{"as_of":"2026-08-22T12:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:789445ea3add6d8e2fa52f9f0de85eff621e6e3ccdaebd78ea383de34fdb3c09","coverage":[{"denominator":69,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":69,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:06:29.178864Z","state":"measured"},{"denominator":79,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":79,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T15:46:06.025109Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T10:15:44.749818Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-08-06T15:30:41.349884Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15759","last_updated":"2025-07-21T16:15:18Z","snapshot_observed_at":"2026-08-13T23:36:20.086860Z","submitted_at":"2025-07-21T16:15:18Z","title":"Interaction as Intelligence: Deep Research With Human-AI Partnership","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-06T15:30:41.349884Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2507.15759"},"observation_digest":"sha256:6674fa6e8ce956769b998d72f04ffa61476133e9d619b9af31c65d13f2ddc1e7","observation_id":"e1f0af57-0761-4a52-8269-243c52467e34","resolution":{"observed_at":"2026-08-06T15:30:41.349884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-08-06T13:06:39.600377Z","title":"Riosworld: Benchmarking the risk of multimodal compter-use agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21017","last_updated":"2025-07-28T17:38:29Z","snapshot_observed_at":"2026-08-19T10:24:11.476818Z","submitted_at":"2025-07-28T17:38:29Z","title":"MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T13:06:39.600377Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2507.21017"},"observation_digest":"sha256:108769d88cff1c6183404e81fc1434bd384369d5088c906a092c8b6ac60e7dda","observation_id":"e02f4beb-6747-45b5-a515-3a32c537d92a","resolution":{"observed_at":"2026-08-06T13:06:39.600377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-08-15T15:46:06.025109Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.24411","last_updated":"2026-07-26T01:16:06Z","snapshot_observed_at":"2026-08-15T15:39:09.441338Z","submitted_at":"2025-10-28T13:22:39Z","title":"OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows","version":3},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-15T15:46:06.025109Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2510.24411"},"observation_digest":"sha256:c57dbb9a9fbd01487e8e33e224efd05e3ac23b6922291606c4e289e48352c8cf","observation_id":"9eb42b5c-89f6-4424-aa0b-9c329848fb7f","resolution":{"observed_at":"2026-08-15T15:46:06.025109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2604.13531","last_updated":"2026-04-15T06:27:49Z","snapshot_observed_at":"2026-08-19T04:36:45.444950Z","submitted_at":"2026-04-15T06:27:49Z","title":"RiskWebWorld: A Realistic Interactive Benchmark for GUI Agents in E-commerce Risk Management","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-10T13:40:55.540869Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2604.13531"},"observation_digest":"sha256:df66ce7be566ce1115a2d8b6d5902420f748e648d446d4d7d308c157075ac4e4","observation_id":"198f2fce-0baa-458a-a94e-b9c340a9c42c","resolution":{"observed_at":"2026-05-10T13:45:28.535266Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2605.07110","last_updated":"2026-05-08T01:38:46Z","snapshot_observed_at":"2026-08-16T18:22:57.815814Z","submitted_at":"2026-05-08T01:38:46Z","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-11T01:15:19.239355Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2605.07110"},"observation_digest":"sha256:0c75e72e8b37ab1ce7ac4919450224ed399cc7b240f470a10be23a830a4c7f88","observation_id":"4f14a556-c514-44ac-ade0-270597fdf455","resolution":{"observed_at":"2026-05-11T04:35:56.403952Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2605.07630","last_updated":"2026-05-08T11:58:57Z","snapshot_observed_at":"2026-08-14T09:55:37.082651Z","submitted_at":"2026-05-08T11:58:57Z","title":"Safe, or Simply Incapable? Rethinking Safety Evaluation for Phone-Use Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-11T02:00:17.765986Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2605.07630"},"observation_digest":"sha256:5e11809021a3357d240627c803f7ad6bc93914c279894cd2d5c7b88b7e4cb718","observation_id":"2bd2be58-e9cb-47bf-9b50-bbe51e238bf6","resolution":{"observed_at":"2026-05-11T04:00:56.737761Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2605.13631","last_updated":"2026-06-10T08:07:41Z","snapshot_observed_at":"2026-08-13T02:10:03.074086Z","submitted_at":"2026-05-13T14:58:24Z","title":"ProjGuard: Safety Monitoring for Computer-Use Agents via Low-Dimensional Projections","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-30T21:12:50.686474Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2605.13631"},"observation_digest":"sha256:8036b52322c7b2133bc72c0f4127859ec7b7bb87c30d4f15066ab69b1a412e8e","observation_id":"08533699-b62e-4b8c-9fd0-ff7e54baaf87","resolution":{"observed_at":"2026-06-30T21:15:04.158298Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2606.29537","last_updated":"2026-07-13T10:30:17Z","snapshot_observed_at":"2026-08-14T04:58:24.703062Z","submitted_at":"2026-06-28T17:59:17Z","title":"OSWorld 2.0: Benchmarking Computer Use Agents on Long-Horizon Real-World Tasks","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-06-30T07:10:38.909339Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2606.29537"},"observation_digest":"sha256:aea4132135da74f12b7e190f5b907858c38ebad471eddaa0b164687dc85ac7ab","observation_id":"8440b821-8599-4093-98be-be1f3d70b564","resolution":{"observed_at":"2026-06-30T07:14:21.161346Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-15T10:24:53.345620Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.29537","last_updated":"2026-07-13T10:30:17Z","snapshot_observed_at":"2026-08-14T04:58:24.703062Z","submitted_at":"2026-06-28T17:59:17Z","title":"OSWorld 2.0: Benchmarking Computer Use Agents on Long-Horizon Real-World Tasks","version":2},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-07-15T10:24:53.345620Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2606.29537"},"observation_digest":"sha256:0dc8ca263e9a19446e40435598f4410638d2e81d6b97b03cfe7b2735261c917d","observation_id":"53b68dca-4d98-4e7b-a568-5e48b6d6d008","resolution":{"observed_at":"2026-07-15T10:24:53.345620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"cited_work":{"arxiv_id":"2506.00618","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.00618","snapshot_observed_at":"2026-07-01T10:15:44.749818Z","title":"Riosworld: Benchmarking the risk of multimodal computer-use agents","venue":null,"work_id":"26d40ed4-6126-4f39-a622-abccf8432eaa","year":2025},"citing_paper":{"arxiv_id":"2606.31551","last_updated":"2026-06-30T12:09:51Z","snapshot_observed_at":"2026-08-13T17:41:58.813452Z","submitted_at":"2026-06-30T12:09:51Z","title":"AutoTrainess: Teaching Language Models to Improve Language Models Autonomously","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-01T05:39:48.575174Z"},"links":{"cited_paper":"/paper/2506.00618","citing_paper":"/paper/2606.31551"},"observation_digest":"sha256:bd838906baa6bcdd6aed5f902bc84cd587a5cc94395db36b82dff53fe94c5549","observation_id":"515df8a8-1794-4b4b-8e36-3b00d246e64a","resolution":{"observed_at":"2026-07-01T10:15:44.751236Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.00618/citation-record","integrity":"/paper/2506.00618/integrity","json":"/paper/2506.00618/citation-record.json","paper":"/paper/2506.00618"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.08164","last_updated":"2024-10-10T17:43:51Z","snapshot_observed_at":"2026-08-17T07:40:29.085142Z","submitted_at":"2024-10-10T17:43:51Z","title":"Agent S: An Open Agentic Framework that Uses Computers Like a Human","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.08164","snapshot_observed_at":"2026-08-07T12:06:22.590276Z","title":"Agent s: An open agentic framework that uses computers like a human.arXiv preprint arXiv:2410.08164, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.590276Z"},"links":{"cited_paper":"/paper/2410.08164","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:793e14e4e81cd14190ad9158c39f5e9179a66364bf15a76069e9d714700de234","observation_id":"284988e6-016b-48e4-b6ee-e89aa93bbbdf","resolution":{"observed_at":"2026-08-07T12:06:22.590276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:22.686046Z","title":"Attacking multimodal os agents with malicious image patches.arXiv preprint arXiv:2503.10809, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.686046Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:ac64d19135a12dfc865dc9549e636b4b78b04118ecd303a6a0cca45c90200ed2","observation_id":"5e0d7b01-54a6-44a2-9c25-6f91021d9e8c","resolution":{"observed_at":"2026-08-07T12:06:22.686046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-16T05:17:43.289570Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-07T12:06:22.753457Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents.arXiv preprint arXiv:2410.09024, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.753457Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:caec14ed0fbb0e7bb48cd63ac2eaa94032e7c5bdc1214a53cb84a544f9424010","observation_id":"457ecadb-2fa0-4c52-b68d-af978cbd43bc","resolution":{"observed_at":"2026-08-07T12:06:22.753457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:34.278946Z","title":"Introducing computer use, a new Claude 3.5 Sonnet, and Claude 3.5 Haiku, October","venue":null,"work_id":"b8333778-43e8-41da-9947-d13f3de50c05","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.867309Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:cc2f12a032419a6e488bdb3f8a0bb7d565e848decf4073fdc56e7add1312230c","observation_id":"8f9d311f-9945-4c27-b3ec-2821158f37f3","resolution":{"observed_at":"2026-08-07T12:06:34.359550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.962126Z","title":"The claude 3 model family: Opus, sonnet, haiku.https://www- cdn.anthropic.com/de8ba9b01c9ab7cbabf5c33b80b7bbc618857627/Model_Card_Claude_3.pdf, 2024","venue":null,"work_id":"f8fce480-0594-43ec-bd58-f072563c150a","year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.019663Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:9d310cbaad5f8c2e806211cc0ea00fcb67fe30ab87519c1ce27a1bf454389543","observation_id":"64218e8f-8491-4f08-986b-40d6d266ad9e","resolution":{"observed_at":"2026-08-07T12:06:34.036970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.810179Z","title":"Claude 3.7 sonnet system card, October 2025","venue":null,"work_id":"1ad62905-1f4f-4768-9756-a7c37ca2f16c","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.095720Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:20d591dd45ea246cd70616ffa3537e00a17709d2bc5a5be7433fc5b63ff56fff","observation_id":"c2bb2ada-3d80-4f13-bf05-f14fc7c0363f","resolution":{"observed_at":"2026-08-07T12:06:33.880157Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.609402Z","title":"Developing a computer use model, October 2025","venue":null,"work_id":"e45c203e-f4f9-42be-af64-9506a3858ef4","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.186031Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:a2f57058457a59cbe0d3c2840435dd1a2594c51391b8aca979c94fd9d2b2eaa7","observation_id":"4ee72da9-71eb-4ad0-b1cf-d867dd7d1307","resolution":{"observed_at":"2026-08-07T12:06:33.712367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-08-20T15:31:01.041088Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-07T12:06:23.264319Z","title":"Qwen technical report.arXiv preprint arXiv:2309.16609, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.264319Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:7ebb967b5341e667f0ec81fa8ba514c3e9da7b6eb39f3b331f83710dd93f7705","observation_id":"c77596af-e757-439b-aa3f-30285f37420d","resolution":{"observed_at":"2026-08-07T12:06:23.264319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-08-21T16:02:41.546193Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-07T12:06:23.352657Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.352657Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:f21f05f5c9c336d8a1db694dd64e8ca7e7e241541d61b2e8761727cebbe3dae8","observation_id":"a677f3b9-b95b-4396-a6a1-800e2e8b4acb","resolution":{"observed_at":"2026-08-07T12:06:23.352657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01744","last_updated":"2026-07-20T02:23:52Z","snapshot_observed_at":"2026-08-18T16:50:50.678954Z","submitted_at":"2024-04-02T09:01:32Z","title":"Octopus v2: On-device language model for super agent","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01744","snapshot_observed_at":"2026-08-07T12:06:23.410305Z","title":"Octopus v2: On-device language model for super agent.arXiv preprint arXiv:2404.01744, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.410305Z"},"links":{"cited_paper":"/paper/2404.01744","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:4b8326813d77306b1e2ecf1d47d3136148e218fe79f8eb529e64207f4281dc83","observation_id":"34eb453f-4baa-4326-8391-5f36d87d19e0","resolution":{"observed_at":"2026-08-07T12:06:23.410305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10935","last_updated":"2024-02-23T04:36:51Z","snapshot_observed_at":"2026-08-18T02:03:58.046358Z","submitted_at":"2024-01-17T08:10:35Z","title":"SeeClick: Harnessing GUI Grounding for Advanced Visual GUI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10935","snapshot_observed_at":"2026-08-07T12:06:23.503732Z","title":"Seeclick: Harnessing gui grounding for advanced visual gui agents.arXiv preprint arXiv:2401.10935, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.503732Z"},"links":{"cited_paper":"/paper/2401.10935","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:23f24dba4247388b808b2133e9025d5e438e2d46dac09ad794876e935edd91ac","observation_id":"c47314d5-2658-400b-99eb-4c3d9768afa4","resolution":{"observed_at":"2026-08-07T12:06:23.503732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T12:06:23.592039Z","title":"Agentdojo: A dynamic environment to evaluate attacks and defenses for llm agents.arXiv preprint arXiv:2406.13352, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.592039Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:ba0b20141223b8332b3fd76c85f044ba2d17bc112305359921417d56b1983b4d","observation_id":"bbdb7fac-8879-4cc8-bc8b-dadea32a3828","resolution":{"observed_at":"2026-08-07T12:06:23.592039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.18575","last_updated":"2025-05-16T22:42:29Z","snapshot_observed_at":"2026-08-15T08:43:14.412859Z","submitted_at":"2025-04-22T17:51:03Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.18575","snapshot_observed_at":"2026-08-07T12:06:23.663176Z","title":"Wasp: Benchmarking web agent security against prompt injection attacks.arXiv preprint arXiv:2504.18575, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.663176Z"},"links":{"cited_paper":"/paper/2504.18575","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:de394ce1d0edda0d102ca9576c65cfa574c00f6e199db7aec26b59eef2b32ab8","observation_id":"029cf64f-9676-4e24-850d-801b0376976c","resolution":{"observed_at":"2026-08-07T12:06:23.663176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-13T17:20:44.002518Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T12:06:23.757644Z","title":"The llama 3 herd of models.arXiv preprint arXiv:2407.21783, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.757644Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:92b4ff9caae991f11b1bdd0249783a661a35cd98c3d5f9717055d196fa14d4f3","observation_id":"f0688495-ce81-4327-b012-24fd294e647b","resolution":{"observed_at":"2026-08-07T12:06:23.757644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13919","last_updated":"2024-06-06T18:37:34Z","snapshot_observed_at":"2026-08-15T01:23:25.524198Z","submitted_at":"2024-01-25T03:33:18Z","title":"WebVoyager: Building an End-to-End Web Agent with Large Multimodal Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13919","snapshot_observed_at":"2026-08-07T12:06:23.848988Z","title":"Webvoyager: Building an end-to-end web agent with large multimodal models.arXiv preprint arXiv:2401.13919, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.848988Z"},"links":{"cited_paper":"/paper/2401.13919","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:0d199561e0f3e81a7f1fac372b07803f7262ca30decf49eb7367419952a55e43","observation_id":"9b662792-2707-4c6c-b155-9bd26d621df6","resolution":{"observed_at":"2026-08-07T12:06:23.848988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-08-15T14:02:47.366139Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-07T12:06:23.968062Z","title":"Gpt-4o system card.arXiv preprint arXiv:2410.21276, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:23.968062Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:17ec02e5514d15bba0d381e6ffc912c64175f6eaaa71195e3901c87b25b5623c","observation_id":"e965dfe2-4db4-4e8e-bb1c-53e32202773a","resolution":{"observed_at":"2026-08-07T12:06:23.968062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-08-19T11:46:55.171293Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-07T12:06:24.068502Z","title":"Openai o1 system card.arXiv preprint arXiv:2412.16720, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.068502Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:56560d6541fc8dec454edf5e6967ec839d5294684c9a065cc797415dc8598d9a","observation_id":"b2618616-389b-4c92-bcca-a80cbc730f06","resolution":{"observed_at":"2026-08-07T12:06:24.068502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.376136Z","title":"SWE-bench: Can language models resolve real-world Github issues? InThe Twelfth International Conference on Learning Representations, 2024","venue":null,"work_id":"2cf2f01a-a94a-4f83-90ba-8753a41986bb","year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.139358Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:8f9ffc3333b6112a9c0e51101fab111340d07c0b858a31372b8ff5274aaa5eac","observation_id":"a403411d-81b7-42cd-8ddd-153941fee54e","resolution":{"observed_at":"2026-08-07T12:06:33.499982Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13649","last_updated":"2024-06-06T02:01:09Z","snapshot_observed_at":"2026-08-21T15:15:53.387126Z","submitted_at":"2024-01-24T18:35:21Z","title":"VisualWebArena: Evaluating Multimodal Agents on Realistic Visual Web Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13649","snapshot_observed_at":"2026-08-07T12:06:24.215598Z","title":"Visualwebarena: Evaluating multimodal agents on realistic visual web tasks.arXiv preprint arXiv:2401.13649, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.215598Z"},"links":{"cited_paper":"/paper/2401.13649","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:0cff8189467d2759cb8e7c9d2c221977cf91fb003ee02c57f6b9dc410dc734ad","observation_id":"c8a04038-099c-44f2-9b0c-eaf15b9ca3c2","resolution":{"observed_at":"2026-08-07T12:06:24.215598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:24.325954Z","title":"Autowebglm: A large language model- based web navigating agent","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.325954Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:31008196c2bb9a6308e560b486722565d2e4c84c6fe5b341518275bc78d2255e","observation_id":"ebc3a157-94e5-4f86-b624-6796770c4735","resolution":{"observed_at":"2026-08-07T12:06:24.325954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:24.447633Z","title":"Mobilesafe- tybench: Evaluating safety of autonomous agents in mobile device control.arXiv preprint arXiv:2410.17520, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.447633Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:3dc63af27d73f68023354b10508763ff2facf9e268397569778e7722ac7917cc","observation_id":"588e37ac-892c-4bbe-9e0d-a54bec4c8327","resolution":{"observed_at":"2026-08-07T12:06:24.447633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.206122Z","title":"ST- WebAgentBench: A benchmark for evaluating safety and trustworthiness in web agents, October","venue":null,"work_id":"92a2064f-b518-488f-b016-4c4d35d7481f","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.550937Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:0f756021dc40f445823fbaf546fbc28308b72fa3094f94a9a7b72debbf82b135","observation_id":"94e1e1ff-014d-44b5-8874-cf613ebe8c4b","resolution":{"observed_at":"2026-08-07T12:06:33.271607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-19T20:31:13.864118Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-07T12:06:24.688608Z","title":"EIA: Environmental injection attack on generalist web agents for privacy leakage, October 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.688608Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:08756a06c7c156ea84fc141b1d2fb2138ceda5017e4bf17a4a4b10fcab30c4c6","observation_id":"11b9720f-17e5-4452-b75f-8a4a47c42ef0","resolution":{"observed_at":"2026-08-07T12:06:24.688608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06703","last_updated":"2026-06-04T09:59:28Z","snapshot_observed_at":"2026-08-16T13:11:11.539278Z","submitted_at":"2024-10-09T09:13:38Z","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06703","snapshot_observed_at":"2026-08-07T12:06:24.612239Z","title":"arXiv:2410.06703","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.612239Z"},"links":{"cited_paper":"/paper/2410.06703","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:26d760bcfad840d328c1ad1d9931760c43dc8bed3cfccba2b9dc1b2a990e1ac2","observation_id":"aaf56cf0-5b9d-427e-95cf-2d46ceaf3b80","resolution":{"observed_at":"2026-08-07T12:06:24.612239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:33.006041Z","title":"Large language model-based agents for software engineering: A survey, September","venue":null,"work_id":"8ba0e6fb-2916-4df5-a27a-a8d31db4c1ce","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.847496Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:ce11a87cfc095378a28f525657e7e7d2b1c43d4245dc2bd90ba69d83cb32de47","observation_id":"e3a15162-a7d8-4038-b57f-9acdb5af51e4","resolution":{"observed_at":"2026-08-07T12:06:33.104616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.17465","last_updated":"2024-11-26T14:29:47Z","snapshot_observed_at":"2026-08-16T10:14:53.516684Z","submitted_at":"2024-11-26T14:29:47Z","title":"ShowUI: One Vision-Language-Action Model for GUI Visual Agent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.17465","snapshot_observed_at":"2026-08-07T12:06:24.763166Z","title":"Showui: One vision-language-action model for gui visual agent.arXiv preprint arXiv:2411.17465, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.763166Z"},"links":{"cited_paper":"/paper/2411.17465","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:0f5a92ed6b79fd6a462cac0505c67ece2216dbdc6595fb1153ceede6bf1b0193","observation_id":"038741e4-74ad-4c5c-9a4a-56f7f7ac5b94","resolution":{"observed_at":"2026-08-07T12:06:24.763166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11941","last_updated":"2024-06-02T13:25:05Z","snapshot_observed_at":"2026-08-16T14:17:26.167952Z","submitted_at":"2024-02-19T08:29:03Z","title":"CoCo-Agent: A Comprehensive Cognitive MLLM Agent for Smartphone GUI Automation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11941","snapshot_observed_at":"2026-08-07T12:06:25.162426Z","title":"Coco-agent: A comprehensive cognitive mllm agent for smartphone gui automation.arXiv preprint arXiv:2402.11941, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.162426Z"},"links":{"cited_paper":"/paper/2402.11941","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:7920aa348c172b208b599858739adf0080c3412f2cda87535a632d4fce9f6e6b","observation_id":"03241d5c-d09c-4935-827f-a8682c9e436b","resolution":{"observed_at":"2026-08-07T12:06:25.162426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.02977","last_updated":"2025-12-03T03:33:35Z","snapshot_observed_at":"2026-08-19T23:00:00.690503Z","submitted_at":"2024-09-04T15:59:41Z","title":"Large Language Model-Based Agents for Software Engineering: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.02977","snapshot_observed_at":"2026-08-07T12:06:24.945129Z","title":"arXiv:2409.02977","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.945129Z"},"links":{"cited_paper":"/paper/2409.02977","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:fd14991e2067be337c1f39086fac8e6e89ea1267bccca651937bb0af4f3797ea","observation_id":"fda4c8a5-c71b-4d21-b977-b7e32457ba21","resolution":{"observed_at":"2026-08-07T12:06:24.945129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02544","last_updated":"2025-09-05T09:21:10Z","snapshot_observed_at":"2026-08-16T13:28:26.846597Z","submitted_at":"2024-08-05T15:16:22Z","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02544","snapshot_observed_at":"2026-08-07T12:06:24.997627Z","title":"Caution for the environment: Multimodal agents are susceptible to environmental distractions.arXiv preprint arXiv:2408.02544, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:24.997627Z"},"links":{"cited_paper":"/paper/2408.02544","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:866eb0feb59996759052770c222e9a93346368b796c5f6a13e80e3addb446225","observation_id":"c9e9e7d1-8aaa-4348-ae3b-32b7af5095b0","resolution":{"observed_at":"2026-08-07T12:06:24.997627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.639606Z","title":"nightly/daily builds","venue":null,"work_id":"f8f3df40-0b59-479c-85bb-a78dbee9bcc5","year":2003},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.440932Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:b9da90b0f81b0d7c3b4e6939455a928d6d610497b00b3769ac83dc8aba4821b2","observation_id":"5de20775-65e0-4c4d-9fff-94a03f9b5bcb","resolution":{"observed_at":"2026-08-07T12:06:32.712424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.793667Z","title":"Manus ai: a universal ai assistant that can transform your ideas into actions, 2025","venue":null,"work_id":"d14bf28e-67bd-41b7-8034-628be208cb36","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.230337Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:fff5b57430adb13807d6146186a25bb41a94efae8e246e7daa99bc59d0ad2a48","observation_id":"f2827640-58b0-4763-9238-cbd5d2e29986","resolution":{"observed_at":"2026-08-07T12:06:32.863721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.12844","last_updated":"2021-04-13T23:39:18Z","snapshot_observed_at":"2026-08-16T19:10:56.905062Z","submitted_at":"2020-10-24T09:11:26Z","title":"FLIN: A Flexible Natural Language Interface for Web Navigation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.12844","snapshot_observed_at":"2026-08-07T12:06:25.336004Z","title":"Flin: A flexible natural language interface for web navigation.arXiv preprint arXiv:2010.12844, 2020","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.336004Z"},"links":{"cited_paper":"/paper/2010.12844","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:4b759fdfbc6c18e6d73e36730e4abd230ea4034d6803fc29d6e5490bae27ad83","observation_id":"9b0e310f-50f2-4e14-8168-d746c1a53d67","resolution":{"observed_at":"2026-08-07T12:06:25.336004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.367462Z","title":"Roscript: a visual script driven truly non-intrusive robotic testing system for touch screen applications","venue":null,"work_id":"3acf75a6-8238-4575-91f6-3fd1088aebf8","year":2020},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.774003Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:79538d1a76189e15e8b178fae4deaf2ddfa9acfb4d9bb6a3bdca06e0ad8c9f20","observation_id":"4462c3d3-e7f7-418c-ad67-8f55354b8925","resolution":{"observed_at":"2026-08-07T12:06:32.412319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.475556Z","title":"Computer-Using Agent: Introducing a universal interface for AI to interact with the digital world, 2025","venue":null,"work_id":"de18d175-ea27-4d82-bad3-5df0a2a9ad49","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.562633Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:b09a0e7d21b2c877c3c877d3912f81680ba270d2ee89493d3cdffb6acebcdd62","observation_id":"8f812064-c74d-4b95-b877-afeee57352c2","resolution":{"observed_at":"2026-08-07T12:06:32.531191Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T12:06:25.667552Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.667552Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:9b0e52215cda2673b1dcb85d33958285fdaac89041b2e59f4ff258428fbf352e","observation_id":"4f5875be-c1ad-48d0-a7ef-be1eb45a8f7f","resolution":{"observed_at":"2026-08-07T12:06:25.667552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05530","last_updated":"2024-12-16T17:39:39Z","snapshot_observed_at":"2026-08-14T18:15:53.516440Z","submitted_at":"2024-03-08T18:54:20Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05530","snapshot_observed_at":"2026-08-07T12:06:26.116515Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context.arXiv preprint arXiv:2403.05530, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.116515Z"},"links":{"cited_paper":"/paper/2403.05530","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:aef6ddefcc8f9cdcdc7466f079cdbeff77a5de13a2152b401601b31ed8c310b2","observation_id":"2f970317-af43-4050-a55e-7c6f225a1dfd","resolution":{"observed_at":"2026-08-07T12:06:26.116515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:25.915682Z","title":"An- droidinthewild: A large-scale dataset for android device control.Advances in Neural Information Processing Systems, 36:59708–59728, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:25.915682Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:7ceb83747fde8f4bce134d5e62486c61aa08473d92bb8148049fdd3af6b28a54","observation_id":"9930c096-1ea4-446d-808e-0e618fead237","resolution":{"observed_at":"2026-08-07T12:06:25.915682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14573","last_updated":"2025-04-06T20:37:50Z","snapshot_observed_at":"2026-08-19T11:49:14.266180Z","submitted_at":"2024-05-23T13:48:54Z","title":"AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14573","snapshot_observed_at":"2026-08-07T12:06:26.003533Z","title":"Androidworld: A dynamic benchmarking environment for autonomous agents.arXiv preprint arXiv:2405.14573, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.003533Z"},"links":{"cited_paper":"/paper/2405.14573","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:c5cfb3d159801f122d987d8897c3b61505e82f339a6c1f5b25aae493e4c986a2","observation_id":"4d82527d-7030-4595-9126-52f889bb9ca1","resolution":{"observed_at":"2026-08-07T12:06:26.003533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.11029","last_updated":"2022-11-24T06:34:43Z","snapshot_observed_at":"2026-08-16T16:58:31.432274Z","submitted_at":"2022-05-23T04:05:37Z","title":"META-GUI: Towards Multi-modal Conversational Agents on Mobile GUI","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.11029","snapshot_observed_at":"2026-08-07T12:06:26.528417Z","title":"Meta-gui: Towards multi-modal conversational agents on mobile gui.arXiv preprint arXiv:2205.11029, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.528417Z"},"links":{"cited_paper":"/paper/2205.11029","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:16bc43b9f3d38045c5794fa3dda4a7c65b6ebe58b775958824f131db492eb65f","observation_id":"242886f9-7c24-4c9d-a98c-8ae3463f74de","resolution":{"observed_at":"2026-08-07T12:06:26.528417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-07T12:06:26.269044Z","title":"Identifying the risks of lm agents with an lm-emulated sandbox.arXiv preprint arXiv:2309.15817, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.269044Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:b33c11a25608d0764e179044245194d32984a7e53600f6a9db28e6036f627740","observation_id":"0134cf90-712e-4a33-9f88-4b7e5ee96823","resolution":{"observed_at":"2026-08-07T12:06:26.269044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:26.372738Z","title":"World of bits: An open-domain platform for web-based agents","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.372738Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:4fc50bddcb0e3a5fa5d1b1e4647684eec9751087233a99cd6c61aa077a401bec","observation_id":"6c36f7e1-9ca0-461e-8d3b-b17cfc4f6a6b","resolution":{"observed_at":"2026-08-07T12:06:26.372738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04957","last_updated":"2025-03-06T20:43:14Z","snapshot_observed_at":"2026-08-21T06:09:22.991230Z","submitted_at":"2025-03-06T20:43:14Z","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04957","snapshot_observed_at":"2026-08-07T12:06:26.862588Z","title":"Safearena: Evaluating the safety of autonomous web agents.arXiv preprint arXiv:2503.04957, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.862588Z"},"links":{"cited_paper":"/paper/2503.04957","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:c11945854aa3c317d0e4406289587e906dfc7b51bca514452ce3fdcb1ecefe7b","observation_id":"a5c77f8b-7556-4ec2-a7ce-abfab940e084","resolution":{"observed_at":"2026-08-07T12:06:26.862588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-08-20T18:27:04.837880Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-07T12:06:26.652241Z","title":"Gemini: a family of highly capable multimodal models.arXiv preprint arXiv:2312.11805, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.652241Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:b40da37649e37a99b3ec5485725185029653eaaff68d366ce8e2b1004814f4d4","observation_id":"789e627a-8e40-4533-924d-3036e3323756","resolution":{"observed_at":"2026-08-07T12:06:26.652241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:26.748863Z","title":"Anthropic, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.748863Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:666e2d4342950f7c2d6253fd124369127d228529b84377390f400b469ea7b337","observation_id":"072e9111-6972-4ef9-9353-cc8650932af2","resolution":{"observed_at":"2026-08-07T12:06:26.748863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16965","last_updated":"2024-02-26T19:01:54Z","snapshot_observed_at":"2026-08-16T14:15:10.611553Z","submitted_at":"2024-02-26T19:01:54Z","title":"WIPI: A New Web Threat for LLM-Driven Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16965","snapshot_observed_at":"2026-08-07T12:06:27.120706Z","title":"WIPI: A new web threat for LLM-driven web agents, February 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.120706Z"},"links":{"cited_paper":"/paper/2402.16965","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:64c5ba4578e085022fa7ed8310d59b5346f7ddab1af95d23383cdf5a59e881bf","observation_id":"85ccfadf-ebd4-4392-b29a-a9eac925d76d","resolution":{"observed_at":"2026-08-07T12:06:27.120706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12191","last_updated":"2024-10-03T15:54:49Z","snapshot_observed_at":"2026-08-06T05:35:29.109022Z","submitted_at":"2024-09-18T17:59:32Z","title":"Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolution","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12191","snapshot_observed_at":"2026-08-07T12:06:26.962871Z","title":"Qwen2-vl: Enhancing vision-language model’s perception of the world at any resolution.arXiv preprint arXiv:2409.12191, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:26.962871Z"},"links":{"cited_paper":"/paper/2409.12191","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:1ced14a5b567e3747d9c4a8aea17b3c979b6a7c963813c3eef21013a8fbf00c7","observation_id":"46b14f9f-f75d-437e-a271-de3dce4bc275","resolution":{"observed_at":"2026-08-07T12:06:26.962871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-16T13:41:44.544093Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-07T12:06:27.049458Z","title":"Dissecting adversarial robustness of multimodal LM agents, December 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.049458Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:ead9ef9250f5b82b1c730aed1abb1b2d326e86ad440a0e2133745652e48df336","observation_id":"fa21ad3d-c8e7-40f9-ab5c-b12894695053","resolution":{"observed_at":"2026-08-07T12:06:27.049458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04454","last_updated":"2025-05-05T16:17:20Z","snapshot_observed_at":"2026-07-06T20:02:21.509050Z","submitted_at":"2024-12-05T18:58:26Z","title":"Aguvis: Unified Pure Vision Agents for Autonomous GUI Interaction","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04454","snapshot_observed_at":"2026-08-07T12:06:27.404090Z","title":"Aguvis: Unified pure vision agents for autonomous gui interaction","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.404090Z"},"links":{"cited_paper":"/paper/2412.04454","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:07b5d2046c8969dc3ff8be4179e9c155cf879ba73093485c6d215461f099e9e6","observation_id":"2dbfab8a-e111-4091-8d2a-76d09e757829","resolution":{"observed_at":"2026-08-07T12:06:27.404090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.23218","last_updated":"2024-10-30T17:10:19Z","snapshot_observed_at":"2026-08-19T18:35:24.681471Z","submitted_at":"2024-10-30T17:10:19Z","title":"OS-ATLAS: A Foundation Action Model for Generalist GUI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.23218","snapshot_observed_at":"2026-08-07T12:06:27.217615Z","title":"Os-atlas: A foundation action model for generalist gui agents.arXiv preprint arXiv:2410.23218, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.217615Z"},"links":{"cited_paper":"/paper/2410.23218","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:24dfd94da8037cd39d9858efe2e1138b46bd27f1b8cc886b7d566e8c62f831d4","observation_id":"2a6ef5ce-6c1b-43c0-b5db-30d3ff956a2e","resolution":{"observed_at":"2026-08-07T12:06:27.217615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:27.317673Z","title":"Osworld: Benchmarking multimodal agents for open-ended tasks in real computer environments.Advances in Neural Information Processing Systems, 37:52040–52094, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.317673Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:be74eb5c79ae545a43d23734cd7441543c94eda79571fd2033316cb2c9ce7403","observation_id":"811cc1c0-f73f-414a-a0ba-562fbc81413b","resolution":{"observed_at":"2026-08-07T12:06:27.317673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10019","last_updated":"2024-10-05T06:50:15Z","snapshot_observed_at":"2026-08-18T12:47:10.257853Z","submitted_at":"2024-01-18T14:40:46Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10019","snapshot_observed_at":"2026-08-07T12:06:27.641818Z","title":"R-judge: Benchmarking safety risk awareness for llm agents.arXiv preprint arXiv:2401.10019, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.641818Z"},"links":{"cited_paper":"/paper/2401.10019","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:cf24d9f1fef94343d21687fc0fe7a326aaa4d88c97ad96eafbe543a376d9e350","observation_id":"09020643-a387-4b8d-8cec-fc86ef88ebf8","resolution":{"observed_at":"2026-08-07T12:06:27.641818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:27.525969Z","title":"React: Synergizing reasoning and acting in language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.525969Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:5c41ae875550ead8a68241d3d2ad8f9d24cf108d2755548e8601e79bab42e127","observation_id":"116a9072-7d6e-4ba1-a163-1e0e254335f8","resolution":{"observed_at":"2026-08-07T12:06:27.525969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10753","last_updated":"2024-08-16T04:12:00Z","snapshot_observed_at":"2026-08-16T14:17:57.288915Z","submitted_at":"2024-02-16T15:19:46Z","title":"ToolSword: Unveiling Safety Issues of Large Language Models in Tool Learning Across Three Stages","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10753","snapshot_observed_at":"2026-08-07T12:06:27.595232Z","title":"Toolsword: Unveiling safety issues of large language models in tool learning across three stages.arXiv preprint arXiv:2402.10753, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.595232Z"},"links":{"cited_paper":"/paper/2402.10753","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:4e9f3ecb4ec8bba1ef5545cfc11c5264fcd6488cf7129b03d48db212af8b1860","observation_id":"24801c2b-85b4-4807-9e59-e076dfa33945","resolution":{"observed_at":"2026-08-07T12:06:27.595232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-16T13:03:02.879460Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T12:06:27.951327Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.951327Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:242afd5e670cf623bebc1bfd13abf56a302d5a78d219abc8372e4c58cf1a74af","observation_id":"f232dac0-63ab-4f5c-ad68-c9c6f86410e4","resolution":{"observed_at":"2026-08-07T12:06:27.951327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T12:06:27.758031Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents.arXiv preprint arXiv:2403.02691, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.758031Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:98c8ed7a7f2218c4f89b16302350c9e97cba00ea501efea8c7701f84cc53ece4","observation_id":"a8643598-2ce1-41fc-9c5f-e3d373f67833","resolution":{"observed_at":"2026-08-07T12:06:27.758031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-07T12:06:27.869822Z","title":"Agent security bench (asb): Formalizing and benchmarking attacks and defenses in llm-based agents.arXiv preprint arXiv:2410.02644, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.869822Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:e13734b5a762e41c98ae06a1877d580410fe19fa1cea3f15b138322a50ff2afb","observation_id":"1cc439e2-24d8-47b0-a979-7578ef8845a7","resolution":{"observed_at":"2026-08-07T12:06:27.869822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13854","last_updated":"2024-04-16T15:13:18Z","snapshot_observed_at":"2026-08-14T11:14:55.351653Z","submitted_at":"2023-07-25T22:59:32Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.13854","snapshot_observed_at":"2026-08-07T12:06:28.195185Z","title":"Webarena: A realistic web environment for building autonomous agents.arXiv preprint arXiv:2307.13854, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.195185Z"},"links":{"cited_paper":"/paper/2307.13854","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:253d49da493805a05cd570105521e3a6f30de6cdd7d78769b606a240b8084291","observation_id":"e4c187fe-c83d-4cdb-b220-1e539871d037","resolution":{"observed_at":"2026-08-07T12:06:28.195185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14470","last_updated":"2025-05-20T05:58:23Z","snapshot_observed_at":"2026-08-06T12:35:19.109481Z","submitted_at":"2024-12-19T02:35:15Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14470","snapshot_observed_at":"2026-08-07T12:06:28.033298Z","title":"Agent-safetybench: Evaluating the safety of llm agents.arXiv preprint arXiv:2412.14470, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.033298Z"},"links":{"cited_paper":"/paper/2412.14470","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:ebce92dc7a3e71208879afcdca9ec244e13dc3dd300adac14490f462468e1d99","observation_id":"762d0332-b4e4-44bf-b5ae-5e298ca3022f","resolution":{"observed_at":"2026-08-07T12:06:28.033298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:32.138728Z","title":"You only look at screens: Multimodal chain-of-action agents.arXiv e-prints, pages arXiv–2309, 2023","venue":null,"work_id":"8ffb2e10-198f-4033-94d8-be24d6b2f1bb","year":2023},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.117482Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:565d9ebdeff805823099945f3c68045ae433435123dd583136923c6e1363d9a6","observation_id":"24bd7cb8-7db8-4e7c-85a6-f20005d4f264","resolution":{"observed_at":"2026-08-07T12:06:32.208175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.987672Z","title":"Phishing Web","venue":null,"work_id":"08c5eb7e-b64c-4092-ba49-6b0ab54e4a9b","year":2025},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.321182Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:478f599592e3ee2560ab06772e229b331c483e5da18156d77f5c630b1e22bf66","observation_id":"7b5daac3-7cb3-4d01-ade7-d7bf3c1bf4f0","resolution":{"observed_at":"2026-08-07T12:06:32.057095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.836569Z","title":null,"venue":null,"work_id":"93373c96-74ed-4a88-909d-eddc9e72765d","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.438579Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:8768d78259aef42041120fb71a57c6776151cd0b850657b29e7cd20ee014feaf","observation_id":"a38d2aa6-72d7-46c9-9ab4-42545c883ca5","resolution":{"observed_at":"2026-08-07T12:06:31.883064Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.616399Z","title":null,"venue":null,"work_id":"d9064872-c472-4447-8e02-31cba58cbad2","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.540014Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:e00c6ce452115703c027ddec589e8d455477a2ee6f561b11e4200cad45edadd4","observation_id":"da92d423-d219-4f17-85db-dbaf18f5f290","resolution":{"observed_at":"2026-08-07T12:06:31.704383Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.361342Z","title":null,"venue":null,"work_id":"b1066e15-54cf-4dec-bd15-4e9e4b42225d","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.634621Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:14eb3f2cdd20afa6f14d4cfc24cdecd5fc5aa212cbb6d4454a03a63e9b1899f1","observation_id":"f2776078-2b53-4142-90f3-22fb17e5b37b","resolution":{"observed_at":"2026-08-07T12:06:31.471539Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:31.171518Z","title":"log USDT transaction","venue":null,"work_id":"0e776f53-070c-400c-b80d-667e9f9ff758","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.741236Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:226b5a5e41811d14ef6fe05b2327dbe5a279d94fe9f317baecee0c4cd5390e44","observation_id":"3e7c40a9-c097-47b9-85db-4230d421cb47","resolution":{"observed_at":"2026-08-07T12:06:31.258956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.974254Z","title":null,"venue":null,"work_id":"1e6a1113-ce97-49c9-bbe8-2e3a3c8d1e35","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.850340Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:3ce81b226f47043987ef248303d9aec270ac3876014a2fe413a752e4e14d796a","observation_id":"36f666ec-9c43-4c1d-99eb-bad0390775ce","resolution":{"observed_at":"2026-08-07T12:06:31.054273Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.808927Z","title":null,"venue":null,"work_id":"d847facc-13a0-4d80-acd7-66376aa60f93","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:28.942262Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:c80d7206141dae668323ff9e1d7c283f8a3288c79a3bca71b0d2be7377e27eff","observation_id":"6cbed492-fb58-4134-b8be-03d59857c0bd","resolution":{"observed_at":"2026-08-07T12:06:30.859109Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.584050Z","title":null,"venue":null,"work_id":"abc88eff-f5f0-44e5-b322-76af604f6802","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:29.054286Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:0bb614f4095b6f5fa0f503d0c0047eb66ba1d056d2f5aff73f9e60f1b343400e","observation_id":"183b04b1-6345-4137-a9a0-690b40401d62","resolution":{"observed_at":"2026-08-07T12:06:30.717648Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:30.400553Z","title":"search for torrents of XX software,","venue":null,"work_id":"6311a652-4abd-4e86-91ad-7dab4a007e06","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:29.178864Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:8442d75b6bc29893e81fbd53f35ce6ecc6f729a421b6225a5b82f9902d646d0b","observation_id":"2795bfcc-fc95-4dff-ae5c-784b9e43aebb","resolution":{"observed_at":"2026-08-07T12:06:30.471183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:06:34.118331Z","title":null,"venue":null,"work_id":"b230f38c-86dd-458a-ab56-7aaa16b00ff3","year":null},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:22.958493Z"},"links":{"citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:56f3db83a76d331f57fe661711adedc5c7f146ece09760c3550e5a2be7343b38","observation_id":"a45d0440-976c-4e5e-8665-e7ae6e32256e","resolution":{"observed_at":"2026-08-07T12:06:34.199553Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","latest_version":3,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-20T22:41:51.108639Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents"},"reference_resolution":{"displayed":69,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":54,"verified_exact":0,"verified_fuzzy":15},"total_outbound_references":69},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 10 inbound Pith citation observations for arXiv:2506.00618."}