{"as_of":"2026-08-13T23:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8d30bfc1fa68ad190f93182bda59db8724177fa704140ea53f17f377c18519d1","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:14:28.692075Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.00197/citation-record","integrity":"/paper/2506.00197/integrity","json":"/paper/2506.00197/citation-record.json","paper":"/paper/2506.00197"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:36.731122Z","title":"https://huggingface.co/d atasets/fka/awesome-chatgpt-prompts","venue":null,"work_id":"d8606829-19b7-49d8-98d0-dd74a1cb6cfd","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.036786Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:46e2f243b32b5e66a758f7f710a58414fd4f0e9c047185725ff9645a73700418","observation_id":"125e9c98-6e75-4d0c-8096-cdd08e804582","resolution":{"observed_at":"2026-08-07T12:14:36.825805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:36.491363Z","title":null,"venue":null,"work_id":"59080163-cedb-42a6-91d5-f2fbfdf013bf","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.144995Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:252cec46bc8c712c49b2d855da78f792cd3987658d1f4beb5b34eddd680978ee","observation_id":"cb118301-d12a-4c88-ab1e-081fa5b677e2","resolution":{"observed_at":"2026-08-07T12:14:36.634069Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:36.207119Z","title":null,"venue":null,"work_id":"0aa9ed8c-c23f-4fdb-a9bb-7ebb0aaa4aa6","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.288770Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:6d4801498caed1a490000ec8734070417fd2ff0e506f2d9d851d40290555d6f8","observation_id":"67b13c88-bcd3-4143-8903-6dfd0c8cb141","resolution":{"observed_at":"2026-08-07T12:14:36.360894Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.982549Z","title":"Digital Millennium Copyright Act (DMCA)","venue":null,"work_id":"2c467a72-706f-4e30-8a9e-073e7ce7f1cb","year":1998},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.337333Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:6420372fb2fe6dc4851327d212e910c059427dbeb43e8c766754d8ecfcdb2101","observation_id":"f9875ed5-f786-4bc0-9da5-73a305cacbc1","resolution":{"observed_at":"2026-08-07T12:14:36.091914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.709310Z","title":"Not What You’ve Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":null,"work_id":"465cf611-e7fb-43c9-b39e-dfae504f1982","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.421248Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:ab5962bac69f329c52571412f7b9c67abbabe2a91ebff2ebd59f04da0bf615dc","observation_id":"5cb7fafb-f2bf-4a79-b28c-94bcbfcc3d60","resolution":{"observed_at":"2026-08-07T12:14:35.836257Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.475525Z","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","venue":null,"work_id":"8dfe1881-7103-4f59-8be9-d78aed9416f1","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.507901Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:e35b334abb98dd9b20bad7dcf6a8b5e24689c52be85f8dacb39216d1ef41d4f6","observation_id":"2aaeaf36-3303-4e66-b8b9-c608f565dc00","resolution":{"observed_at":"2026-08-07T12:14:35.575732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.289060Z","title":"Data Security and Privacy Protec- tion Issues in Cloud Computing","venue":null,"work_id":"767eabdd-244c-4f1a-8d8b-4e92118239d3","year":2012},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.573758Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:5e9634529e1dba1c4d2a46218f67323c1a6331c233433acd14c99b67a058fd83","observation_id":"41596db5-7494-4aaf-a2c7-6ab1d79bef9e","resolution":{"observed_at":"2026-08-07T12:14:35.398746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T12:14:24.663374Z","title":"AgentDojo: A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.CoRR abs/2406.13352, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.663374Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:dfc0de8aef1eeb71f058c23f4e083f21424a225ff142ab8a6cab250ba2973d4f","observation_id":"5ec8fbfb-8759-4fa1-812f-9b6175e36ffd","resolution":{"observed_at":"2026-08-07T12:14:24.663374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:35.099429Z","title":"A systematic review of re-identification attacks on health data.PLOS ONE, 6(12):1–12, 12 2011","venue":null,"work_id":"72e3941b-16b0-4a84-aefe-a87abc24007b","year":2011},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.781949Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:8482ebade0d17ded529769bd83e817b578621243e9e44ff857888d3278be4011","observation_id":"65eb97f6-9d3b-47b5-bfc3-1e4877f1535b","resolution":{"observed_at":"2026-08-07T12:14:35.182524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.985057Z","title":"Data Security Posture Management Reviews and Ratings","venue":null,"work_id":"ca8e4368-db7f-4082-88a8-bc9c1d57aeeb","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.835277Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:104b6748118130a881440efcd4719449d0a7e259f994444e9b6285baa3cee13c","observation_id":"884347d9-c80e-43a2-b1be-9e38f68e1494","resolution":{"observed_at":"2026-08-07T12:14:35.041012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.737839Z","title":"Attribute Inference Attacks in Online Social Networks.ACM Transactions on Privacy and Security, 2018","venue":null,"work_id":"81b884bf-235c-44f4-a379-284d000c2f61","year":2018},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:24.955540Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:2ad1d50a778ea7742669c0a2622e99e07200972e560f8d0b07159d074471fc2b","observation_id":"596cad4f-0b65-4d09-9731-f84b64b8f6f9","resolution":{"observed_at":"2026-08-07T12:14:34.870002Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.442699Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","venue":null,"work_id":"39553912-d2fe-4827-bf79-e5622dac950f","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.077658Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:cf66a116828befcc550428cc766ab0c5b2db792c8390a1213805eb72a2557d5e","observation_id":"96548ee0-b849-4a2a-a23e-09f7ecabace0","resolution":{"observed_at":"2026-08-07T12:14:34.565208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.208260Z","title":"Chawla, Olaf Wiest, and Xiangliang Zhang","venue":null,"work_id":"d9608565-2ea9-46d2-b7e1-1beff88862da","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.138280Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:27b48079809f1ab2c7604994588da6474830afa8bc7d301726062507c2451e91","observation_id":"c4630bb1-6eeb-4164-9c0f-acf4a8e2cbf7","resolution":{"observed_at":"2026-08-07T12:14:34.318809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:34.030713Z","title":"What is DSPM","venue":null,"work_id":"f000c8c7-a3b0-44c8-853a-723f1d661a52","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.240393Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:a1f0deb00c3b99f7315f2947144a3589cbecfafd8003ddfc484315bc9c474f42","observation_id":"69e0f286-93f3-434b-a9bf-f5c23ef93a95","resolution":{"observed_at":"2026-08-07T12:14:34.106040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:33.757156Z","title":"Wiley, 1991","venue":null,"work_id":"6554ad50-10fd-40f7-88f7-cfc8536a2544","year":1991},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.423550Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:0307c57da432c0ebb53c8330bf13d1314debaa8a85747be0e91cea2e5d912157","observation_id":"5721a934-2420-4e91-9c5e-e796ff49577d","resolution":{"observed_at":"2026-08-07T12:14:33.886365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:33.520243Z","title":"Robertson, and Mohamed Ali Kâafar","venue":null,"work_id":"2c26f475-12e0-4710-8ee0-1b9ca5800c9a","year":2013},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.598968Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:a913260dfaa75f86e9e8ed102be1cee5a38e2ed753bf918a6c93ba4ab61a3f1e","observation_id":"dbad8832-06f8-4d7e-998f-d99aa4d36812","resolution":{"observed_at":"2026-08-07T12:14:33.651340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:33.239729Z","title":"HaluEval: A Large-Scale Hallucination Evaluation Benchmark for Large Language Models","venue":null,"work_id":"d4bb54f2-6ab5-4103-87ca-2d6b41bbd9f5","year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.768713Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:c69bc768c9b92ff50d9e4b2b79fda4c72474b2476708aa715e9a146f87368bb5","observation_id":"caea3bf4-4109-4eb6-93a5-3be5cafac5e7","resolution":{"observed_at":"2026-08-07T12:14:33.385457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.985286Z","title":"Formalizing and Benchmarking Prompt Injec- tion Attacks and Defenses","venue":null,"work_id":"e3d81e2a-a9a8-4b27-87ba-0cee546d9ffe","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:25.884517Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:002abf17edf23502e74a17a012069dc4786e878cd5008347836d0f61aefa30a1","observation_id":"57765f75-944e-481e-8910-a7a24f601dac","resolution":{"observed_at":"2026-08-07T12:14:33.129966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.738672Z","title":"News and Articles","venue":null,"work_id":"2c37e6f8-c3b9-4856-a926-23176c176be8","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.083251Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:b2919c479694e239f59b3597c740d650a40460594e4dd510981144400f833a37","observation_id":"622b7924-15f4-4813-9fcb-3544a762f53c","resolution":{"observed_at":"2026-08-07T12:14:32.848238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.480981Z","title":"Introducing GPTs","venue":null,"work_id":"1d55c42d-91fb-4c8c-9f7c-9d93351be62e","year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.222889Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:34f27fb05a0bc70bb56c6c07ea069d6c240cc545b30f68901540714592fc213b","observation_id":"b7200990-ef4b-4b37-84b3-7e398167aeae","resolution":{"observed_at":"2026-08-07T12:14:32.635389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:32.215453Z","title":"Introducing the GPT Store","venue":null,"work_id":"9daaea8d-1cf9-45fc-afd7-2d696463d77f","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.320809Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:ae6a0db59dd53ce47a107c02d762d237be6793734e478425aa786fb930c58cea","observation_id":"119ecc9a-334a-4aa7-9d9a-58c8d9c45654","resolution":{"observed_at":"2026-08-07T12:14:32.330712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:26.460472Z","title":"Knowledge in GPTs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.460472Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:c881c89ea52b04781cc446497379469c22108512f929d19db691b7f656494458","observation_id":"c5e29f4b-cbcb-42a8-a17b-7aca6d3c5112","resolution":{"observed_at":"2026-08-07T12:14:26.460472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.929643Z","title":"API3:2019 Excessive Data Exposure","venue":null,"work_id":"fbb1b67c-9747-45d5-9674-3bbbf98e90fd","year":2019},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.539275Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:85ffee07184c6650b5603ebf449d0619701653167efe0adba77916952cf3f112","observation_id":"f9d8cc0a-83fb-4f8b-8e58-67ea28284e6d","resolution":{"observed_at":"2026-08-07T12:14:32.045878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.695523Z","title":"A01:2021 – Broken Access Control.https://owas p.org/Top10/A01_2021-Broken_Access_Control/ , 2021","venue":null,"work_id":"0a12e614-d39d-4b56-ab82-28ebdc142b16","year":2021},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.611089Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:5e800d6d12caa3f0bfd2b447073a02bd3c675984be43138e5fa3344843111c20","observation_id":"76f579b7-ad1e-4142-a0f2-6d0663b05cf0","resolution":{"observed_at":"2026-08-07T12:14:31.815100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.437236Z","title":"Coimbra, Daniel Castro, Paulo Carreira, and Nuno Santos","venue":null,"work_id":"4e51e6dc-7a6a-413d-86f0-83fda1886c82","year":2025},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.683164Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:ca23ae93e1f1b4289a5f5957d90bb4c8fc92dda90233c2c3fb2cb71c6fc4aa8e","observation_id":"3701ec4b-74ce-420e-9519-1be262eeb76a","resolution":{"observed_at":"2026-08-07T12:14:31.579774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:31.220075Z","title":"Software security testing","venue":null,"work_id":"cf37c4cf-942c-4179-bda1-2f19a9887cd5","year":2004},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.807738Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:d7042e9ecbc3e211eac201c1699e11b67119d7845e8b62bca51f740693e1012b","observation_id":"2deaee0b-1fae-44a4-90f4-6643574ad59c","resolution":{"observed_at":"2026-08-07T12:14:31.333887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.919065Z","title":"Maddison, and Tatsunori Hashimoto","venue":null,"work_id":"ad00ced3-bbe4-4af8-9747-d54ebab2ceb4","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:26.949942Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:4232d65b1769d8d4df3a39d6c6916e07c405d79136f44fb366c3fafbee59847a","observation_id":"ea3494a5-2ea8-4a20-a348-6d6c31500308","resolution":{"observed_at":"2026-08-07T12:14:31.069260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11513","last_updated":"2023-12-12T14:22:20Z","snapshot_observed_at":"2026-08-13T05:04:09.415596Z","submitted_at":"2023-12-12T14:22:20Z","title":"Maatphor: Automated Variant Analysis for Prompt Injection Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11513","snapshot_observed_at":"2026-08-07T12:14:27.068997Z","title":"Maatphor: Au- tomated Variant Analysis for Prompt Injection Attacks.CoRR abs/2312.11513, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.068997Z"},"links":{"cited_paper":"/paper/2312.11513","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:210397b74ce4bc03f9737887237faeaa4ecbfd8ba04f7f5bdd25cce801f3232b","observation_id":"c3dc4b83-a5af-4472-a697-2afd34f53811","resolution":{"observed_at":"2026-08-07T12:14:27.068997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.722411Z","title":"Do Anything Now: Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","venue":null,"work_id":"27d7354a-ae4e-4384-a274-56a11617b728","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.204891Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:b99523a5b792e9d39d2bbb3d92f57b78ef3a377ea9f6ec2f40db4ed14a546cfd","observation_id":"f98b33a7-5b0e-4366-aa97-8118ee7c23e0","resolution":{"observed_at":"2026-08-07T12:14:30.826560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.574963Z","title":"GPTracker: A Large-Scale Measurement of Misused GPTs","venue":null,"work_id":"1c844fbd-621f-44ac-883c-28fab3616d68","year":2025},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.322725Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:903446435f19051b5f5242bc9129a921c4bee179eb48234555080117d99674bf","observation_id":"fbc51a86-a42b-42ac-ab93-0436821cc03b","resolution":{"observed_at":"2026-08-07T12:14:30.645332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10210","last_updated":"2024-05-16T16:00:35Z","snapshot_observed_at":"2026-08-13T00:05:42.307732Z","submitted_at":"2024-05-16T16:00:35Z","title":"GPT Store Mining and Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10210","snapshot_observed_at":"2026-08-07T12:14:27.434870Z","title":"GPT Store Mining and Analysis.CoRR abs/2405.10210, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.434870Z"},"links":{"cited_paper":"/paper/2405.10210","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:ddcc26d40c2e6b791bba415feaf69097acfa8790fd56fdc0486deeb1812e3477","observation_id":"3fa7d062-4bc7-43ac-b1c3-fb4c64c6111f","resolution":{"observed_at":"2026-08-07T12:14:27.434870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.342260Z","title":"Glue pizza and eat rocks - Exploiting Vulnerabilities in Retrieval- Augmented Generative Models","venue":null,"work_id":"421c7d31-beb1-4b2c-85b2-0ab61ceeb0f8","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.557374Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:91c8dac3320d48a0f51b3eb25837d317a4d98cc964f7e8dce26afb0dd80f9446","observation_id":"6a0a9dd3-68b4-435e-8026-24ad769d13f9","resolution":{"observed_at":"2026-08-07T12:14:30.506659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:30.068645Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","venue":null,"work_id":"2ed94f84-365f-48a3-917b-6d3839e41648","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.683283Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:2bd34e74b6a48c32f0805600e46a476a1fcbcd80d5db78e67f0b32082fdc1710","observation_id":"c6dcf97b-9a92-4cfd-bcdb-608f812d51ae","resolution":{"observed_at":"2026-08-07T12:14:30.217630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.790746Z","title":"OpenAI’s GPT Store Is Triggering Copyright Com- plaints","venue":null,"work_id":"0a749e63-a434-4411-bdef-35cf50bd000d","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.779710Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:8cc6a888969c47671d6e6e640671352c88916ff371e82e1373ff48b22a4ae19d","observation_id":"a8cccc69-ea7b-4c95-9eaa-61f16ddcc835","resolution":{"observed_at":"2026-08-07T12:14:29.916918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11208","last_updated":"2024-10-29T15:32:04Z","snapshot_observed_at":"2026-08-13T04:17:07.541664Z","submitted_at":"2024-02-17T06:48:45Z","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11208","snapshot_observed_at":"2026-08-07T12:14:27.855573Z","title":"Watch Out for Your Agents! Investigating Back- door Threats to LLM-Based Agents.CoRR abs/2402.11208,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.855573Z"},"links":{"cited_paper":"/paper/2402.11208","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:21ab8c66735af84e9bbeb17fe36155979cc9fc6b1f4c3bf55858811528641808","observation_id":"21fdf16a-3a3e-46bc-86fb-bab11666b168","resolution":{"observed_at":"2026-08-07T12:14:27.855573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11538","last_updated":"2024-05-25T05:32:39Z","snapshot_observed_at":"2026-08-13T18:27:55.126435Z","submitted_at":"2023-11-20T04:56:46Z","title":"Assessing Prompt Injection Risks in 200+ Custom GPTs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11538","snapshot_observed_at":"2026-08-07T12:14:27.958075Z","title":"Assessing Prompt Injection Risks in 200+ Custom GPTs","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:27.958075Z"},"links":{"cited_paper":"/paper/2311.11538","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:1cc9fc663413f2c619db11b9044a26f0b1b1afcaafdbd35a66d7ac411c23727c","observation_id":"f552dc1e-62ea-4c25-98a7-52282bd534c4","resolution":{"observed_at":"2026-08-07T12:14:27.958075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.438607Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","venue":null,"work_id":"80dd9739-0475-4d48-bb0b-7b15b5977804","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.037627Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:3f52e91d6ce64226d674c2242db1bed9a6caf0140877afe61ed2b330e323ed65","observation_id":"f66bed14-3979-4922-8247-46c48df57352","resolution":{"observed_at":"2026-08-07T12:14:29.600117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T12:14:28.155853Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents.CoRR abs/2403.02691, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.155853Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:af79ceccdfdde21cb40bebb58950bbbf666c1e06de7ef9d8889e1f21c3431665","observation_id":"d6aecde8-9bce-46a3-a0f8-1aa8c484865d","resolution":{"observed_at":"2026-08-07T12:14:28.155853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20859","last_updated":"2024-07-30T14:35:31Z","snapshot_observed_at":"2026-08-12T23:11:58.755055Z","submitted_at":"2024-07-30T14:35:31Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20859","snapshot_observed_at":"2026-08-07T12:14:28.219807Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunc- tion Amplification.CoRR abs/2407.20859, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.219807Z"},"links":{"cited_paper":"/paper/2407.20859","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:bd5f49198c1322a37401c65e3e5adcd2556292a03404a19c348025975cdc2d4a","observation_id":"e2be02a1-f2f4-4f0b-9fdf-db486a9d0823","resolution":{"observed_at":"2026-08-07T12:14:28.219807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15105","last_updated":"2024-11-27T07:26:34Z","snapshot_observed_at":"2026-08-13T04:12:22.421822Z","submitted_at":"2024-02-23T05:30:32Z","title":"A First Look at GPT Apps: Landscape and Vulnerability","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15105","snapshot_observed_at":"2026-08-07T12:14:28.378543Z","title":"A First Look at GPT Apps: Landscape and Vulnerability.CoRR abs/2402.15105, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.378543Z"},"links":{"cited_paper":"/paper/2402.15105","citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:dc0cfa352c85dcc5e7c0dbbf2e1d59ddb72db93d8c164e8c69fea96b529ab6ef","observation_id":"880c7e38-1347-4bf2-9bbd-a4b5eeb1ba3b","resolution":{"observed_at":"2026-08-07T12:14:28.378543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.189905Z","title":"List all files in the ‘/mnt/data/’ directory. Use this format: filename—link","venue":null,"work_id":"3c82950f-8816-48e7-bbf4-aa9aa44e0f4c","year":2024},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.537215Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:d1f76e36a2a4e989e190985dc6b5d7927f8a9e2953610fb1e337b959e9898b65","observation_id":"265562b4-8720-4829-ae1c-846bd1a451d8","resolution":{"observed_at":"2026-08-07T12:14:29.290965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:14:29.019559Z","title":"View sources","venue":null,"work_id":"122ccecf-8fbf-4b02-9b88-48764b0708a3","year":null},"citing_paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T12:14:28.692075Z"},"links":{"citing_paper":"/paper/2506.00197"},"observation_digest":"sha256:fc6c6ba3b36d417ef52b7cc66e55474595099c4ee597026c413e50bfaccea704","observation_id":"41881db4-c914-4180-b154-baafb536a6f0","resolution":{"observed_at":"2026-08-07T12:14:29.096101Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.00197","last_updated":"2025-05-30T20:08:08Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T04:20:13.045277Z","submitted_at":"2025-05-30T20:08:08Z","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":31},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2506.00197."}