{"as_of":"2026-08-20T16:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6cbbaca7ebe3b4270ac20385e2e4f0a1f376256fc016c707ae3e8c0a89fd511e","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T20:28:15.736267Z","state":"measured"},{"denominator":74,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":74,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:11:18.279076Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T21:11:18.938391Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"cited_work":{"arxiv_id":"2505.12981","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.12981","snapshot_observed_at":"2026-08-06T21:11:18.938391Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","venue":"cs.CR","work_id":"22e71f17-baa9-4d22-81ba-c5521cd6f022","year":2025},"citing_paper":{"arxiv_id":"2507.00841","last_updated":"2025-07-01T15:10:00Z","snapshot_observed_at":"2026-08-19T11:48:28.811993Z","submitted_at":"2025-07-01T15:10:00Z","title":"SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:11:18.279076Z"},"links":{"cited_paper":"/paper/2505.12981","citing_paper":"/paper/2507.00841"},"observation_digest":"sha256:5357c5fe15fe5877d29f5813340e325b73586fc1d8140d372204b23335dde331","observation_id":"17cc5d21-b88f-4424-a663-36f7f9b2cd75","resolution":{"observed_at":"2026-08-06T21:11:18.944034Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12981","snapshot_observed_at":"2026-08-04T07:06:38.129664Z","title":"From assistants to adversaries: Exploring the security risks of mobile llm agents.arXiv preprint arXiv:2505.12981, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-15T21:43:41.146119Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.129664Z"},"links":{"cited_paper":"/paper/2505.12981","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:7933614a337e0214858dd9d1d739e335c99087a1e8f6a49aaf723b670e59e2f6","observation_id":"42f0340d-d8d1-404f-971d-136ec7b942af","resolution":{"observed_at":"2026-08-04T07:06:38.129664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12981","snapshot_observed_at":"2026-08-03T09:55:00.246179Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-17T17:42:01.615940Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T09:55:00.246179Z"},"links":{"cited_paper":"/paper/2505.12981","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:56f77574b2373a5f589955625cbce976beae4ffe7284d5671232e66b9a345fa3","observation_id":"b390c2b4-9592-438b-8c59-46d23ed4cef4","resolution":{"observed_at":"2026-08-03T09:55:00.246179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.12981/citation-record","integrity":"/paper/2505.12981/integrity","json":"/paper/2505.12981/citation-record.json","paper":"/paper/2505.12981"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.460315Z","title":"Large language models for software engi- neering: A systematic literature review,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.460315Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:5e4a99d87acd2475393e769857a5e2226d4621db4f730802b0a7f43cad320f50","observation_id":"99b7a93a-7272-4a2e-9ea1-969085f8c947","resolution":{"observed_at":"2026-08-15T20:28:15.460315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.04890","last_updated":"2025-02-13T10:09:37Z","snapshot_observed_at":"2026-08-18T09:21:41.196519Z","submitted_at":"2024-11-07T17:28:10Z","title":"GUI Agents with Foundation Models: A Comprehensive Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.04890","snapshot_observed_at":"2026-08-15T20:28:15.465072Z","title":"Gui agents with foundation models: A comprehensive survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.465072Z"},"links":{"cited_paper":"/paper/2411.04890","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:586ca1dd4ca601a021540d3005f89ecf5f934a0637c7e881914309ebc5201711","observation_id":"fb9c7e46-4068-42fd-b65d-fe4a9a0eaa72","resolution":{"observed_at":"2026-08-15T20:28:15.465072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18279","last_updated":"2025-05-06T15:08:00Z","snapshot_observed_at":"2026-08-17T10:40:45.253009Z","submitted_at":"2024-11-27T12:13:39Z","title":"Large Language Model-Brained GUI Agents: A Survey","version":12},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18279","snapshot_observed_at":"2026-08-15T20:28:15.470688Z","title":"Large language model-brained gui agents: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.470688Z"},"links":{"cited_paper":"/paper/2411.18279","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:3a72858d3ed7c07c4a91a935fe9e2a1051336658c085865880efef59414ba926","observation_id":"feb75a19-f460-4597-9a9c-659c372cd1d9","resolution":{"observed_at":"2026-08-15T20:28:15.470688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02006","last_updated":"2025-09-14T09:13:39Z","snapshot_observed_at":"2026-08-18T14:42:57.853784Z","submitted_at":"2024-11-04T11:50:58Z","title":"Foundations and Recent Trends in Multimodal Mobile Agents: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02006","snapshot_observed_at":"2026-08-15T20:28:15.475515Z","title":"Foundations and recent trends in multimodal mobile agents: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.475515Z"},"links":{"cited_paper":"/paper/2411.02006","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:ec7f10780fa8f3dc0157c81a8575e88d80066ef47928e375d8f3f490c8651972","observation_id":"46808128-85dc-4ea0-832b-3107793b01db","resolution":{"observed_at":"2026-08-15T20:28:15.475515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.596799Z","title":"Ai agents vs. ai assistants,","venue":null,"work_id":"c308c0bb-3639-49da-84a7-390d88b4b814","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.480316Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:4cedacdc9208b4f2ded075b297dae7dcacdb0e14a815456056b4a6a126b6cfaa","observation_id":"96f9acc5-bf67-4785-9d9e-848cf517c4da","resolution":{"observed_at":"2026-08-15T20:28:16.600419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.582336Z","title":"Agentic ai is revolutionizing business and daily life,","venue":null,"work_id":"9da202c6-bba5-4d93-b5ea-eee097d85eb2","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.485481Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:af8701a204623ca5ab95ceb83f8d28e15db80234e477b6b1090a281ce3c4e9bb","observation_id":"575bc650-19bb-4617-9483-67f52daead4c","resolution":{"observed_at":"2026-08-15T20:28:16.586843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.571159Z","title":"6 ai trends you’ll see more of in 2025,","venue":null,"work_id":"cf03ca34-d0c1-4973-8291-1d0ec629b18e","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.489773Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:1eb440998bcdf1ecc59ec726b964c37f19bd9a15f6584bdc6024ce27d3e3961b","observation_id":"4121a780-373e-4bcc-81c5-51c4defbe12a","resolution":{"observed_at":"2026-08-15T20:28:16.574946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.559858Z","title":"MagicOS,","venue":null,"work_id":"f60d14e8-fd3e-4159-8731-44ffdf02c87c","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.493532Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:f0b05ae06a958824d202b2b7353bcbf98e13952adc5adad4c9ca6bdb2f35dff1","observation_id":"e2a61153-73e8-419a-9e4e-4dbd030840b5","resolution":{"observed_at":"2026-08-15T20:28:16.564154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00820","last_updated":"2024-10-28T17:05:10Z","snapshot_observed_at":"2026-08-19T12:21:17.844807Z","submitted_at":"2024-10-28T17:05:10Z","title":"AutoGLM: Autonomous Foundation Agents for GUIs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00820","snapshot_observed_at":"2026-08-15T20:28:15.497748Z","title":"Autoglm: Autonomous foundation agents for guis,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.497748Z"},"links":{"cited_paper":"/paper/2411.00820","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:6eb218cf60ccccce65c7b2fcb8d74be1b10c15b665e61ea70b645084aa415aac","observation_id":"69d8fc46-dd78-40bb-b4f1-47c95352ec12","resolution":{"observed_at":"2026-08-15T20:28:15.497748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.546954Z","title":"This android skin has an ai that can order coffee and manage subscriptions,","venue":null,"work_id":"e3231387-c432-4b17-8639-65f6d2888ab7","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.502546Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:2a5e1be1983a5688e9c7a99e65bda1d93dc0bdf5c93405e451deffe5f5453fd3","observation_id":"46d22e66-63e7-4913-bc19-cd7c3de371c0","resolution":{"observed_at":"2026-08-15T20:28:16.552201Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.532368Z","title":"What is an ai agent?","venue":null,"work_id":"c31ba11e-0761-46b1-a50c-0a4797af261e","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.506600Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:edb5bd51c70b2e69ee790f03372b568999224449299f2328d6d4425830cda9b4","observation_id":"19bc6f2e-168c-4d3f-a3cd-f1076f75a935","resolution":{"observed_at":"2026-08-15T20:28:16.536252Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02502","last_updated":"2024-07-10T17:36:25Z","snapshot_observed_at":"2026-08-16T14:12:52.561838Z","submitted_at":"2024-03-04T21:50:29Z","title":"Trial and Error: Exploration-Based Trajectory Optimization for LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02502","snapshot_observed_at":"2026-08-15T20:28:15.510735Z","title":"Trial and error: Exploration-based trajectory optimization for llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.510735Z"},"links":{"cited_paper":"/paper/2403.02502","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:30d2e278814685a579ef60c9c8595535f75be66ab0f83e6ff32e176775892fd2","observation_id":"90c3a263-49f4-40b1-b414-616d1062a774","resolution":{"observed_at":"2026-08-15T20:28:15.510735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14569","last_updated":"2025-02-03T06:52:55Z","snapshot_observed_at":"2026-08-16T13:07:58.938722Z","submitted_at":"2024-10-18T16:16:34Z","title":"When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14569","snapshot_observed_at":"2026-08-15T20:28:15.514564Z","title":"When llms go online: The emerging threat of web-enabled llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.514564Z"},"links":{"cited_paper":"/paper/2410.14569","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:c3a05be7d7920ad03e665edbd37642df232adaa2bf700ac2b3ae3b8bf0c1091d","observation_id":"d8de09b3-c378-41ce-8c42-f8db2d215efc","resolution":{"observed_at":"2026-08-15T20:28:15.514564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-16T14:15:10.611553Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-15T20:28:15.518527Z","title":"Wipi: A new web threat for llm- driven web agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.518527Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:cd78031072419c73c8b430cdb3d67a645e201e9c178379ce6e8657763686edd6","observation_id":"c66bc859-a7e5-4123-8bfd-f398043d1fb7","resolution":{"observed_at":"2026-08-15T20:28:15.518527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11208","last_updated":"2024-10-29T15:32:04Z","snapshot_observed_at":"2026-08-20T07:41:47.721659Z","submitted_at":"2024-02-17T06:48:45Z","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11208","snapshot_observed_at":"2026-08-15T20:28:15.523978Z","title":"Watch out for your agents! investigating backdoor threats to llm-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.523978Z"},"links":{"cited_paper":"/paper/2402.11208","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:a2faa73e04a61c1681da038643cb2fdf72107201bf5c48f0b1afcd0918161fc8","observation_id":"ab940673-22a3-405a-8801-09b08bd359b6","resolution":{"observed_at":"2026-08-15T20:28:15.523978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-19T20:31:13.864118Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-15T20:28:15.528843Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.528843Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:bc9af5618cc617747e19eec1ae6f9ba3fa04e4401506c42e5fd33d27a28d8081","observation_id":"da1b468c-6fd0-4616-9d8b-231c1a97d3a3","resolution":{"observed_at":"2026-08-15T20:28:15.528843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-20T00:46:45.942018Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-15T20:28:15.532767Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.532767Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:a464382624b4eaa98d5c1907253ee49032982c2c39700b0ba4a18f70a2482ef6","observation_id":"494eb1e6-f899-4489-bfc5-f15213e909f3","resolution":{"observed_at":"2026-08-15T20:28:15.532767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10807","last_updated":"2025-06-12T10:17:02Z","snapshot_observed_at":"2026-08-15T20:23:53.531433Z","submitted_at":"2024-12-14T12:11:26Z","title":"Towards Action Hijacking of Large Language Model-based Agent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10807","snapshot_observed_at":"2026-08-15T20:28:15.536913Z","title":"Towards action hijacking of large language model-based agent,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.536913Z"},"links":{"cited_paper":"/paper/2412.10807","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:ff4e10bbe15974c6c65b20699ae45c46c231a8588269b0bb02c63476678ba14c","observation_id":"d5d8ae3c-194d-47ce-8053-495b49c60c3f","resolution":{"observed_at":"2026-08-15T20:28:15.536913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.05128","last_updated":"2023-02-10T09:17:52Z","snapshot_observed_at":"2026-08-16T15:56:18.890570Z","submitted_at":"2023-02-10T09:17:52Z","title":"Translating Natural Language to Planning Goals with Large-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.05128","snapshot_observed_at":"2026-08-15T20:28:15.541257Z","title":"Translating natural language to planning goals with large-language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.541257Z"},"links":{"cited_paper":"/paper/2302.05128","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:92cc02c113be2af9a367cb2c550493536406aaa17b7c0e149a6588a188ca0c94","observation_id":"9f10c6c6-bf12-4df6-b692-6afbe08173e4","resolution":{"observed_at":"2026-08-15T20:28:15.541257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.519739Z","title":"Large language models versus natural language understand- ing and generation,","venue":null,"work_id":"65191cb6-17d0-4b93-bfc5-134ace17bfc4","year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.545712Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:5ce3228271c7e789f4502eb0a770940e238e6b72402b8a3eb60e24c9324b4fe6","observation_id":"0fa684fa-6d12-4493-b274-52876b7c2d93","resolution":{"observed_at":"2026-08-15T20:28:16.524220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.506969Z","title":"Droidbot: a lightweight ui-guided test input generator for android,","venue":null,"work_id":"a87549a9-144d-482b-8676-6c05eb7c0997","year":2017},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.549157Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:b649d635444b9028e3d8b016350cc2a2502485df01cd5f55bdb8e22ca7b3f9c3","observation_id":"20e42c18-74c7-4068-bc5a-39e0fa51de33","resolution":{"observed_at":"2026-08-15T20:28:16.511567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.494281Z","title":null,"venue":null,"work_id":"0867340c-5a51-419b-8b2d-499162ec5293","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.553559Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:10d489748476731cef7815da5604104bfb13d4c7946aebf819845dacfd178e02","observation_id":"02d806ec-d222-4983-a959-b3d293c405ed","resolution":{"observed_at":"2026-08-15T20:28:16.498610Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.481628Z","title":"Create your own accessibility service,","venue":null,"work_id":"7833c24a-baad-4389-b04e-e1ba1f0304cb","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.557229Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:a8cb38db6abc2d6f195d9a49fcb1a63fe0737965e92c1551feb7018d3d851f2a","observation_id":"b05910a9-f54d-470a-af08-805e9ac62862","resolution":{"observed_at":"2026-08-15T20:28:16.486642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.469547Z","title":"OriginOS,","venue":null,"work_id":"66ac6574-5f5d-4b0c-8341-7017c607eddb","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.562067Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:4894be1d17c04f8c4fdbbe926bb1383043ccc38e79e9dffd3e9db11eaf929e8a","observation_id":"9b66fde0-2bba-42bb-870b-08c00424ae1f","resolution":{"observed_at":"2026-08-15T20:28:16.473491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.456795Z","title":"Android API reference,","venue":null,"work_id":"3f0afc58-275d-4180-887c-ac93506ef8ae","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.566118Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:911392b2f403523d796ff970909017b2abee4569b6b6ef2870d12ec9f04b1aaa","observation_id":"5e409692-1d84-4076-a7b0-9b4718483677","resolution":{"observed_at":"2026-08-15T20:28:16.461013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.16158","last_updated":"2024-04-18T06:53:38Z","snapshot_observed_at":"2026-08-16T13:42:20.592010Z","submitted_at":"2024-01-29T13:46:37Z","title":"Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.16158","snapshot_observed_at":"2026-08-15T20:28:15.569817Z","title":"Mobile-agent: Autonomous multi-modal mobile device agent with visual perception,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.569817Z"},"links":{"cited_paper":"/paper/2401.16158","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:6f40dc475453d3a7b1dbfe0d35a6b9195b09c0a04677cf6452248fcc9fce2a9d","observation_id":"4f718196-e2c6-4f08-95eb-0ec9a1ea0fe8","resolution":{"observed_at":"2026-08-15T20:28:15.569817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.01014","last_updated":"2024-06-03T05:50:00Z","snapshot_observed_at":"2026-08-20T12:29:48.937530Z","submitted_at":"2024-06-03T05:50:00Z","title":"Mobile-Agent-v2: Mobile Device Operation Assistant with Effective Navigation via Multi-Agent Collaboration","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.01014","snapshot_observed_at":"2026-08-15T20:28:15.574068Z","title":"Mobile-agent-v2: Mobile device operation assistant with effective navigation via multi-agent collaboration,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.574068Z"},"links":{"cited_paper":"/paper/2406.01014","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:1abf895f85126b056314f2c45dd6be2a8da913d9cd4e7d57d173d3c78d5b799d","observation_id":"4a23c9e3-87af-4814-b621-f950a0e0c3fe","resolution":{"observed_at":"2026-08-15T20:28:15.574068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.13771","last_updated":"2026-07-05T07:51:04Z","snapshot_observed_at":"2026-08-16T14:32:38.574557Z","submitted_at":"2023-12-21T11:52:45Z","title":"AppAgent: Multimodal Agents as Smartphone Users","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.13771","snapshot_observed_at":"2026-08-15T20:28:15.578147Z","title":"Appagent: Multimodal agents as smartphone users,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.578147Z"},"links":{"cited_paper":"/paper/2312.13771","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:e6b7c9f55542f88b33d628eab7bd59c0f7fb70ebfc3089631280301aedd2b82d","observation_id":"7a201c8b-83b9-4ead-a2fc-098ed3eb7977","resolution":{"observed_at":"2026-08-15T20:28:15.578147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.582230Z","title":"Autodroid: Llm-powered task automation in android,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.582230Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:9add8bf40c23607fcb267eb3d2d3932cf734d0893aa4cae087289c50ad767251","observation_id":"1b669a69-781e-4628-ab56-f0fdb51d27a7","resolution":{"observed_at":"2026-08-15T20:28:15.582230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.07061","last_updated":"2024-01-07T08:23:47Z","snapshot_observed_at":"2026-08-18T15:07:00.006484Z","submitted_at":"2023-04-14T11:31:56Z","title":"DroidBot-GPT: GPT-powered UI Automation for Android","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.07061","snapshot_observed_at":"2026-08-15T20:28:15.585884Z","title":"Droidbot-gpt: Gpt-powered ui automation for android,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.585884Z"},"links":{"cited_paper":"/paper/2304.07061","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:c73feb7596931113991514c2ba50920aecbcf2327fff4850ebe17fc2aeda8144","observation_id":"1bc666bd-498c-40eb-8788-ddf72bd69599","resolution":{"observed_at":"2026-08-15T20:28:15.585884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.438322Z","title":"Grounding dino: Marrying dino with grounded pre-training for open-set object detection,","venue":null,"work_id":"7556aef5-93e7-444c-99e6-2c65d9951271","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.589783Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:cbf6e5ad9fb1406e3b8f7806262ca113e47617f75709c0895d3e02c09f91cc84","observation_id":"3f5ffa76-3f9a-434d-84b5-a95f043a6bfa","resolution":{"observed_at":"2026-08-15T20:28:16.442685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.426218Z","title":"Write automated tests with UI Automator,","venue":null,"work_id":"3eeb7b93-4bbe-4cfa-9633-b6bbfbb740c6","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.593370Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:4249c51037831a3f5787c8e99a650b0e4b5775a2ecc1bf3adc643eb59af1580d","observation_id":"09b8ba84-0319-4d86-9eb7-afbefbba0689","resolution":{"observed_at":"2026-08-15T20:28:16.430588Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.413204Z","title":"Android Debug Bridge (adb) ,","venue":null,"work_id":"76073096-f135-420b-812c-0bcaaf998502","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.597002Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:96c2aa247aa95b769a0452b2475ec41b540d1b2420dd61d373cfa3bf5cfd07b7","observation_id":"274e3c43-4b4f-4be1-9b1d-b6e9cff2fcd1","resolution":{"observed_at":"2026-08-15T20:28:16.418097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.600957Z","title":"Optimization-based prompt injection attack to llm-as-a-judge,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.600957Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:419b7c9586febe663308a65a83de92fe62b0f0c03c8e8e1fc1a84ca97ca01ea4","observation_id":"3a8033bc-23ee-4921-b5af-eab63372d490","resolution":{"observed_at":"2026-08-15T20:28:15.600957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.604854Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.604854Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:b90fa9d06a72e98563030224b10699e62286f55eaf90a617ff420e4989e6163e","observation_id":"b1f00ae2-781b-4f72-abab-92af79eb4b69","resolution":{"observed_at":"2026-08-15T20:28:15.604854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.608465Z","title":"” do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.608465Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:fa9d59cf6fc7bc3d3409e6871c6e8f6511267913415aed1ee4de30e9154e301e","observation_id":"ff7fb288-4790-49d3-b453-fc9db4b7f447","resolution":{"observed_at":"2026-08-15T20:28:15.608465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.378541Z","title":"{LLM-Fuzzer}: Scaling assessment of large language model jailbreaks,","venue":null,"work_id":"3759c30e-9b0d-4a24-9d86-fed52ede0d50","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.612274Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:9cd9ab91209220f3917ff7f78f8c0f8a1c0ac0f3194cd9f233bcdacf723b4833","observation_id":"42e77b37-bf50-44f5-8285-3f7ac23c551d","resolution":{"observed_at":"2026-08-15T20:28:16.382495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.616010Z","title":"Don’t listen to me: understanding and exploring jailbreak prompts of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.616010Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:39507c3d74a3b139a5a20d3afc1dbdf2851e7a7a317bdb47fc62fb38798d2316","observation_id":"e3a488a9-08e4-4e83-be21-3303c73d6a5e","resolution":{"observed_at":"2026-08-15T20:28:15.616010Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.361854Z","title":"An {LLM-Assisted}{Easy-to-Trigger} backdoor attack on code completion models: Injecting disguised vulnerabilities against strong detection,","venue":null,"work_id":"dc910c39-23fe-4232-aeaf-8c66102a035d","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.619649Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:3de827cfded4411f0b9fed187fcf19723dd92ca29f67ae409fbfaa9f31f7043a","observation_id":"f3460d6b-5fbb-4bf6-82e9-5ef7a87e7e05","resolution":{"observed_at":"2026-08-15T20:28:16.365697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.623317Z","title":"Instruction backdoor attacks against customized {LLMs},","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.623317Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:30858ae274729bb5b4da6765cb433f0cca1ab94e10acdece3b2c8b1ad36d9b7b","observation_id":"32a47015-a569-4aa5-b50b-7ec3950d7610","resolution":{"observed_at":"2026-08-15T20:28:15.623317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.344868Z","title":"Glitch tokens in large language models: Categorization taxonomy and effective detection,","venue":null,"work_id":"4a4afce4-f4ff-424e-b208-8cba7a321c23","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.626468Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:88c600ecaf1e7487bf51c24cd53d1b87843104b67753a17fdec11ec335a34548","observation_id":"be98797b-fa49-4604-9f72-c75ad89cd367","resolution":{"observed_at":"2026-08-15T20:28:16.348550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.334963Z","title":"Glitchprober: Advancing effective detection and mitigation of glitch tokens in large language models,","venue":null,"work_id":"0172a93c-99ec-4ebb-8f1e-b5e0771c83ff","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.630415Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:830ec1d3325440bbda00f15cce838ce622153b159a4bb52f42ae6933132fe7ab","observation_id":"40c2c32d-61ab-499e-a9ba-7d420c2898c2","resolution":{"observed_at":"2026-08-15T20:28:16.338541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.323544Z","title":"Ui obfuscation and its effects on automated ui analysis for android apps,","venue":null,"work_id":"ab272caf-8f1f-44e8-aeb9-8c771315281a","year":2020},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.633841Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:948a7c205c26e118bc25f6add3189575297abbabe8bd8c24a17e14f7115b6ef4","observation_id":"62ad4760-e87e-4304-9783-1806d5498815","resolution":{"observed_at":"2026-08-15T20:28:16.328239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.312573Z","title":"Detecting mobile application spoofing attacks by leveraging user visual similarity perception,","venue":null,"work_id":"463f6fc5-faae-43d9-98f2-e8e11b92f92e","year":2017},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.637357Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:7b2ac144f214ef5cba0b460163f398d924029a8a1416d28ef62889c2fddf069e","observation_id":"4227b7ab-826c-4c79-bc27-a8da5b8e146d","resolution":{"observed_at":"2026-08-15T20:28:16.316358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.299959Z","title":"Android ui deception revisited: Attacks and defenses,","venue":null,"work_id":"2bebf5c4-9d20-4230-b039-64c8f34dc35b","year":2016},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.640958Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:4ff1eee180292d19e164bbaf43e45a5565c14515d8712a803a2db52368c4bbf6","observation_id":"f1c757a8-4830-4704-9c09-b367060994a7","resolution":{"observed_at":"2026-08-15T20:28:16.304337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.284317Z","title":"Android ui deception revisited: Attacks and defenses,","venue":null,"work_id":"629f2c1a-4ff3-4afa-ad3a-49eb200b7c79","year":2016},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.644616Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:98663a132ae5dca4eaa3b2fe33f6a720cc9a4f042986a79bc4d0ce66c566e9ac","observation_id":"6f5d1b4c-fef7-4b20-92c4-590194f84cd6","resolution":{"observed_at":"2026-08-15T20:28:16.292635Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.271351Z","title":"Trapped by the ui: The android case,","venue":null,"work_id":"1de78222-f734-49c4-909c-fa862257fdb8","year":2017},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.647926Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:5ba94265c910c7ffbb53d899fba5d673e906111d839c76f6e1ec506600015f3f","observation_id":"725fe291-9228-409d-9280-f058a87c1d73","resolution":{"observed_at":"2026-08-15T20:28:16.276640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.260362Z","title":"Understanding and detecting overlay-based android malware at market scales,","venue":null,"work_id":"0aeef297-a1f1-4d71-86cb-eb61e70013ae","year":2019},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.651314Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:1c903735d92c3bc010a0b57a410168a7e83fbabe4c70b17d220767eceef36015","observation_id":"ffb6febc-83a2-4217-adc1-64c011e5dd59","resolution":{"observed_at":"2026-08-15T20:28:16.264079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.248974Z","title":"Uncovering intent based leak of sensitive data in android framework,","venue":null,"work_id":"0d8316fc-05f1-4ed0-a1b0-e5429e51240c","year":2022},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.654857Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:a5286b376221892e927dcb4d8018b351322aba3e359d66477805f1a30c2aeaa2","observation_id":"0d4b1e30-1493-481a-8e4f-3d411b059650","resolution":{"observed_at":"2026-08-15T20:28:16.252857Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.237863Z","title":"Improving android ap- plication security for intent based attacks,","venue":null,"work_id":"faffa9a5-b6a5-4554-b8f2-110e97a733df","year":2017},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.658445Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:7430c5273de4c95eaaa055aff42b40a747d01d3fb3386dd2769e2397732ed3f8","observation_id":"03fbb4d0-1d8c-45cd-9b16-25d6630acf90","resolution":{"observed_at":"2026-08-15T20:28:16.242149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.225609Z","title":"All your app links are belong to us: understanding the threats of instant apps based attacks,","venue":null,"work_id":"a5dda743-f1e7-4c35-9cb7-79228860dd6f","year":2020},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.662214Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:33a786088fcbc5ee0190c17974ac3aadfcdf0e54d01a1d88804f4aa7a5605a56","observation_id":"394f7f91-bfcd-4f98-9fec-aa98c621edbd","resolution":{"observed_at":"2026-08-15T20:28:16.229795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.214373Z","title":"Measuring the insecurity of mobile deep links of android,","venue":null,"work_id":"a1b93d4b-81a3-46fa-853e-9f175010c9f9","year":2017},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.665747Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:17458415526f54aa942bfb3b37e9da44f16b01a8678d6d9063966ab185a714d7","observation_id":"5c04e7da-0152-40f4-80e5-96506681d227","resolution":{"observed_at":"2026-08-15T20:28:16.218243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.201096Z","title":"Born with a silver spoon: On the (in) security of native granted app privileges in custom android roms,","venue":null,"work_id":"243e5f00-a662-4635-ad37-13303fbd3682","year":2025},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.669095Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:818d615b3e3798993146fd05797c128c56886295a0ba8befd1718a1938c86eb9","observation_id":"053b905b-7910-4dff-aea8-eccced59d0a5","resolution":{"observed_at":"2026-08-15T20:28:16.206509Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.188898Z","title":"From logging to leakage: A study of privacy leakage in android app logs,","venue":null,"work_id":"b3ef2a93-b5b4-4708-8d39-ec340289d6d5","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.672997Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:470974c45a0a581c674201e1db77c5e11469ababb7eeb8a2d4d9a92ac8e285fb","observation_id":"766d1b52-57ae-46b0-ad1b-5068891351a9","resolution":{"observed_at":"2026-08-15T20:28:16.193395Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.176741Z","title":"A comprehensive study of privacy leakage vulnerability in android app logs,","venue":null,"work_id":"232b70df-68c5-42f1-bf58-ed9224a39b10","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.676732Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:27a05850d458b08f563245f7254df30f768f6800f87dae759bc0dfa8578f15ed","observation_id":"ea8b86cd-303f-4ae9-96c5-3ccdbf14cfa4","resolution":{"observed_at":"2026-08-15T20:28:16.181163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15287","last_updated":"2024-11-22T16:56:49Z","snapshot_observed_at":"2026-08-14T06:45:48.797717Z","submitted_at":"2024-11-22T16:56:49Z","title":"Sycophancy in Large Language Models: Causes and Mitigations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15287","snapshot_observed_at":"2026-08-15T20:28:15.680312Z","title":"Sycophancy in large language models: Causes and mitigations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.680312Z"},"links":{"cited_paper":"/paper/2411.15287","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:bb36fdef7718fe28736f47bc338b5c18df1857796d93fd42ca6140a5ce357cbf","observation_id":"6c49d21e-223a-43e7-9924-9dc18488319f","resolution":{"observed_at":"2026-08-15T20:28:15.680312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03958","last_updated":"2024-02-15T01:03:13Z","snapshot_observed_at":"2026-08-16T05:30:15.258663Z","submitted_at":"2023-08-07T23:48:36Z","title":"Simple synthetic data reduces sycophancy in large language models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03958","snapshot_observed_at":"2026-08-15T20:28:15.684426Z","title":"Simple synthetic data reduces sycophancy in large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.684426Z"},"links":{"cited_paper":"/paper/2308.03958","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:1b2a13981ca9d9907ef38a1fe6b41942228bdc2dd45d5586b5178fcd5a421eb2","observation_id":"374080c3-0f1f-4202-99ed-914d34b55aaa","resolution":{"observed_at":"2026-08-15T20:28:15.684426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13548","last_updated":"2025-05-10T07:10:46Z","snapshot_observed_at":"2026-08-14T16:46:25.561386Z","submitted_at":"2023-10-20T14:46:48Z","title":"Towards Understanding Sycophancy in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13548","snapshot_observed_at":"2026-08-15T20:28:15.688950Z","title":"Towards understanding sycophancy in language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.688950Z"},"links":{"cited_paper":"/paper/2310.13548","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:b0e7e56cf92d2d7a33dfc51634032fc1536a2c07a2bae88d3f640474f949ea40","observation_id":"44a931f0-d291-419b-bea9-dc7ccf511792","resolution":{"observed_at":"2026-08-15T20:28:15.688950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.163607Z","title":"An- droidinthewild: A large-scale dataset for android device control,","venue":null,"work_id":"314ad928-9416-4179-a237-48d134d236af","year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.692918Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:b6a2da02cecb32f0476ab69d2e9bf6ddb984c49d815ef21c5e89e803c0b285a5","observation_id":"8ec1d1ad-cdd9-4628-ba75-0d56b58a67ec","resolution":{"observed_at":"2026-08-15T20:28:16.168305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.16888","last_updated":"2024-04-03T05:53:20Z","snapshot_observed_at":"2026-08-18T22:15:02.314738Z","submitted_at":"2023-07-31T17:56:00Z","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.16888","snapshot_observed_at":"2026-08-15T20:28:15.696494Z","title":"Backdooring instruction-tuned large language models with virtual prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.696494Z"},"links":{"cited_paper":"/paper/2307.16888","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:1d65c51330cde4e2072a69fba37751e6ba577ca32057818b52035d86599482f8","observation_id":"83268e89-bd71-4d98-aa78-ae2c38df0aa5","resolution":{"observed_at":"2026-08-15T20:28:15.696494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02532","last_updated":"2024-04-03T07:43:11Z","snapshot_observed_at":"2026-08-16T14:04:02.866865Z","submitted_at":"2024-04-03T07:43:11Z","title":"Learn to Disguise: Avoid Refusal Responses in LLM's Defense via a Multi-agent Attacker-Disguiser Game","version":1},"cited_work":{"arxiv_id":"2404.02532","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.02532","snapshot_observed_at":"2026-08-15T20:28:15.918507Z","title":"Learn to Disguise: Avoid Refusal Responses in LLM's Defense via a Multi-agent Attacker-Disguiser Game","venue":"cs.AI","work_id":"8736523c-1fff-426d-a63c-f55909800b30","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.700106Z"},"links":{"cited_paper":"/paper/2404.02532","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:ce7d39607e14255f5d4696e99c24e01c06c06f080a43323637b0120d1bb5006c","observation_id":"de76ec75-0626-46b9-8d9c-f8b13b90315e","resolution":{"observed_at":"2026-08-15T20:28:15.924686Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.703713Z","title":"Role play with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.703713Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:7a353e2a781a7e8a6b570872c375de3be9ba1a88433452dcd65bb1d97d02265e","observation_id":"8b086e51-5a8c-4832-b089-acdd56d1a6bb","resolution":{"observed_at":"2026-08-15T20:28:15.703713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-12T17:45:10.384900Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.04295","snapshot_observed_at":"2026-08-15T20:28:15.707065Z","title":"Jail- break attacks and defenses against large language models: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.707065Z"},"links":{"cited_paper":"/paper/2407.04295","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:61e7d9ce44ccff5b805e0b69a9a4aa9d3e34e51b0729081915bb4b1e1e90c048","observation_id":"cdd899c0-d216-4dd2-bbbb-7f4a6cf82d8c","resolution":{"observed_at":"2026-08-15T20:28:15.707065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:16.144228Z","title":"Visiontasker: Mobile task automation using vision based ui understanding and llm task planning,","venue":null,"work_id":"58d01db0-3d86-4963-9c8e-4a060f5f66b7","year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.710469Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:25329263a2d9b219debfae1c85f9be95ec2150176d148599c2316af769c82324","observation_id":"246cf483-2772-4db7-b0d5-a60017ef997d","resolution":{"observed_at":"2026-08-15T20:28:16.148542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11941","last_updated":"2024-06-02T13:25:05Z","snapshot_observed_at":"2026-08-16T14:17:26.167952Z","submitted_at":"2024-02-19T08:29:03Z","title":"CoCo-Agent: A Comprehensive Cognitive MLLM Agent for Smartphone GUI Automation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11941","snapshot_observed_at":"2026-08-15T20:28:15.713601Z","title":"Comprehensive cognitive llm agent for smartphone gui automation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.713601Z"},"links":{"cited_paper":"/paper/2402.11941","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:40a0653430f823c92174b4e0b0a876f5165b646e2ada2421dfa6862a866e9b9e","observation_id":"f1e1e46b-17b9-47e0-8f4c-92ba90b6df08","resolution":{"observed_at":"2026-08-15T20:28:15.713601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T20:28:15.717237Z","title":"Appagent v2: Advanced agent for flexible mobile interactions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.717237Z"},"links":{"citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:b086302ec775b16e5e07abf71eb8023b2b1d26399cbf9fe6d37af490ecf797b5","observation_id":"69f1c056-8462-48f2-8ede-907a72d98987","resolution":{"observed_at":"2026-08-15T20:28:15.717237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.00993","last_updated":"2024-07-01T06:10:01Z","snapshot_observed_at":"2026-08-16T13:38:15.680050Z","submitted_at":"2024-07-01T06:10:01Z","title":"Mobile-Bench: An Evaluation Benchmark for LLM-based Mobile Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.00993","snapshot_observed_at":"2026-08-15T20:28:15.721141Z","title":"Mobile-bench: An evaluation benchmark for llm-based mobile agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.721141Z"},"links":{"cited_paper":"/paper/2407.00993","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:0d3343bf70f87a5381842b4858aa6aca5fc9df6e84b5229fdbc9f7e61ca6a06b","observation_id":"542e086c-a4d9-41a8-9bc9-e9ed69b80e83","resolution":{"observed_at":"2026-08-15T20:28:15.721141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08184","last_updated":"2024-06-12T13:14:50Z","snapshot_observed_at":"2026-08-16T13:43:45.903326Z","submitted_at":"2024-06-12T13:14:50Z","title":"MobileAgentBench: An Efficient and User-Friendly Benchmark for Mobile LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.08184","snapshot_observed_at":"2026-08-15T20:28:15.724673Z","title":"Mobileagentbench: An efficient and user-friendly benchmark for mobile llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.724673Z"},"links":{"cited_paper":"/paper/2406.08184","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:84ab72b9849e55bd74afafcb144b0d4f0d604d3bd017650c15d1059ded0ce69a","observation_id":"0bbe92f2-0629-4b82-bf90-6bc58020dfb7","resolution":{"observed_at":"2026-08-15T20:28:15.724673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07939","last_updated":"2024-05-23T05:18:58Z","snapshot_observed_at":"2026-08-18T14:41:50.057065Z","submitted_at":"2024-02-08T15:40:35Z","title":"UFO: A UI-Focused Agent for Windows OS Interaction","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07939","snapshot_observed_at":"2026-08-15T20:28:15.728331Z","title":"Ufo: A ui-focused agent for windows os interaction,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.728331Z"},"links":{"cited_paper":"/paper/2402.07939","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:cd26a42463ee63f738b73fd77a3e0cb1630bdb1e102c91dd10d988196f029935","observation_id":"772e8640-5c0a-4d47-b2cd-beeddf026b6b","resolution":{"observed_at":"2026-08-15T20:28:15.728331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07945","last_updated":"2024-02-09T02:33:45Z","snapshot_observed_at":"2026-08-16T14:20:01.793685Z","submitted_at":"2024-02-09T02:33:45Z","title":"ScreenAgent: A Vision Language Model-driven Computer Control Agent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07945","snapshot_observed_at":"2026-08-15T20:28:15.732395Z","title":"Screenagent: A vision language model-driven computer control agent,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.732395Z"},"links":{"cited_paper":"/paper/2402.07945","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:836c74457c5eaa2906c499f1d6e65d22227b662fdd88f1e41931f1b2081da233","observation_id":"77f1591b-9d68-45c9-8afa-a0589bd56f6b","resolution":{"observed_at":"2026-08-15T20:28:15.732395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08264","last_updated":"2024-09-13T20:17:13Z","snapshot_observed_at":"2026-08-20T04:44:03.331291Z","submitted_at":"2024-09-12T17:56:43Z","title":"Windows Agent Arena: Evaluating Multi-Modal OS Agents at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.08264","snapshot_observed_at":"2026-08-15T20:28:15.736267Z","title":"Windows agent arena: Evalu- ating multi-modal os agents at scale,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.736267Z"},"links":{"cited_paper":"/paper/2409.08264","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:e0545abf887cf8123b6700016e9194a5aec199e8cdea157a9e5e48d4f9190b48","observation_id":"0e437ce2-42e0-4020-b1e2-ce6696ae78fa","resolution":{"observed_at":"2026-08-15T20:28:15.736267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":37,"verified_exact":1,"verified_fuzzy":33},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 3 inbound Pith citation observations for arXiv:2505.12981."}