Paper Citation Record · LEDGER

Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

As of 18 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2503.00061.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2503.00061 v2

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 17 of 17 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 17 of 17 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-16T04:36:29.559595Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-04T10:49:46.745286Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 740cc3d7-758b-4ea9-a2d7-72ecddb95aef · inbound

From Texts to Shields: Convergence of Large Language Models and Cybersecurity cites this paper.

From Texts to Shields: Convergence of Large Language Models and Cybersecurity Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 66

Resolution: unresolved; no resolver link, observed 2026-08-16T04:36:29.559595Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8369a571-a0fd-49dc-a7f1-c3f6ce9a8943 · inbound

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks cites this paper.

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-07T15:41:21.733238Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a6e14267-9edb-4393-acd3-b185c0e9545a · inbound

From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem cites this paper.

From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-15T19:45:09.562953Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 51ccba5c-0fd9-4e72-a5ab-81c28a9ee95a · inbound

VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models cites this paper.

VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-06T23:01:04.689987Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9ea67daa-1d07-4f90-9671-84575271cc77 · inbound

Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree cites this paper.

Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-06T15:52:56.834425Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0a56cf42-0de8-4745-9800-6888724488e7 · inbound

Evaluation and Benchmarking of LLM Agents: A Survey cites this paper.

Evaluation and Benchmarking of LLM Agents: A Survey Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 113

Resolution: unresolved; no resolver link, observed 2026-08-06T12:44:21.855663Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9acb4cc3-cf41-47ab-a028-ae5e1faf9068 · inbound

Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment cites this paper.

Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-05T05:09:39.987143Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aaefaa14-f0e5-4ae6-ae8c-704b169e0d45 · inbound

Prompt Injection as Role Confusion cites this paper.

Prompt Injection as Role Confusion Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 6

Resolution: metadata mismatch; arxiv_id, observed 2026-05-15T20:20:17.489468Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 4ba43b50-8c77-4efe-b4aa-401bbf253463 · inbound

Prompt Injection as Role Confusion cites this paper.

Prompt Injection as Role Confusion Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-02T21:46:13.122809Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9a401447-f264-4022-b7b6-b7ad9e7d6c02 · inbound

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection cites this paper.

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-05-10T11:55:21.361407Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 2f46234b-ec34-4284-b0e3-1f5d923705b6 · inbound

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection cites this paper.

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-05-21T00:53:53.069031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 8a1698d4-9ac6-4d00-906b-66f0ce2ae004 · inbound

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection cites this paper.

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-02T15:56:48.909336Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 44b2861b-6791-41e5-a7f2-f7cb2cfe1322 · inbound

Adversarial Feeds Steer LLM Agent Decisions Against Their Defaults cites this paper.

Adversarial Feeds Steer LLM Agent Decisions Against Their Defaults Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-06-28T20:52:38.007689Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 7b3c326f-5f17-4e07-b878-cf799d84a27a · inbound

GIF: Locally Sound Geometric Information Flow Control for LLMs cites this paper.

GIF: Locally Sound Geometric Information Flow Control for LLMs Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 56

Resolution: verified exact; arxiv_id, observed 2026-07-04T10:49:46.746919Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation a693f6b7-cb2a-490e-9059-1d37a9adb93a · inbound

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense cites this paper.

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 30

Resolution: metadata mismatch; arxiv_id, observed 2026-07-01T12:45:44.903048Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation c508a3db-130b-452a-958d-286fec2ad66b · inbound

ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments cites this paper.

ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 62

Resolution: unresolved; no resolver link, observed 2026-07-31T04:54:36.195909Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e47d4d2c-b630-443a-8f7b-8c3713f333d4 · inbound

Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents cites this paper.

Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-15T19:23:23.340515Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.