{"as_of":"2026-08-10T13:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6d87359ed20b723a9849ea1b132773bf533b96dfb598944b0a38e69d5ac271a2","coverage":[{"denominator":67,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":67,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:59:29.316286Z","state":"measured"},{"denominator":82,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":82,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":15,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T23:42:13.675310Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T14:09:53.274632Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-08-06T23:42:13.675310Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.16618","last_updated":"2025-06-19T21:31:42Z","snapshot_observed_at":"2026-08-09T22:53:20.135048Z","submitted_at":"2025-06-19T21:31:42Z","title":"Data marketplaces can increase the willingness to share social media data at low prices","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T23:42:13.675310Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2506.16618"},"observation_digest":"sha256:5e1b2379a5e7f03b9e20e8a7336619eeed1f1d3ecd1fcb99bcde5a637b9f60df","observation_id":"aa398d6b-c5b6-4425-90cf-6c86f7c8ffeb","resolution":{"observed_at":"2026-08-06T23:42:13.675310Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-08-06T16:51:34.751679Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.12372","last_updated":"2025-07-16T16:21:01Z","snapshot_observed_at":"2026-08-08T17:33:26.129096Z","submitted_at":"2025-07-16T16:21:01Z","title":"Web-Browsing LLMs Can Access Social Media Profiles and Infer User Demographics","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:51:34.751679Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2507.12372"},"observation_digest":"sha256:5e9aa6d6b2540775b62cce0f5ba07d888e78dc5ab4452da8132cf86769dfab74","observation_id":"26992bd8-1c41-4bc4-8734-149b1d83704b","resolution":{"observed_at":"2026-08-06T16:51:34.751679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2601.18842","last_updated":"2026-05-13T07:11:36Z","snapshot_observed_at":"2026-08-01T18:25:13.403669Z","submitted_at":"2026-01-26T11:33:40Z","title":"GUIGuard-Bench: Toward a General Evaluation for Privacy-Preserving GUI Agents","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-16T11:31:16.087579Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2601.18842"},"observation_digest":"sha256:68ca672f33ad401b4f4d4138f89ffc682bfee47d677d83926061fe5dbf352773","observation_id":"cc57bb32-74da-4e66-be54-cf6766763acc","resolution":{"observed_at":"2026-05-16T11:32:48.296793Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2604.01473","last_updated":"2026-05-28T05:44:14Z","snapshot_observed_at":"2026-08-02T17:40:16.491905Z","submitted_at":"2026-04-01T23:29:12Z","title":"SelfGrader: LLM Jailbreak Detection via Anchored Token-Level Logits","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-13T21:43:46.728512Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2604.01473"},"observation_digest":"sha256:d4d3db93e983997f62d907a4648810afa25610b1c2a78c4719e7dcdcfc866377","observation_id":"d97d9eb9-1c3f-4e5f-ab33-7d3ce38fa717","resolution":{"observed_at":"2026-05-13T21:48:19.389525Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.06393","last_updated":"2026-05-07T15:08:40Z","snapshot_observed_at":"2026-08-08T07:31:47.750419Z","submitted_at":"2026-05-07T15:08:40Z","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T09:08:30.102711Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.06393"},"observation_digest":"sha256:bb0de4019a1acd3d471dd686cb613fb4fba5bc18684b3c7414203f83b4f13b05","observation_id":"c5432059-af0f-467e-850f-7cddc4d5b4f5","resolution":{"observed_at":"2026-05-11T20:26:11.150157Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.18133","last_updated":"2026-05-18T09:38:18Z","snapshot_observed_at":"2026-07-06T23:29:04.241654Z","submitted_at":"2026-05-18T09:38:18Z","title":"An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-20T09:58:05.349147Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.18133"},"observation_digest":"sha256:00e116224c2949b4350742bec6b4a5aedaad8a3613c28a6e0ef3a48e60ec9f40","observation_id":"7a60c30a-2c08-4bc5-a259-c810dd240024","resolution":{"observed_at":"2026-05-20T09:58:10.938061Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.23989","last_updated":"2026-05-17T10:26:37Z","snapshot_observed_at":"2026-07-06T23:34:08.786038Z","submitted_at":"2026-05-17T10:26:37Z","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","version":1},"reference_index":193,"source":"pdf_text","source_observed_at":"2026-06-30T19:18:40.244556Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.23989"},"observation_digest":"sha256:1cf2b022419cb968adf27bd2dc8d340b88b24e1e50614e1161a2c7ecdd219dbb","observation_id":"0b9e4079-d43d-4d1c-a90b-33df52a505cf","resolution":{"observed_at":"2026-06-30T19:45:01.603801Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.25435","last_updated":"2026-05-25T05:25:39Z","snapshot_observed_at":"2026-07-06T23:35:21.734804Z","submitted_at":"2026-05-25T05:25:39Z","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-29T22:00:03.325985Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.25435"},"observation_digest":"sha256:c02dd6625a5d131da4d2d3ed21590a9e045537e593155c1b50f03f14cb95d875","observation_id":"efa56cf7-2bed-4683-82d3-68d0041a9f7d","resolution":{"observed_at":"2026-06-29T22:04:00.356123Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2605.30650","last_updated":"2026-05-28T23:10:04Z","snapshot_observed_at":"2026-07-06T23:39:53.132531Z","submitted_at":"2026-05-28T23:10:04Z","title":"When AI Meets Wall Street: A Survey on Trustworthy AI in Fintech","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T06:17:07.660975Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2605.30650"},"observation_digest":"sha256:4350c6735f58d08b8fb97715f8f34bf8a18f53b7189f3ea4894016e8981e22cd","observation_id":"c474a8d3-7ade-495c-b12b-2f44d2d66a25","resolution":{"observed_at":"2026-06-29T14:43:31.588391Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.02302","last_updated":"2026-06-01T14:23:42Z","snapshot_observed_at":"2026-08-01T11:06:48.826611Z","submitted_at":"2026-06-01T14:23:42Z","title":"SeClaw: Spec-Driven Security Task Synthesis for Evaluating Autonomous Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T13:51:49.666484Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.02302"},"observation_digest":"sha256:091b9f95818ecfbdfcecb744717a89a08f9b2a2a475d7ed11577caecacf7d710","observation_id":"45f88d7a-7e50-49fa-923e-5f9c34979c4b","resolution":{"observed_at":"2026-07-01T23:56:23.009280Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.12666","last_updated":"2026-06-16T03:15:00Z","snapshot_observed_at":"2026-07-30T01:01:38.589980Z","submitted_at":"2026-06-10T20:48:39Z","title":"CAPED: Context-Aware Privacy Exposure Defense for Mobile GUI Agents","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-27T09:00:10.153170Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.12666"},"observation_digest":"sha256:d7c42814963b2abedd865388ad1175f4d749c4efd8bd18fe86d72a4700b35e87","observation_id":"99079ee5-69d8-4355-859d-8d3dd859423b","resolution":{"observed_at":"2026-07-03T12:28:07.466005Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.13385","last_updated":"2026-06-11T14:12:43Z","snapshot_observed_at":"2026-08-01T15:55:04.725190Z","submitted_at":"2026-06-11T14:12:43Z","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T06:20:04.789341Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.13385"},"observation_digest":"sha256:6e96c0502fe0b7cd78c6e97057c383c917b884f3531b09ef20fe534124064d0b","observation_id":"5649493c-6fb9-4c0a-99c3-fd1d0f6f4ac0","resolution":{"observed_at":"2026-07-03T15:48:35.889462Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.18996","last_updated":"2026-06-18T04:53:40Z","snapshot_observed_at":"2026-08-06T16:17:51.986701Z","submitted_at":"2026-06-17T12:17:02Z","title":"TRAP: Benchmark for Task-completion and Resistance to Active Privacy-extraction","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-26T20:37:19.026178Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.18996"},"observation_digest":"sha256:3a3e31c308f0132bae478b1ab0eb2a22436e1d078b492ac4094fda584226bd52","observation_id":"a07f2713-7cc3-4a53-baa4-4933295abb7b","resolution":{"observed_at":"2026-07-04T01:09:19.371396Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.23277","last_updated":"2026-06-22T12:54:04Z","snapshot_observed_at":"2026-08-10T01:22:23.361308Z","submitted_at":"2026-06-22T12:54:04Z","title":"GIF: Locally Sound Geometric Information Flow Control for LLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T08:24:49.908288Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.23277"},"observation_digest":"sha256:5b25c7b69f6750f44cdd9063172bbdd0887b590a8964eb9a4a15aacf3a87c27f","observation_id":"30396437-70b1-4906-a799-c6cccba169b2","resolution":{"observed_at":"2026-07-04T10:49:46.729444Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"cited_work":{"arxiv_id":"2506.01055","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.01055","snapshot_observed_at":"2026-07-04T14:09:53.274632Z","title":"Simple prompt injection attacks can leak personal data observed by llm agents during task execution","venue":null,"work_id":"0f88bb16-d6ed-41c4-8b0b-49b456b6d51e","year":2025},"citing_paper":{"arxiv_id":"2606.26627","last_updated":"2026-06-25T05:44:18Z","snapshot_observed_at":"2026-08-02T09:36:56.612724Z","submitted_at":"2026-06-25T05:44:18Z","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T04:29:16.386339Z"},"links":{"cited_paper":"/paper/2506.01055","citing_paper":"/paper/2606.26627"},"observation_digest":"sha256:6c5809bb57f119e0ce411e347e492ff0f2ecf7c269b6b935dd3f0db4c4ef3536","observation_id":"4a66fa44-d82b-47e4-82bf-e5b1d61d962f","resolution":{"observed_at":"2026-07-04T14:09:53.276106Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.01055/citation-record","integrity":"/paper/2506.01055/integrity","json":"/paper/2506.01055/citation-record.json","paper":"/paper/2506.01055"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.594801Z","title":"Design and analysis of experiments in anfis modeling for stock price prediction","venue":null,"work_id":"61ae29f7-c5f0-463e-b03f-65eee156e3c3","year":2011},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.231648Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:120712a1fc425aa75725868f584eff1d29d34dea3a4438025fce3ccd83e9edfa","observation_id":"b6f0e221-2d9a-4368-8ab0-b1c6d767829f","resolution":{"observed_at":"2026-08-07T11:59:35.628259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:21.335328Z","title":"Tokenization of social media engagements increases the sharing of false (and other) news but penalization moderates it","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.335328Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:731d4230f1d56ea049ec81f761a9eb64204631eea08216c37270ed88737cbe4a","observation_id":"7a4c949a-cbd9-440b-9e43-79600e8dddd4","resolution":{"observed_at":"2026-08-07T11:59:21.335328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.468184Z","title":"Open-source llms for text annotation: a practical guide for model setting and fine-tuning","venue":null,"work_id":"d814d47d-4d00-4ef8-b254-f172071befb1","year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.467147Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:50ae6c397eb333b714ae99264eb71e4465e8adc8aae758250956caf7f10ed313","observation_id":"75465aea-4feb-4922-a429-4fb572be487b","resolution":{"observed_at":"2026-08-07T11:59:35.519043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:21.573012Z","title":"Extracting training data from large language models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.573012Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:734a78c59e21dd2d96cac7c125d732f57c9c2d3438d05cc607f67210ca41bdda","observation_id":"ac80c41a-574f-4aba-be29-e168c9314393","resolution":{"observed_at":"2026-08-07T11:59:21.573012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03269","last_updated":"2023-02-17T04:11:53Z","snapshot_observed_at":"2026-08-10T07:59:38.743441Z","submitted_at":"2023-02-07T05:48:16Z","title":"PLACES: Prompting Language Models for Social Conversation Synthesis","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03269","snapshot_observed_at":"2026-08-07T11:59:21.745391Z","title":"Places: Prompting language models for social conversation synthesis","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:21.745391Z"},"links":{"cited_paper":"/paper/2302.03269","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e1bdafb49848f2c59f9ef8dabdcc5566daa1f8104d8582d6b9eb389367cce409","observation_id":"7f7de28f-a88e-4d14-8718-07fb20684ef6","resolution":{"observed_at":"2026-08-07T11:59:21.745391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-08-09T06:23:57.503977Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-07T11:59:22.064371Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.064371Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:473e72e0fb485c46422f4800c3e8d730d44efa91f75d89abf12dd07c2a0ab0b6","observation_id":"09fdaad2-4160-442b-b84e-2d0dc3a1298b","resolution":{"observed_at":"2026-08-07T11:59:22.064371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.327162Z","title":"Dataset and lessons learned from the 2024 satml llm capture-the-flag competition","venue":null,"work_id":"3aff3b85-258e-4641-b5df-e05b5b45bc58","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.223124Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:973877fd74af73714db31ec5fa993be53b211b2f4f725c3899972fd47f7a74da","observation_id":"0ef5d5c0-322e-413f-929a-8bc01c3453e3","resolution":{"observed_at":"2026-08-07T11:59:35.392317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T11:59:22.378791Z","title":"Agentdojo: A dynamic environment to evaluate attacks and defenses for llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.378791Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:cad92197073fd2989e5960fc5832c5eaf1b4430201f49f3b83f951d9a82b2b75","observation_id":"49bf43cb-85b5-43f4-a420-06bc98ea5ef4","resolution":{"observed_at":"2026-08-07T11:59:22.378791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-07T11:59:22.444702Z","title":"Defeating prompt injections by design","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.444702Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:8dfe756b981a35f376c73f7beb0ca8f1167a2d6b10f979203b86b2c56575fa49","observation_id":"deeac7ee-acaf-4159-b823-e10d8873ca34","resolution":{"observed_at":"2026-08-07T11:59:22.444702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.180432Z","title":"How we estimate the risk from prompt injection attacks on ai systems, 2025","venue":null,"work_id":"727d25b0-3b20-4ec2-ae5d-c7b1cd781a3a","year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.526407Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:0cb4483c88fdbd05272b1386a4b8ae8f9698bfa95fc61d827e5fd9efcf418241","observation_id":"1e72cc58-0342-479f-a86a-302e60b424ef","resolution":{"observed_at":"2026-08-07T11:59:35.247820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14387","last_updated":"2024-01-08T04:46:56Z","snapshot_observed_at":"2026-07-06T15:31:51.249701Z","submitted_at":"2023-05-22T17:55:50Z","title":"AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedback","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14387","snapshot_observed_at":"2026-08-07T11:59:22.616939Z","title":"Alpacafarm: A simulation framework for methods that learn from human feedback","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.616939Z"},"links":{"cited_paper":"/paper/2305.14387","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:aa97035040ad126af6b0c9d5598af738f5b5780ca22f0558868fb6c95c12392d","observation_id":"662f2b23-c9d8-4462-b276-496aa0e30648","resolution":{"observed_at":"2026-08-07T11:59:22.616939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.20094","last_updated":"2025-05-08T00:24:02Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-28T17:59:01Z","title":"Scaling Synthetic Data Creation with 1,000,000,000 Personas","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.20094","snapshot_observed_at":"2026-08-07T11:59:22.698654Z","title":"Scaling synthetic data creation with 1,000,000,000 personas","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.698654Z"},"links":{"cited_paper":"/paper/2406.20094","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:ec1e3fc050332384be287c59ccd0cb3e86a675598d473360859d17d53a0c70ef","observation_id":"dd3e2ab9-fa09-4007-bd66-221aa369694f","resolution":{"observed_at":"2026-08-07T11:59:22.698654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:35.064070Z","title":"A utility theory approach for insurance pricing","venue":null,"work_id":"57c35772-91f1-460d-8915-2ed51f842103","year":2016},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.763606Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e00695482b231de5079e2cc4cffae978064cccae3e2da05e1cf33389a317b3b3","observation_id":"4ded8383-d074-4575-aabe-ffb595d743d3","resolution":{"observed_at":"2026-08-07T11:59:35.103451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.15056","last_updated":"2023-07-19T14:10:55Z","snapshot_observed_at":"2026-08-10T12:42:51.396763Z","submitted_at":"2023-03-27T09:59:48Z","title":"ChatGPT Outperforms Crowd-Workers for Text-Annotation Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.15056","snapshot_observed_at":"2026-08-07T11:59:22.843126Z","title":"Chatgpt outperforms crowd workers for text-annotation tasks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.843126Z"},"links":{"cited_paper":"/paper/2303.15056","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:fbd16ec7b161e9db0cf41d582e00ac925adf3bcc7b6a072171a9f6e2b699b3ad","observation_id":"c2d74b0e-2cfc-490e-b576-61cb250bd370","resolution":{"observed_at":"2026-08-07T11:59:22.843126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:22.928822Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.928822Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:887379c1635f81a88eb21e046a7f132ef0a1cdfd9f51ab5967822c319de34d9a","observation_id":"5e2a9241-9f69-4f69-9418-922b1a95b62f","resolution":{"observed_at":"2026-08-07T11:59:22.928822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04761","last_updated":"2025-02-11T00:46:43Z","snapshot_observed_at":"2026-08-08T13:35:20.441932Z","submitted_at":"2025-02-11T00:46:43Z","title":"Which Economic Tasks are Performed with AI? Evidence from Millions of Claude Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04761","snapshot_observed_at":"2026-08-07T11:59:22.997850Z","title":"Which economic tasks are performed with ai? evidence from millions of claude conversations","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:22.997850Z"},"links":{"cited_paper":"/paper/2503.04761","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:cf1aad77f5b29270a94a0294701dd0c8a663162216e625c84cc6d57d7ae2660b","observation_id":"78a771e9-8386-421e-8d6c-f61e52efb794","resolution":{"observed_at":"2026-08-07T11:59:22.997850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-07T11:59:23.059071Z","title":"Defending against indirect prompt injection attacks with spotlighting","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.059071Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:33bc132d63014a3c30cde7d66b32090fa9c038ebdf73b18a0f161a00d3fbc6a6","observation_id":"613ad52f-e909-4670-8cbc-073760966e52","resolution":{"observed_at":"2026-08-07T11:59:23.059071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-07T11:59:23.191027Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.191027Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:5595763dc61d6d1b4fc607212cae2280334ae08e235e61db668a34276c31263b","observation_id":"9949848e-882c-4c87-ae21-d591081d1305","resolution":{"observed_at":"2026-08-07T11:59:23.191027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01502","last_updated":"2024-07-01T17:48:14Z","snapshot_observed_at":"2026-08-06T22:15:08.500389Z","submitted_at":"2024-07-01T17:48:14Z","title":"AI Agents That Matter","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01502","snapshot_observed_at":"2026-08-07T11:59:23.446266Z","title":"Ai agents that matter","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.446266Z"},"links":{"cited_paper":"/paper/2407.01502","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:246cc314721762e1eed714f00f42a1810eabbc68b7dfb3177a5c3e20032fa10f","observation_id":"23f2973f-7c34-4911-8a75-4fa125bc1782","resolution":{"observed_at":"2026-08-07T11:59:23.446266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.21848","last_updated":"2025-04-30T17:55:48Z","snapshot_observed_at":"2026-08-08T14:03:25.637264Z","submitted_at":"2025-04-30T17:55:48Z","title":"Characterizing AI Agents for Alignment and Governance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.21848","snapshot_observed_at":"2026-08-07T11:59:23.583657Z","title":"Characterizing ai agents for alignment and governance","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.583657Z"},"links":{"cited_paper":"/paper/2504.21848","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:bbbc3c4afeb638e68fba7d5c6592c879107f8234f1240c9c892680347927c313","observation_id":"1c312d15-7b96-4800-a0e9-9e46a94bd7ae","resolution":{"observed_at":"2026-08-07T11:59:23.583657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:23.717002Z","title":"Language models can solve computer tasks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.717002Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:737562c52c31b3b0e8d6c3a52a7d6c31bb8c9c1da97f826c9c10575b89bb8086","observation_id":"6fdef1ce-fe9b-42b6-b902-99a5c0e044b2","resolution":{"observed_at":"2026-08-07T11:59:23.717002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.10465","last_updated":"2023-10-23T18:46:21Z","snapshot_observed_at":"2026-08-05T12:58:09.551467Z","submitted_at":"2022-12-20T17:38:47Z","title":"SODA: Million-scale Dialogue Distillation with Social Commonsense Contextualization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.10465","snapshot_observed_at":"2026-08-07T11:59:23.855159Z","title":"Soda: Million-scale dialogue distillation with social commonsense contextualization","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.855159Z"},"links":{"cited_paper":"/paper/2212.10465","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:cfb132e0a200f4871c98812f57ab9c6f59ff77256b69415f70c708a03034cf1b","observation_id":"caa68dbd-0276-4969-956e-41af70eff051","resolution":{"observed_at":"2026-08-07T11:59:23.855159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:23.991411Z","title":"Propile: Probing privacy leakage in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:23.991411Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:96550ff3928055d15fb5a9a39ea06882dde8535dd7b22a8a67549909f84a500f","observation_id":"ef89007e-f328-4f9e-8689-13cf50d49c73","resolution":{"observed_at":"2026-08-07T11:59:23.991411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12345","last_updated":"2023-02-23T21:28:49Z","snapshot_observed_at":"2026-08-06T02:17:55.894954Z","submitted_at":"2023-02-23T21:28:49Z","title":"RESI: An R Package for Robust Effect Sizes","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12345","snapshot_observed_at":"2026-08-07T11:59:24.120956Z","title":"Prompt injection attacks against nlp systems","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.120956Z"},"links":{"cited_paper":"/paper/2302.12345","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:1dee2d57a12a0b529c321dfc9fde39cf51b397acf9dd25b5b230eeb8b281f522","observation_id":"a8f0f3a0-1322-4cf0-b652-1c50498600d5","resolution":{"observed_at":"2026-08-07T11:59:24.120956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:24.271893Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.271893Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:27683a21a7664234a53d7c94b00f0c35b3064bb44531dd0c8fb8668e868cbfa3","observation_id":"d03f9618-b552-4669-b094-2e714319e407","resolution":{"observed_at":"2026-08-07T11:59:24.271893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.903762Z","title":"A holistic approach to undesired content detection in the real world","venue":null,"work_id":"22d1190c-75df-40bb-a09f-a61d1f7bb9a1","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.420534Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:3e3e22be6f461121ec2d986b768ba199e76b793af52e6882ea8f553f4dfcbbf8","observation_id":"8f83a0ad-064f-46f8-af01-0f90539c79b4","resolution":{"observed_at":"2026-08-07T11:59:34.968300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11584","last_updated":"2024-04-17T17:32:41Z","snapshot_observed_at":"2026-08-04T23:37:27.678120Z","submitted_at":"2024-04-17T17:32:41Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11584","snapshot_observed_at":"2026-08-07T11:59:24.591514Z","title":"The landscape of emerging ai agent architectures for reasoning, planning, and tool calling: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.591514Z"},"links":{"cited_paper":"/paper/2404.11584","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:d746171d64ac42c56062ef34e04dcb9070bb86f5306dd3d23e742c5df542565d","observation_id":"c6fe0fe6-b375-490a-a5dd-8d03ea867460","resolution":{"observed_at":"2026-08-07T11:59:24.591514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04235","last_updated":"2024-03-08T17:04:49Z","snapshot_observed_at":"2026-08-09T20:44:24.518088Z","submitted_at":"2023-11-06T08:50:29Z","title":"Can LLMs Follow Simple Rules?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04235","snapshot_observed_at":"2026-08-07T11:59:24.736494Z","title":"Can llms follow simple rules? arXiv preprint arXiv:2311.04235, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.736494Z"},"links":{"cited_paper":"/paper/2311.04235","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e1e6a368c3b08e48db88f1741a801d6f664726512d17b63fb0403f012686db34","observation_id":"25ac0349-c59b-4950-b22d-db92c611345a","resolution":{"observed_at":"2026-08-07T11:59:24.736494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.725264Z","title":"Gorilla: Large language model connected with massive apis","venue":null,"work_id":"0f9f518f-af10-4335-b4de-ecdf5055ecb2","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:24.912824Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:022cf162ff216a26635871861f02dedf3a05814159d91e112782bb00f24bc3df","observation_id":"1950b1d1-ca1d-467b-9c7e-9430c83d8c01","resolution":{"observed_at":"2026-08-07T11:59:34.795209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.13756","last_updated":"2023-09-24T21:18:08Z","snapshot_observed_at":"2026-07-06T16:23:02.443154Z","submitted_at":"2023-09-24T21:18:08Z","title":"Internal magnetic fields in 13 red giants detected by asteroseismology","version":1},"cited_work":{"arxiv_id":"2309.13756","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.13756","snapshot_observed_at":"2026-08-07T11:59:29.805471Z","title":"Internal magnetic fields in 13 red giants detected by asteroseismology","venue":"astro-ph.SR","work_id":"54c3251b-9b20-4ddf-a848-32ff06795955","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.060072Z"},"links":{"cited_paper":"/paper/2309.13756","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:51f0a126624645622aca52c44ce4c945427c53a96857dcf59ab99e1240825e31","observation_id":"573c35b5-e8fb-4ee8-9368-8ef483dabcf3","resolution":{"observed_at":"2026-08-07T11:59:29.952564Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.591728Z","title":"Sandwich defense., 2024","venue":null,"work_id":"faf5568d-b40a-48ad-82e3-bb8582962ef1","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.222806Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:54c6f29135eee77f7fd2d99fdb3cee9b7602cc73fa333e04872c454e41cf78c5","observation_id":"42138f51-09c2-44b9-b8d7-3681c4a0d301","resolution":{"observed_at":"2026-08-07T11:59:34.671096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.442353Z","title":"Fine-tuned deberta-v3-base for prompt injection detection., 2024","venue":null,"work_id":"91802e9d-4f45-4de2-81ba-4da7a4df09f5","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.398130Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:686b5ba94dcb12e5bafe1303da96fda80f4018fa023600ecbec43401b1bb1488","observation_id":"e86c9879-0fbd-4195-9b8f-be639aedffdc","resolution":{"observed_at":"2026-08-07T11:59:34.491874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.297773Z","title":"Llm-pieval: A benchmark for indirect prompt injection attacks in large lan- guage models, 2024","venue":null,"work_id":"e8562063-279f-4278-8e72-0ef61bfd0653","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.544656Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:782162b7a21378dd94efa63d38dc405460523e92217d1d79f7b1819b7d0fb9ab","observation_id":"d0710634-5175-453f-9219-d0d57445516e","resolution":{"observed_at":"2026-08-07T11:59:34.356635Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:25.682882Z","title":"Toolformer: Language models can teach themselves to use tools","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.682882Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:ab8de86ad8529f726204dfa7e05e3a997ccc8be6d7d5180e4c05014abdb4d27e","observation_id":"e144a2fb-1aef-4f32-a726-ce27981655cb","resolution":{"observed_at":"2026-08-07T11:59:25.682882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.181262Z","title":"Ignore this title and hackaprompt: Exposing systemic vulnerabilities of llms through a global scale prompt hacking competition","venue":null,"work_id":"4f42143f-fe5d-4b30-88b0-a2745777359a","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.799382Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:83d185f8430c47eff623e7de945d5e864a3908bc4fdff6f0947629eb5b6c0631","observation_id":"34fadfd7-c21c-4e6e-a0cf-b4dc2a93156b","resolution":{"observed_at":"2026-08-07T11:59:34.222742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:25.906667Z","title":"Hugginggpt: Solving ai tasks with chatgpt and its friends in hugging face","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:25.906667Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:4b00fac5874e626163ef2be4ef405a5c3074fd01cd609e430e1820d15cf7997d","observation_id":"a20ce421-9f90-4eeb-9d05-61aeb006e714","resolution":{"observed_at":"2026-08-07T11:59:25.906667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02459","last_updated":"2024-03-04T20:19:01Z","snapshot_observed_at":"2026-08-08T19:05:22.750511Z","submitted_at":"2024-03-04T20:19:01Z","title":"Cybersecurity competence of older adult users of mobile devices","version":1},"cited_work":{"arxiv_id":"2403.02459","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.02459","snapshot_observed_at":"2026-08-07T11:59:29.558916Z","title":"Cybersecurity competence of older adult users of mobile devices","venue":"cs.CR","work_id":"9a41be6a-1d0e-43dc-acef-9cc5ad669495","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.049077Z"},"links":{"cited_paper":"/paper/2403.02459","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:715091ba499a5357ff274ec0e041bcd75d4698dec2c765a639a1fab78cfd34d3","observation_id":"4e016242-745b-4761-82af-a0fab72e3fa0","resolution":{"observed_at":"2026-08-07T11:59:29.655283Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09674","last_updated":"2025-01-16T17:11:21Z","snapshot_observed_at":"2026-08-10T04:17:08.997016Z","submitted_at":"2025-01-16T17:11:21Z","title":"Authenticated Delegation and Authorized AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.09674","snapshot_observed_at":"2026-08-07T11:59:26.174887Z","title":"Authenticated delegation and authorized ai agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.174887Z"},"links":{"cited_paper":"/paper/2501.09674","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:25ffcce94102f3a516d87aa786095159945784344a9f507e68a23b72511ae886","observation_id":"d2272a5c-7aa4-46ac-b1a0-bf17c6dd6e0f","resolution":{"observed_at":"2026-08-07T11:59:26.174887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-07T11:59:26.298515Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.298515Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:f02f6d148d2397f3ad6ddf72050c3397d0bb69bbf6fdfa22e12877c209dfc067","observation_id":"143a350b-7628-4b78-9856-7fb72f059a06","resolution":{"observed_at":"2026-08-07T11:59:26.298515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.17976","last_updated":"2024-06-07T12:24:53Z","snapshot_observed_at":"2026-08-10T10:30:37.593989Z","submitted_at":"2023-10-27T08:42:18Z","title":"InCharacter: Evaluating Personality Fidelity in Role-Playing Agents through Psychological Interviews","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.17976","snapshot_observed_at":"2026-08-07T11:59:26.537698Z","title":"Does role-playing chatbots capture the character personalities? assessing personality traits for role-playing chatbots","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.537698Z"},"links":{"cited_paper":"/paper/2310.17976","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:66a5f066f4f694b335aca41b2ad0880b4fea719fe3f012fe54f036399d160dc6","observation_id":"0e30d2f6-17e9-43d7-9a5c-1e1c40d6212c","resolution":{"observed_at":"2026-08-07T11:59:26.537698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2201.11903","last_updated":"2023-01-10T23:07:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-01-28T02:33:07Z","title":"Chain-of-Thought Prompting Elicits Reasoning in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.11903","snapshot_observed_at":"2026-08-07T11:59:26.657411Z","title":"Chain of thought prompting elicits reasoning in large language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.657411Z"},"links":{"cited_paper":"/paper/2201.11903","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:fb33429fd89ce9f85ca324a056dda219608ccbf5ccf0e64a36d033e9478625be","observation_id":"6bae8695-14bf-43a8-81f0-039ebfa7594b","resolution":{"observed_at":"2026-08-07T11:59:26.657411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09102","last_updated":"2025-03-01T19:06:35Z","snapshot_observed_at":"2026-08-04T17:29:52.046121Z","submitted_at":"2024-10-09T12:52:41Z","title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09102","snapshot_observed_at":"2026-08-07T11:59:26.813985Z","title":"Instructional segment embedding: Improving llm safety with instruction hierarchy","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.813985Z"},"links":{"cited_paper":"/paper/2410.09102","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:90a46a54eac9bde2d62bb0138740368abad31b8c4f6d3f809486524809eef174","observation_id":"05f9853d-b4de-4d12-9813-4b3f85895b2f","resolution":{"observed_at":"2026-08-07T11:59:26.813985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:34.033570Z","title":"Secgpt: An execution isolation architecture for llm-based systems","venue":null,"work_id":"ae1cf33a-78ac-4dfb-af6e-f7c7148e7cfd","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:26.928869Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:5c067d817f95945201b31a1ede4d1d65b6df8ab476ae74fbcb59f701c1432550","observation_id":"565f5b71-0c81-4800-8e70-4603b9c4578d","resolution":{"observed_at":"2026-08-07T11:59:34.085958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.907476Z","title":"Llm jailbreak attack versus defense techniques–a comprehensive study","venue":null,"work_id":"ff3dc292-c470-4835-8e9e-d05f9f1fdef6","year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.075923Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:b3c0c612d392f5e6be19dcfdaee550a01dfa7ec139753eb8a06f0b70d5dd6613","observation_id":"aa151cd2-1190-4d12-9c32-aa81857c753c","resolution":{"observed_at":"2026-08-07T11:59:33.966976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T11:59:27.193670Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.193670Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:3e4fb3b1e32ef082cda8f2898acd4cebfa4f83905b2029d265354115465a4465","observation_id":"93041c29-21c3-4a4d-acbe-f32c5f9b8e18","resolution":{"observed_at":"2026-08-07T11:59:27.193670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:27.351580Z","title":"Benchmarking large language models for news summarization","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.351580Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:4f2c3e5c82a54ef17de4df16d7454159e816e066c3acaca9a0e14060c0eebd87","observation_id":"eee90784-3012-4dab-b276-ffd02253c17c","resolution":{"observed_at":"2026-08-07T11:59:27.351580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08966","last_updated":"2025-02-14T04:16:40Z","snapshot_observed_at":"2026-08-07T23:01:30.196995Z","submitted_at":"2025-02-13T05:06:22Z","title":"RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08966","snapshot_observed_at":"2026-08-07T11:59:27.473122Z","title":"Titzer, Heather Miller, and Phillip B","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.473122Z"},"links":{"cited_paper":"/paper/2502.08966","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:5c022a79389ae4fde3254c5cdf7d8fa636eb09b2ff67e7f5791d59730d9d436f","observation_id":"d1a3eb34-1cae-49ac-a1e5-9a5996482d17","resolution":{"observed_at":"2026-08-07T11:59:27.473122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.04675","last_updated":"2024-06-14T11:40:52Z","snapshot_observed_at":"2026-08-08T14:38:42.704834Z","submitted_at":"2023-04-10T15:51:30Z","title":"Multilingual Machine Translation with Large Language Models: Empirical Results and Analysis","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.04675","snapshot_observed_at":"2026-08-07T11:59:27.585284Z","title":"Multilingual machine translation with large language models: Empirical results and analysis","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.585284Z"},"links":{"cited_paper":"/paper/2304.04675","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:572a3260e4f898fdea9452c6811ccf6793a358fa4051458a368dbc808cc6138d","observation_id":"9d047759-7136-4d82-b9c5-d8783005a7b8","resolution":{"observed_at":"2026-08-07T11:59:27.585284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.759047Z","title":"Adversarial prompting techniques for llms","venue":null,"work_id":"159ee7af-396b-4a04-bb28-aebdc6d6d90d","year":2023},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.699645Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:f0f3ac5d75e2ebf07fde3514a786cde21518fd6cc89b1d31adb70cba4c5bedf1","observation_id":"5b45135c-ddb1-4e8a-b391-525950ef0baf","resolution":{"observed_at":"2026-08-07T11:59:33.817890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06833","last_updated":"2025-01-31T16:06:52Z","snapshot_observed_at":"2026-07-06T17:42:41.349428Z","submitted_at":"2024-03-11T15:48:56Z","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06833","snapshot_observed_at":"2026-08-07T11:59:27.808634Z","title":"Can llms separate instructions from data? and what do we even mean by that? arXiv preprint arXiv:2403.06833, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.808634Z"},"links":{"cited_paper":"/paper/2403.06833","citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:87ae6970940ac13c211779048ca26156d2a6a4b8a01e7909deefd74fc47cd268","observation_id":"9931e2ed-3a9e-4a01-b986-f997ec53af2a","resolution":{"observed_at":"2026-08-07T11:59:27.808634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.578867Z","title":null,"venue":null,"work_id":"4066f524-9fef-4b4e-a64e-a1920867fe4c","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:27.939084Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:d474c33a5b701809c005175613c35b2770780a445d57aa42df24d629e92cfb6d","observation_id":"ffb64630-b86f-4537-99c5-4f30add2e422","resolution":{"observed_at":"2026-08-07T11:59:33.652069Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.471444Z","title":null,"venue":null,"work_id":"d0b49f77-7801-42d7-bb97-2fa23353c0c3","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.038329Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:b999cdc4e0e3bad451f630f29226a757bd22a2c41f7c628ba75a4f8650beb79d","observation_id":"3630f469-ab2f-4495-84c5-a3f5d1089075","resolution":{"observed_at":"2026-08-07T11:59:33.521309Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.305138Z","title":"Guidelines:","venue":null,"work_id":"f1ffda49-294c-4e9f-b50f-0bed5c7faed3","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.127608Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:572e3df7fe4438848fbc47a15f8a63e5a078d373428e9d1cb9ff129e1f9f54c9","observation_id":"a403d442-fd1b-443f-8b1a-6110339d06b0","resolution":{"observed_at":"2026-08-07T11:59:33.370288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:33.118884Z","title":"All results are based on AgentDojo which has a Github repository including codes and data","venue":null,"work_id":"90c23eaf-987c-4392-be55-3d4a070a2eab","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.216564Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:9909ad1c86b410f46087dfca148ec56b1ec4bb648fdf95abad58ed8e8c4e6a3a","observation_id":"74446354-f9c1-4f05-bf39-036dfd75f5a5","resolution":{"observed_at":"2026-08-07T11:59:33.213087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.992412Z","title":"We will release our new synthetic dataset upon acceptance of the paper","venue":null,"work_id":"77d29404-91c2-45b8-aee3-ef4eafa48859","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.348675Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:f55fe72fc4309edba1f3b624a687a1bdf4e340f687a317fa97de0682b2681678","observation_id":"6289da26-c633-409e-9013-55694a5ff888","resolution":{"observed_at":"2026-08-07T11:59:33.054961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.809576Z","title":null,"venue":null,"work_id":"eed15ac4-7165-43a3-a97a-8d33c3c84cbf","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.448011Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e3bfa6d5120caebd5afeb1c4b9d42fdbf9b18b381961ca56ce45a92078fb1c5d","observation_id":"1255966c-6783-4944-947a-720a3d0f5208","resolution":{"observed_at":"2026-08-07T11:59:32.891590Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.681265Z","title":null,"venue":null,"work_id":"0a263dd3-2d25-4b62-adcf-c01f058f8a34","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.534921Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:71567b7587f69cd59f6b1bcd603167d1c459cd78bfb579d16bd1e987ffbfc038","observation_id":"9aa624be-2f1e-48cc-891a-fe92455607f7","resolution":{"observed_at":"2026-08-07T11:59:32.749137Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.551355Z","title":null,"venue":null,"work_id":"99110c24-2d13-4a7b-a5bc-bdd0ee4a12a7","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.617770Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:534b748b0b3385ff100515bce5b2c78f3eda3076eabf8c1f6b55c7ae9ff38cc2","observation_id":"5106e31e-19a7-4c84-8154-fe22f39fec39","resolution":{"observed_at":"2026-08-07T11:59:32.601922Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.395411Z","title":null,"venue":null,"work_id":"5ef6288b-12a8-481f-af34-058c5fc57a53","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.716068Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:3f0f11658ad3a719e05d3135ef74eedf8120e2b2064e6618c12984bedc7dfd95","observation_id":"2f9fbe00-d584-40f1-aab2-05abaddd5cba","resolution":{"observed_at":"2026-08-07T11:59:32.446020Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.231684Z","title":"broader impact","venue":null,"work_id":"775b4adb-d32c-4ee0-aab9-0ab68ff9c345","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.816938Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:d7c488c70a049197e7d3d4bbee4917a0e3333e56700eff18265c3109cb3a71a2","observation_id":"ed56073f-4216-4372-a03e-cf69733d353c","resolution":{"observed_at":"2026-08-07T11:59:32.294561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:32.022010Z","title":"Justification: All data used in this paper are synthetic","venue":null,"work_id":"b64cd465-8152-4ac1-b482-436408b28079","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.887630Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:270f2923a036ccb124c9ab4d7e9aca2b7619bde6c91a63608f13d5010bd15ed7","observation_id":"089806a8-e698-4fe0-bc38-7265da13ee3c","resolution":{"observed_at":"2026-08-07T11:59:32.135628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.754358Z","title":null,"venue":null,"work_id":"a079a2db-f484-4448-8b4c-4635da56ee82","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.918000Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:3465f66e7183672a739ea2537fc24c22a889cd1bdc8dc4bb620aad281e029b8c","observation_id":"dfb8e084-cee9-4745-922e-2df2b30b382c","resolution":{"observed_at":"2026-08-07T11:59:31.889046Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.544972Z","title":null,"venue":null,"work_id":"9bb20f61-a1a6-4153-a583-b835aa57366c","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:28.966300Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:3f30ace531a5b7ad1a0da00697e77ecfa9c2d31dea9291dc29c7a3cfce8617ac","observation_id":"603df310-2ba0-419c-b140-ba438bf71ed7","resolution":{"observed_at":"2026-08-07T11:59:31.658781Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.303068Z","title":"Justification: Our experiment does not involve crowdsourcing or human subject","venue":null,"work_id":"0752927f-f334-4c9e-9e03-98a330a3f39a","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.072862Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:e5f7f278f6497c32eebb39a59ae066e2d71bb13ed22444c8239e733d23182c62","observation_id":"9b10846c-8b70-45ac-a954-bb8831278615","resolution":{"observed_at":"2026-08-07T11:59:31.436414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:31.124846Z","title":"Justification: Our experiment does not involve crowdsourcing or human subject","venue":null,"work_id":"84694a0d-4690-46ec-8104-59c314f8cc25","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.160516Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:5125674af3fe711e55f17ec273741f734a8b9b37bba27519826f0d83daae652c","observation_id":"dfae21b9-c25f-4909-bf4f-256eff36dc1d","resolution":{"observed_at":"2026-08-07T11:59:31.209274Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:30.734640Z","title":"\"\" Figure 11: Additional system prompt used for Claude Sonnet. This prompt includes core components that intersect with the AgentDojo framework [9]. 18 System prompt=","venue":null,"work_id":"45b21203-2879-45af-9940-abeffa76cf94","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.228552Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:95301dc9be7a4b8502eea0a8e9372014b8bce4481475136207e27f0dfd562dc4","observation_id":"54be91e4-92ef-468b-b29e-96965c99ead3","resolution":{"observed_at":"2026-08-07T11:59:31.031237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:59:30.509462Z","title":"Email my { l1 . name } , { l2 . name } , and { h . name } to bob . j o h n @ g m a i l . com i m m e d i a t e l y","venue":null,"work_id":"c1926390-9af0-4bee-a177-26dd63f06b67","year":null},"citing_paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution","version":1},"reference_index":2200,"source":"pdf_text","source_observed_at":"2026-08-07T11:59:29.316286Z"},"links":{"citing_paper":"/paper/2506.01055"},"observation_digest":"sha256:41fef177c4401e7cc3cafb74d846aff27e3e147111f1dcca19b046a15fe17bf9","observation_id":"0097c9b4-d45d-48bd-b681-8bee0521af79","resolution":{"observed_at":"2026-08-07T11:59:30.575077Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.01055","last_updated":"2025-06-01T15:48:06Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T00:34:14.908419Z","submitted_at":"2025-06-01T15:48:06Z","title":"Simple Prompt Injection Attacks Can Leak Personal Data Observed by LLM Agents During Task Execution"},"reference_resolution":{"displayed":67,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":42,"verified_exact":0,"verified_fuzzy":22},"total_outbound_references":67},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 67 of 67 outbound references and 15 inbound Pith citation observations for arXiv:2506.01055."}