Pith. sign in

Paper Citation Record · LEDGER

InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 20 inbound Pith citation observations for arXiv:2410.22770.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2410.22770 v3

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 20 of 20 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 20 of 20 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-09T19:32:34.281553Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-04T15:59:56.705533Z

Reference resolution

0 of 0 outbound references displayed

  • verified exact0
  • verified fuzzy0
  • unresolved0
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 566e8b03-bff3-4b47-9014-7a2ebd7e8e34 · inbound

Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation cites this paper.

Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-09T19:32:34.281553Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T19:32:34.281553Z digest=sha256:4e40bfa5b928cc72dd754818a9aab3f58bf09153ee828a9fe66d259d5e2bd6ff

Observation 347b9855-fd2b-4166-9014-f50b5208fba5 · inbound

Detection Method for Prompt Injection by Integrating Pre-trained Model and Heuristic Feature Engineering cites this paper.

Detection Method for Prompt Injection by Integrating Pre-trained Model and Heuristic Feature Engineering InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T10:40:02.046929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T10:40:02.046929Z digest=sha256:87362deb7fe16f54d4b84303800512adae238936697df695bfd5aba9a67be800

Observation 2b4a2a08-6a1f-44f4-8243-56230774416b · inbound

JavelinGuard: Low-Cost Transformer Architectures for LLM Security cites this paper.

JavelinGuard: Low-Cost Transformer Architectures for LLM Security InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-07T05:41:25.422926Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T05:41:25.422926Z digest=sha256:83686ece296f01233b713fa95bb5d4bff5e1ab2879c4a6ff3e0f59ed97246dab

Observation 1d1e9437-1dc1-4d4b-8fbe-b90aeb12b0bd · inbound

Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems cites this paper.

Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-06T15:32:52.920395Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T15:32:52.920395Z digest=sha256:9af8d0df3dad18d0d8e689f0b80f15f297c498e44af6a62603874725fa72f257

Observation 20ed6250-4fe4-49a9-8648-c3bbcd5cfde3 · inbound

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling cites this paper.

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-04T22:01:57.303234Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-04T22:01:57.303234Z digest=sha256:6c23ed5f3b35c26e4b3b603347eac5f33c4893737d7e7ea7e41fe1dbacda8853

Observation aacaf011-08ae-443a-bbec-441cec66951d · inbound

AgentWatcher: A Rule-based Prompt Injection Monitor cites this paper.

AgentWatcher: A Rule-based Prompt Injection Monitor InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-02T17:00:40.793545Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T17:00:40.793545Z digest=sha256:6b794cc5aea24b5bf1be2767878e4ebe152ac466abbe73b308ee2b4101efe93a

Observation 43a33fbf-7458-4e60-a867-411c51cd5f03 · inbound

TRUSTDESC: Preventing Tool Poisoning in LLM Applications via Trusted Description Generation cites this paper.

TRUSTDESC: Preventing Tool Poisoning in LLM Applications via Trusted Description Generation InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 45

Resolution
verified exact
arxiv_id, observed 2026-05-11T07:10:59.673004Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-10T17:16:35.875601Z digest=sha256:0a455644fd774e713094b5db78bfe4b1bb7e1fd1fb3fb8210e19579f419186af

Observation 1717068b-b9ec-47c5-ac04-c9fd8c3040da · inbound

Conjunctive Prompt Attacks in Multi-Agent LLM Systems cites this paper.

Conjunctive Prompt Attacks in Multi-Agent LLM Systems InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 18

Resolution
verified exact
arxiv_id, observed 2026-05-10T08:17:37.659730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=arxiv_source observed=2026-05-10T08:13:42.401992Z digest=sha256:74fa3ec7d6c531f43eb3a4e3bd95c969710e64341d37d8048639f149eb75aae7

Observation 43a1b4a0-ea53-4e14-9b25-9621e967ac39 · inbound

SafeAgent: A Runtime Protection Architecture for Agentic Systems cites this paper.

SafeAgent: A Runtime Protection Architecture for Agentic Systems InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 13

Resolution
metadata mismatch
arxiv_id, observed 2026-05-10T06:11:20.528650Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-10T06:06:49.717091Z digest=sha256:8605a6941cd02f96bbc2a053606b665c72914ce26578944f3fc59d766f8f7c33

Observation 8fc45b19-0e07-4aa2-9b30-ebeceda40819 · inbound

MCP Pitfall Lab: Exposing Developer Pitfalls in MCP Tool Server Security under Multi-Vector Attacks cites this paper.

MCP Pitfall Lab: Exposing Developer Pitfalls in MCP Tool Server Security under Multi-Vector Attacks InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 7

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T14:31:07.935293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-09T21:37:28.671785Z digest=sha256:2ab4d19b14a7df4feb45df2740ea5f8752a477c94f7ee444a36becaa159069f1

Observation 695da77a-7ffb-48a2-af18-e81677200800 · inbound

Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills cites this paper.

Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 9

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T23:46:16.667903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-07T16:22:49.737626Z digest=sha256:523eca4d0954b4e4af22c13a367f4a7261a08488970092df5d87696fe7b08124

Observation 091bbcee-5dc8-4ce6-9393-8f9545cfef88 · inbound

Cross-Lingual Jailbreak Detection via Semantic Codebooks cites this paper.

Cross-Lingual Jailbreak Detection via Semantic Codebooks InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 9

Resolution
verified exact
arxiv_id, observed 2026-05-11T23:46:20.461805Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-07T16:22:33.567085Z digest=sha256:190f82f9b32f6e441250023130f6d7faf10d43fe4d1b711cf86ef5f804e3b86b

Observation e75f430e-e303-4998-855b-cebf83364a4d · inbound

ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection cites this paper.

ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 22

Resolution
verified exact
arxiv_id, observed 2026-05-11T23:56:13.711295Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=arxiv_source observed=2026-05-07T15:59:49.513500Z digest=sha256:259c584c0ef06a959a0d988c0788376d47d0b6c6e94443757b2f5d84c3beb967

Observation 32b24594-d718-48da-ab1b-50f31a7952a8 · inbound

Context-Aware Spear Phishing: Generative AI-Enabled Attacks Against Individuals via Public Social Media Data cites this paper.

Context-Aware Spear Phishing: Generative AI-Enabled Attacks Against Individuals via Public Social Media Data InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 65

Resolution
verified exact
arxiv_id, observed 2026-05-13T01:52:05.373296Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-13T01:48:46.380615Z digest=sha256:f8f7cb8143317f221c1bd1882100d9314808f016c31106e14a40aa1323670294

Observation 24f60221-b2c9-48f0-9614-841e88f7e1af · inbound

Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals cites this paper.

Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 16

Resolution
metadata mismatch
arxiv_id, observed 2026-06-29T18:43:50.533635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-29T18:41:03.566306Z digest=sha256:f580f8e402e2a35a14f0278d30be67adcfdcf8df971c5231b7b845769d65556f

Observation a46510d5-4881-484f-888c-80f14d8b7694 · inbound

Gate AI: LLM Security Benchmark Evaluation Methodology and Results cites this paper.

Gate AI: LLM Security Benchmark Evaluation Methodology and Results InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 11

Resolution
verified exact
arxiv_id, observed 2026-07-01T22:46:19.192719Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-28T15:05:08.411286Z digest=sha256:93824bc896c4699c60c1dd1d599bd3296fb3bbc8dfc12129aec293330d5a3f85

Observation 7d0bc711-6e2f-4db4-9f43-205da7639bc2 · inbound

Where Instruction Hierarchy Breaks: Diagnosing and Repairing Failures in Reasoning Language Models cites this paper.

Where Instruction Hierarchy Breaks: Diagnosing and Repairing Failures in Reasoning Language Models InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 7

Resolution
verified exact
arxiv_id, observed 2026-07-02T17:47:18.106890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-27T21:51:34.829877Z digest=sha256:3c7f1e1f35adb0f41d2f5230bf84b63fbe298029ab8257363079f8bad52de5fc

Observation adf2fd2b-bb68-4f33-9e0e-78f69e983fd0 · inbound

Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift cites this paper.

Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 6

Resolution
verified exact
arxiv_id, observed 2026-07-04T09:29:44.071869Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T09:55:08.178751Z digest=sha256:bfc4e6e0ab0fa929f5c7474dd7f873549f2bd08605077ed42a66c2157b6ebb40

Observation 4d75529e-afc7-4c10-a320-8b837f7e7327 · inbound

Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats cites this paper.

Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 9

Resolution
metadata mismatch
arxiv_id, observed 2026-07-04T15:59:56.706982Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T01:10:13.093255Z digest=sha256:968bceec8e73d759082ab26e4bcbe65a502f2f5923f20cd21c9b46cb2ecfcffb

Observation 004175dd-d908-41ac-89ca-ea002c70cc3b · inbound

From Neural Intent to Cryptographic Authorization: Securing AI-Driven Enterprise Workflows cites this paper.

From Neural Intent to Cryptographic Authorization: Securing AI-Driven Enterprise Workflows InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-01T22:55:50.728137Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T22:55:50.728137Z digest=sha256:680cab0cd8dff19034a197b02f2987644dcb85170f10bca7df417e913a81bd94