{"as_of":"2026-08-09T13:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2390b05c748ea59e72c2e7e54ac3b5bd2196bf5236e52fb99ce49ac1e3d996b3","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T15:38:17.379148Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-13T06:35:13.392794Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2310.03185","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.03185","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","venue":null,"work_id":"9ec00b87-5f4a-42d8-925c-4689b09bdd4a","year":2023},"citing_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-13T06:35:13.331872Z"},"links":{"cited_paper":"/paper/2310.03185","citing_paper":"/paper/2406.13352"},"observation_digest":"sha256:12f177b06e5097104464631e2ea778efd15efdbd013f7fd9cafaf59aa3caa1c4","observation_id":"22929a5e-c96d-4f5c-b69b-781da42f1b5e","resolution":{"observed_at":"2026-05-13T06:35:13.396512Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03185","snapshot_observed_at":"2026-08-08T15:38:17.379148Z","title":"Misusing tools in large language models with visual adversarial examples,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06390","last_updated":"2025-02-11T04:42:24Z","snapshot_observed_at":"2026-08-09T09:14:59.400822Z","submitted_at":"2025-02-10T12:20:08Z","title":"When Data Manipulation Meets Attack Goals: An In-depth Survey of Attacks for VLMs","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-08T15:38:17.379148Z"},"links":{"cited_paper":"/paper/2310.03185","citing_paper":"/paper/2502.06390"},"observation_digest":"sha256:d501eef7f70cd972ff7db1e9db630eac3e439ce8d66755f081533cfbdd19be53","observation_id":"715f514c-6c7c-48bf-9423-830233b485fc","resolution":{"observed_at":"2026-08-08T15:38:17.379148Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2310.03185","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.03185","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","venue":null,"work_id":"9ec00b87-5f4a-42d8-925c-4689b09bdd4a","year":2023},"citing_paper":{"arxiv_id":"2502.18864","last_updated":"2025-02-26T06:17:13Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-26T06:17:13Z","title":"Towards an AI co-scientist","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-05-11T13:02:43.571234Z"},"links":{"cited_paper":"/paper/2310.03185","citing_paper":"/paper/2502.18864"},"observation_digest":"sha256:8c8ab1f9b6c48542956c7e1d1d3a41d863d488a3c03f669e483dac339498f36c","observation_id":"eb13a3ce-6984-4632-97c1-5c229337fb13","resolution":{"observed_at":"2026-05-11T13:02:44.386342Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03185","snapshot_observed_at":"2026-08-07T05:06:14.879856Z","title":"Gupta, Niloofar Mireshghallah, Taylor Berg- Kirkpatrick, and Earlence Fernandes","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.08837","last_updated":"2025-06-27T11:13:27Z","snapshot_observed_at":"2026-08-07T04:58:26.428959Z","submitted_at":"2025-06-10T14:23:55Z","title":"Design Patterns for Securing LLM Agents against Prompt Injections","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:06:14.879856Z"},"links":{"cited_paper":"/paper/2310.03185","citing_paper":"/paper/2506.08837"},"observation_digest":"sha256:52d0183a74438338de60b16f09f4c038c95b5611adf2e5412e3c78d5a7575525","observation_id":"6f807f7f-987e-4af8-81e5-eeba44f3c138","resolution":{"observed_at":"2026-08-07T05:06:14.879856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03185","snapshot_observed_at":"2026-08-04T07:01:15.693052Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27275","last_updated":"2026-07-30T09:01:41Z","snapshot_observed_at":"2026-08-09T02:13:59.761041Z","submitted_at":"2025-10-31T08:35:42Z","title":"Prevalence of Security and Privacy Risk-Inducing Usage of AI-based Conversational Agents","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T07:01:15.693052Z"},"links":{"cited_paper":"/paper/2310.03185","citing_paper":"/paper/2510.27275"},"observation_digest":"sha256:2c3c9351be9ed03c38b614f56a20e718108bce7c7bb8c1c326dc9dcdc5fabdd7","observation_id":"6937ca65-17c2-461b-98d4-ea5cdbc12625","resolution":{"observed_at":"2026-08-04T07:01:15.693052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03185","snapshot_observed_at":"2026-08-03T10:46:21.895670Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.09117","last_updated":"2026-06-23T22:21:32Z","snapshot_observed_at":"2026-08-05T00:57:23.262072Z","submitted_at":"2026-01-14T03:33:14Z","title":"A Marketplace for AI-Generated Adult Content and Deepfakes","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T10:46:21.895670Z"},"links":{"cited_paper":"/paper/2310.03185","citing_paper":"/paper/2601.09117"},"observation_digest":"sha256:19d47c289966b824de16834bbf29dec96c1f094b71baaf35a1f02a124ecc0d33","observation_id":"521813c9-5b18-488e-aaf1-ea9268550fa7","resolution":{"observed_at":"2026-08-03T10:46:21.895670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03185","snapshot_observed_at":"2026-07-14T20:40:43.875392Z","title":"Gupta, Niloofar Mireshghallah, Taylor Berg- Kirkpatrick, and Earlence Fernandes","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2603.15125","last_updated":"2026-06-05T07:33:44Z","snapshot_observed_at":"2026-08-07T06:17:50.557169Z","submitted_at":"2026-03-16T11:21:30Z","title":"From Storage to Steering: Memory Control Flow Attacks on LLM Agents","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-14T20:40:43.875392Z"},"links":{"cited_paper":"/paper/2310.03185","citing_paper":"/paper/2603.15125"},"observation_digest":"sha256:209fe12afcd156a848de49ca0e08acba3cbaa4726481ef20066e7769d8dcc8d5","observation_id":"a059847a-12e6-4e46-8bec-787a06e64cdc","resolution":{"observed_at":"2026-07-14T20:40:43.875392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2310.03185/citation-record","integrity":"/paper/2310.03185/integrity","json":"/paper/2310.03185/citation-record.json","paper":"/paper/2310.03185"},"outbound":[],"paper":{"arxiv_id":"2310.03185","last_updated":"2023-10-04T22:10:01Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T16:27:55.509482Z","submitted_at":"2023-10-04T22:10:01Z","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 7 inbound Pith citation observations for arXiv:2310.03185."}