirect prompt injections in tool-integrated large language model agents,
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 34745320-ac80-4aa6-89db-8bc1c4fb391a · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agent security bench (ASB): Formalizing and bench- marking attacks and defenses in LLM-based agents,
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 6d205a78-05b9-41ea-bc70-954e75aee862 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agent-SafetyBench: Evaluating the Safety of LLM Agents
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 81c0fc25-6ce2-4531-bba0-85feecfda819 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents R-judge: Benchmarking safety risk awareness for LLM agents,
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 0a11eb64-4f65-40a2-80d9-323827befac2 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Pro- file,
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 1055920d-c960-4172-817e-71a4eefa5bea · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Rubrics as rewards: Reinforcement learning beyond verifiable do- mains,
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 0f9db5da-b576-426c-b48e-a1f02f8cd333 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Deepseekmath: Pushing the limits of mathematical reasoning in open language models,
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation c6064923-038a-4282-8ae2-a0610f6e092d · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Securing llm systems against prompt injection
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 3b917e0c-a0a1-4fe2-82ec-1580eebebca4 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Prompt injection attacks against gpt-3
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 2f0d4c74-f8ba-4420-9d4d-45d24f478537 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 46db4377-b5c5-40ee-a72f-b9edd8b81895 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Ignore Previous Prompt: Attack Techniques For Language Models
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation f0ead309-bef3-4b21-9872-fc315f6fbcec · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Delimiters won’t save you from prompt injection
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 596ca047-6af5-42c9-8568-fadafe95891c · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents The attacker moves second: Stronger adaptive attacks bypass defenses against LLM jailbreaks and prompt injections,
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 535f49f8-dde5-42ca-ba68-8ab4db4f966a · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Thinking content leaks into text for MiniMax/Kimi — need per-model thinking control
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 53e64337-05f7-4fdc-941d-091221a52786 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Datasentinel: A game- theoretic detection of prompt injection attacks,
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 2e8b9270-331b-47b1-881c-55de3eeca208 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Meta secalign: A secure foundation llm against prompt injection attacks
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 5a000630-fcad-4135-a713-c202e9403c88 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentdog: A diagnostic guardrail framework for ai agent safety and security,
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 85d24812-c5f4-424b-b30e-d3f375b00d01 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents From assistant to double agent: Formalizing and benchmarking attacks on OpenClaw for personalized local AI agent
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 3d41f335-f9e0-4954-8317-0d15631beaa4 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents arXiv preprint arXiv:2602.14364 , year =
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 1b44cf50-2e9d-455a-b7d1-d2a87e88799f · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Don’t let the claw grip your hand: A security analysis and defense framework for openclaw,
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 6f775051-a681-43c0-9a90-2b849a0dbf6e · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Clawdrain: Exploiting tool-calling chains for stealthy token exhaustion in OpenClaw agents
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 5069d1f7-a859-476e-8c8b-3abb908637f6 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Taming openclaw: Security analysis and mitigation of autonomous llm agent threats,
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 3ce80ce9-c79b-481f-b0de-6b36bb6ea509 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 9745d96d-3f00-489a-be72-eca7cf4b6ae7 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Memory injection attacks on LLM agents via query-only interaction,
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 2d7ab257-7e05-44d9-8766-5d14896846d7 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Memory poisoning attack and defense on memory based llm-agents,
Reference 36
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation ae4c7f9b-aac7-4398-a2cb-b0012550eb6c · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentlab: Benchmarking llm agents against long-horizon attacks,
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 3362f025-1935-4388-83ea-1a8fd1f257d3 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation f02a4b00-da82-42f5-98d8-9581983985a3 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents arXiv preprint arXiv:2512.16962 , year=
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 235bf3eb-2b0a-4441-a2dc-a1f1b23270b8 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Context manipulation attacks : Web agents are susceptible to corrupted memory
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 95e224f4-cb69-43dc-8594-711c66286d11 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Gmail API Overview
Reference 41
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 45d66257-5911-45e0-8e9f-b511ec8631cd · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Use the Microsoft Graph API
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 3c9af81a-f596-4149-8afe-355b8d9d0436 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Decodingtrust-agent platform (dtap): A controllable and interactive red-teaming platform for ai agents,
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation e1b0cc03-f068-40a7-bc37-acb10c76a81b · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents On cost-effective llm-as-a-judge improvement techniques,
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 9b3dabe1-11b0-4243-b79c-737d853de8cc · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes agent documentation: Memory providers
Reference 45
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation cdde1a45-e212-40eb-a0ee-62355204ab9b · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents NanoClaw: A lightweight alternative to OpenClaw with container isolation
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 379e5185-d606-4a75-83ee-48fb0553292b · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Automation Templates: The Silent Pattern
Reference 47
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 621cb83a-8d83-411b-bc0f-0fbdc8c237ec · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 67524c10-ba11-4bbb-a498-5a85d85d83ba · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 49
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation cef21a73-69e1-4a35-add7-be0550b0fec4 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 50
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 5a8b81da-a772-4f57-a5a5-dfe7da838120 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 51
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 77cc1808-e03f-4ec5-a7bc-47c7ce2c8439 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents improvement
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 7365928a-8c67-4836-9fa3-ac72178eea75 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 95938d8b-97ef-402e-a27c-0c6655781963 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation d98e770f-07ea-4a2d-9b4e-f8ccd2531da8 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 55
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 6288b007-0d85-465d-a008-eddf73b740c7 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 56
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 0695b283-8a84-4e3f-a77e-bc8482285141 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 57
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation ecef514a-d2c0-489f-a1a8-c613ef4e737c · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work
Reference 58
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 6d363062-8560-4752-8837-32f715bd4014 · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents the correct answer
Reference 59
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 70cac6d0-b06a-425e-ad41-c9d797cc1ade · outbound
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents verdict":
Reference 60
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
No inbound Pith citation observations are available.