{"as_of":"2026-08-10T14:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:19b4d8c2340a83ad5a2088ed4d085a387ccc7112e63ece7bbe8ab61233044790","coverage":[{"denominator":169,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:34:45.025473Z","state":"measured"},{"denominator":114,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":114,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":14,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T04:46:04.507862Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-10T12:15:01.137692Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-07T04:46:04.507862Z","title":"A survey on autonomy-induced security risks in large model-based agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.09656","last_updated":"2025-08-07T08:42:17Z","snapshot_observed_at":"2026-08-08T06:47:05.646052Z","submitted_at":"2025-06-11T12:25:38Z","title":"Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives","version":2},"reference_index":130,"source":"pdf_text","source_observed_at":"2026-08-07T04:46:04.507862Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2506.09656"},"observation_digest":"sha256:3f5271392b5594b563216893c5da5ea0e9dc0847332b67cc5734d2cb627025d9","observation_id":"6d615243-9779-4637-8288-f93623c453cc","resolution":{"observed_at":"2026-08-07T04:46:04.507862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-05T16:20:59.375929Z","title":"A survey on autonomy-induced security risks in large model-based agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18725","last_updated":"2025-08-26T06:50:11Z","snapshot_observed_at":"2026-08-06T22:55:46.437867Z","submitted_at":"2025-08-26T06:50:11Z","title":"Toward Edge General Intelligence with Agentic AI and Agentification: Concepts, Technologies, and Future Directions","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:59.375929Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2508.18725"},"observation_digest":"sha256:15b93eb120936947e4d7a751f4520bef77f1aaf8eeba8052ecaaba058a6ed814","observation_id":"198721d6-9188-4e9d-8c49-5cbfa1f872b3","resolution":{"observed_at":"2026-08-05T16:20:59.375929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-03T05:16:36.777650Z","title":"Su, H., Luo, J., Liu, C., Yang, X., Zhang, Y ., Dong, Y ., and Zhu, J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.03012","last_updated":"2026-05-29T09:26:03Z","snapshot_observed_at":"2026-08-03T10:03:43.407282Z","submitted_at":"2026-02-03T02:27:16Z","title":"CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T05:16:36.777650Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2602.03012"},"observation_digest":"sha256:15c6a9a2eda6cd25d854fad7ebd377c3c2f0264641195069f73aa8341c262956","observation_id":"76dcc5d5-da65-4bcc-b2a4-18d5d6f85307","resolution":{"observed_at":"2026-08-03T05:16:36.777650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-07-06T23:15:07.159340Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-05-09T17:13:47.722098Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:84f0a4b3e2400ea4db830abfb9cbe316110549b791acbcb09c2c96d584cde75b","observation_id":"fa963aa1-030b-4ef8-8c35-0caa6ebf4845","resolution":{"observed_at":"2026-05-09T21:38:30.745446Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.01970","last_updated":"2026-05-15T06:42:15Z","snapshot_observed_at":"2026-07-06T23:15:07.159340Z","submitted_at":"2026-05-03T17:07:20Z","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","version":3},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-19T17:30:22.481943Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.01970"},"observation_digest":"sha256:15fd32b74af66bfac75debcde2f5c3a2ce19bc76b8cf7b0f50e12fb946b26aff","observation_id":"99c944da-b795-4d7a-b5cf-0e7df443db51","resolution":{"observed_at":"2026-05-19T17:32:41.256434Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.17830","last_updated":"2026-05-18T04:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-18T04:06:34Z","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-20T10:51:19.555985Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.17830"},"observation_digest":"sha256:85ba43521da8aab71bdc49ff979d75f19d5cc48b0b006efd925cf915587aece1","observation_id":"69c97b4e-13d7-4f7e-a6fc-2838e9f710b9","resolution":{"observed_at":"2026-05-20T10:53:13.292678Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-22T05:50:28.114140Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:d9cc5c8e0ba7727af5416bfb8bc73340639d2d0e64cbec510aa890accb6b65f9","observation_id":"cfccb24e-48fd-4179-881f-b2f6be633756","resolution":{"observed_at":"2026-05-22T05:51:07.870483Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.22643","last_updated":"2026-05-22T14:53:30Z","snapshot_observed_at":"2026-07-06T23:32:59.663926Z","submitted_at":"2026-05-21T15:50:18Z","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-25T06:05:27.736494Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.22643"},"observation_digest":"sha256:dc808ba78186f8c8ce2af91237eaa893cbb4347da346cb100ea0803d75612f3f","observation_id":"006ca104-d0c7-4469-9126-3673c4dd0f86","resolution":{"observed_at":"2026-05-25T06:06:42.923114Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2605.23330","last_updated":"2026-05-22T07:45:04Z","snapshot_observed_at":"2026-08-02T05:47:41.731065Z","submitted_at":"2026-05-22T07:45:04Z","title":"Security, Privacy, and Ethical Risks in OpenClaw","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-25T04:25:49.102385Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2605.23330"},"observation_digest":"sha256:220a38a40b376cfa499e00f12ea05eef678d9a2b41d71032af297e2709983f82","observation_id":"a5112819-29d0-4716-a6ba-1b1731cd6ac5","resolution":{"observed_at":"2026-05-25T04:26:37.732685Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":163,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:27d75c4fb3494f0bd945433dc076b9e7cf215d1019c074f948ce5b6eb79db5b5","observation_id":"0f516829-59bb-4286-b29b-ed24ae91203b","resolution":{"observed_at":"2026-06-27T13:20:56.839599Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":"2506.23844","doi":"10.48550/arxiv.2506.23844","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"arXiv preprint arXiv:2506.23844 , year=","venue":null,"work_id":"3200fe16-11a1-46ba-827b-0ff9f7622fb6","year":2025},"citing_paper":{"arxiv_id":"2607.01236","last_updated":"2026-05-01T03:16:35Z","snapshot_observed_at":"2026-07-07T00:06:49.412663Z","submitted_at":"2026-05-01T03:16:35Z","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-04T01:26:25.858521Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2607.01236"},"observation_digest":"sha256:926bf651f2c059cbd58474cd20ac4bf2f345c54688cdbf2a40128ef262c784bf","observation_id":"7c9986a8-daa3-41cb-ad0a-a8ae03215b34","resolution":{"observed_at":"2026-07-04T01:29:22.014001Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-02T04:49:08.830507Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.13594","last_updated":"2026-07-15T08:38:16Z","snapshot_observed_at":"2026-08-03T04:36:41.120672Z","submitted_at":"2026-07-15T08:38:16Z","title":"SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-02T04:49:08.830507Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2607.13594"},"observation_digest":"sha256:99629d95c1a1a7ee424d51f5a3b2e416d4c26584d1b075ff2a4f494088cb408d","observation_id":"230e8562-811b-4a14-9e38-05fd0b5e3836","resolution":{"observed_at":"2026-08-02T04:49:08.830507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-02T15:17:29.469563Z","title":"arXiv preprint arXiv:2506.23844 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-10T04:58:06.928355Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.469563Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:0c009d4ba54eda97f59abf8f6f317cbb226a5ffc8e1d6661c61d94c093631bf9","observation_id":"be1d85a4-5975-489e-9f0b-6517f3b994b3","resolution":{"observed_at":"2026-08-02T15:17:29.469563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-06T20:27:08.543275Z","title":"A survey on autonomy-induced security risks in large model-based agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04626","last_updated":"2026-08-05T09:32:35Z","snapshot_observed_at":"2026-08-09T23:14:59.216265Z","submitted_at":"2026-08-05T09:32:35Z","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T20:27:08.543275Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2608.04626"},"observation_digest":"sha256:8b95bbd83ee885ab9521cb0922bb615ae6c908e7676adb8c86d94714223bb10e","observation_id":"ec008fe7-5924-4d3d-8983-ec8e088c102e","resolution":{"observed_at":"2026-08-06T20:27:08.543275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.23844/citation-record","integrity":"/paper/2506.23844/integrity","json":"/paper/2506.23844/citation-record.json","paper":"/paper/2506.23844"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:38.557275Z","title":"AI agents vs. agentic AI: A conceptual taxonomy, applications and challenge,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.557275Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d47ae92f4a88bf638849f1688c713fd1dde1af87dac92d3426be5b1c45f2b049","observation_id":"6eeb3704-47b8-4281-811a-c9d9d2c7e51f","resolution":{"observed_at":"2026-08-06T21:34:38.557275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07864","last_updated":"2023-09-19T08:29:18Z","snapshot_observed_at":"2026-08-09T18:54:02.679174Z","submitted_at":"2023-09-14T17:12:03Z","title":"The Rise and Potential of Large Language Model Based Agents: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07864","snapshot_observed_at":"2026-08-06T21:34:38.623175Z","title":"The rise and potential of large language model based agents: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.623175Z"},"links":{"cited_paper":"/paper/2309.07864","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a4e6f7d0b0436c310e2a049a1c3a870bd183f230344d178d94a4aa4a74e631f9","observation_id":"2e603862-59e6-43c2-aebd-d2e39fc77603","resolution":{"observed_at":"2026-08-06T21:34:38.623175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07258","last_updated":"2022-07-12T23:45:14Z","snapshot_observed_at":"2026-08-02T09:20:40.804790Z","submitted_at":"2021-08-16T17:50:08Z","title":"On the Opportunities and Risks of Foundation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07258","snapshot_observed_at":"2026-08-06T21:34:38.701289Z","title":"On the opportunities and risks of foundation models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.701289Z"},"links":{"cited_paper":"/paper/2108.07258","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:1f1a7f5338aa76bf83344eb970e07eaff0bdf16fcb3483001c26195252ce1890","observation_id":"e834dbcd-986a-4867-b7e2-0ed5f569c16a","resolution":{"observed_at":"2026-08-06T21:34:38.701289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T21:34:38.780461Z","title":"GPT-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.780461Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:8e743de43b922f5f45c1624bfbf691b9386bea548fb99a526d1b338ad1308515","observation_id":"2e6f2507-0caa-4342-8004-93f63fe9c509","resolution":{"observed_at":"2026-08-06T21:34:38.780461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-06T21:34:38.849175Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.849175Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:9529056a661ea6489e465718d311d1f74ed8b2f341bcb4c1c1253fe6afd41f46","observation_id":"abb029f8-8b2b-4e05-bed7-a8c89db01836","resolution":{"observed_at":"2026-08-06T21:34:38.849175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:38.925865Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:38.925865Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:265dbc0f4a71256cd03acb57b0bc77edfb62a14c70aceb4764e299fe56bf5b10","observation_id":"e7883aee-4a51-42f8-8012-518524869186","resolution":{"observed_at":"2026-08-06T21:34:38.925865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.006117Z","title":"Tool- former: Language models can teach themselves to use tools,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.006117Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:5a34e28cfac1dfeac48ae6fa9f93c4fb8d11eb04cd42138dccbb95171aef7b26","observation_id":"dad2ead9-5940-461e-a1d2-38722464a5ce","resolution":{"observed_at":"2026-08-06T21:34:39.006117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09332","last_updated":"2022-06-01T19:08:11Z","snapshot_observed_at":"2026-08-07T17:14:39.278754Z","submitted_at":"2021-12-17T05:43:43Z","title":"WebGPT: Browser-assisted question-answering with human feedback","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09332","snapshot_observed_at":"2026-08-06T21:34:39.093898Z","title":"We- bgpt: Browser-assisted question-answering with human feed- back,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.093898Z"},"links":{"cited_paper":"/paper/2112.09332","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:8f6fad295a5cf7e9aed98af2513903980a6bededcc861d8638bf94c73d19bd36","observation_id":"ecb99e3d-37b8-4420-b4ff-5a0cc0ce9e85","resolution":{"observed_at":"2026-08-06T21:34:39.093898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-07T08:29:46.650400Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-06T21:34:39.161124Z","title":"Voyager: An open-ended embodied agent with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.161124Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2019e172b4a358d9478f1ea4db0ea4c024ec09727e3052ca3e502a68bdc4a221","observation_id":"27832121-fb5b-4432-a2bd-475c1b4f1055","resolution":{"observed_at":"2026-08-06T21:34:39.161124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.02224","last_updated":"2023-06-04T01:07:20Z","snapshot_observed_at":"2026-08-03T03:58:33.818386Z","submitted_at":"2023-06-04T01:07:20Z","title":"Auto-GPT for Online Decision Making: Benchmarks and Additional Opinions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.02224","snapshot_observed_at":"2026-08-06T21:34:39.227221Z","title":"Auto-GPT for online decision making: Benchmarks and additional opinions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.227221Z"},"links":{"cited_paper":"/paper/2306.02224","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:6c3ad7a5a0553abf92680d5a7a4c78ad562ebae88841170fec854a62b4c80de6","observation_id":"087a670e-3cec-4945-b4f7-792fb174b780","resolution":{"observed_at":"2026-08-06T21:34:39.227221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08689","last_updated":"2024-12-17T21:58:19Z","snapshot_observed_at":"2026-08-10T02:51:15.861279Z","submitted_at":"2024-06-12T23:16:45Z","title":"Security of AI Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.08689","snapshot_observed_at":"2026-08-06T21:34:39.298616Z","title":"Security of AI agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.298616Z"},"links":{"cited_paper":"/paper/2406.08689","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d388239a1c280b81149e3d48f6ce53abd6f6c909c65455ac4eca600ec63e3eb4","observation_id":"f14cd851-dca3-4ec3-b21e-3f9e191860d3","resolution":{"observed_at":"2026-08-06T21:34:39.298616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-08-08T22:28:26.004138Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-06T21:34:39.369708Z","title":"Autogen: Enabling next-gen llm applications via multi-agent conversation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.369708Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:7fb207d651a3eb720c2ae8b1e366491a1468253e3d55fb5efda35e12af9dc2e6","observation_id":"1c747047-170c-4dc4-bad8-2a627d409aaf","resolution":{"observed_at":"2026-08-06T21:34:39.369708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.459312Z","title":"Russell and P","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.459312Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:37c6b9740ca00fa3883089e1f1e6456e276d3f8cc03bb71ccf5df26f65b312cd","observation_id":"06d94858-2182-40a4-9cce-105f64cb65f9","resolution":{"observed_at":"2026-08-06T21:34:39.459312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.538544Z","title":"A comprehensive review of autonomous agents powered by large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.538544Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:516e199c8ceb4c69365ed754d80b3aedb7f8d252d6cd8bc6892e1bada073d84f","observation_id":"fd34a26c-09cb-4949-8b39-11ee4bd26c32","resolution":{"observed_at":"2026-08-06T21:34:39.538544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.11432","last_updated":"2025-03-02T04:04:03Z","snapshot_observed_at":"2026-08-02T07:33:16.089197Z","submitted_at":"2023-08-22T13:30:37Z","title":"A Survey on Large Language Model based Autonomous Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.11432","snapshot_observed_at":"2026-08-06T21:34:39.594616Z","title":"A survey on large language model based autonomous agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.594616Z"},"links":{"cited_paper":"/paper/2308.11432","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2a45c8ba0d67e7d9caaf32f14fbf2d72dbc2dd9a93bbdea9d7dd39def4e3b8ec","observation_id":"91404c7b-0159-4abd-88b8-c48212744891","resolution":{"observed_at":"2026-08-06T21:34:39.594616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.658799Z","title":"Large language model agent: A survey on methodology, applications and challenges,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.658799Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:156913111abe8399e0ced8efedb46e53a462240064e5d2c7888c2f96bb90b250","observation_id":"5b8b7097-6e55-43f9-b178-8404e3c809b6","resolution":{"observed_at":"2026-08-06T21:34:39.658799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.828186Z","title":"Managing Extreme AI Risks Amid Rapid Progress,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.828186Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ab8d0f53cd8bb0b76beebd4f9eccd71b05055d0f812a3e515ff4c9fc4146764d","observation_id":"2d4590b4-5384-4a3f-a762-c947903a5961","resolution":{"observed_at":"2026-08-06T21:34:39.828186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.911481Z","title":"Intelligence explosion: Evi- dence and import,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.911481Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:daf086469b0f9826e426fb3ea43d22aee65c36593e3b091ae60a61ac2ae497b2","observation_id":"00255d8c-58e8-4a13-a7af-e012feafece5","resolution":{"observed_at":"2026-08-06T21:34:39.911481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:39.977939Z","title":"The basic ai drives,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:39.977939Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:f3031fd5021f02c8f5f10f12c40a971880655f44b8650e5c5a845a43174ea29c","observation_id":"0f759ec0-29d6-49a6-92ac-2de28f35b40b","resolution":{"observed_at":"2026-08-06T21:34:39.977939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.15657","last_updated":"2025-02-24T18:14:15Z","snapshot_observed_at":"2026-08-08T14:17:37.842596Z","submitted_at":"2025-02-21T18:28:36Z","title":"Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.15657","snapshot_observed_at":"2026-08-06T21:34:40.081690Z","title":"Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.081690Z"},"links":{"cited_paper":"/paper/2502.15657","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e493d1fd9b822c8e2dbb203a806d4943d7daa55e21bcb3814932a491a24def63","observation_id":"6e4f2dc1-ae3a-4d51-819b-a562338971c1","resolution":{"observed_at":"2026-08-06T21:34:40.081690Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05282","last_updated":"2025-04-09T11:34:12Z","snapshot_observed_at":"2026-08-10T06:11:38.332196Z","submitted_at":"2024-11-05T15:47:23Z","title":"International Scientific Report on the Safety of Advanced AI (Interim Report)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05282","snapshot_observed_at":"2026-08-06T21:34:40.175733Z","title":"International Scientific Report on the Safety of Advanced AI: Interim Report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.175733Z"},"links":{"cited_paper":"/paper/2412.05282","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:816dffefa44d1ebb229335757d82333a3cd64fa75484c359829024a77c2c38f6","observation_id":"03136766-48f2-497b-b624-74be998cbbde","resolution":{"observed_at":"2026-08-06T21:34:40.175733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.262576Z","title":"Human-artificial in- teraction in the age of agentic ai: a system-theoretical approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.262576Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:f14b456e4216ba9b458d07e05e4c8201fc49be5d89d52c00d641250f595db5d5","observation_id":"8b8cbb28-9cb1-4e77-be1a-cf6550e816bd","resolution":{"observed_at":"2026-08-06T21:34:40.262576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.353642Z","title":"Agent foundations for aligning machine intelligence with human interests: a technical research agenda,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.353642Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3e3c89b88fb493d52988f05fff1c3b05884d4aee21aa051b773c58e2711de71b","observation_id":"4f37e41e-8222-40f6-b40a-584f6b3b09c6","resolution":{"observed_at":"2026-08-06T21:34:40.353642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.01560","last_updated":"2024-07-08T05:56:47Z","snapshot_observed_at":"2026-08-02T14:50:04.461434Z","submitted_at":"2023-02-03T06:06:27Z","title":"Describe, Explain, Plan and Select: Interactive Planning with Large Language Models Enables Open-World Multi-Task Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.01560","snapshot_observed_at":"2026-08-06T21:34:40.436061Z","title":"Describe, explain, plan and select: Interactive planning with large language models enables open-world multi-task agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.436061Z"},"links":{"cited_paper":"/paper/2302.01560","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ddcf024c63ad0273060ba5684734fc0288fbfb0f4fac7541f857124718fb0033","observation_id":"5f4ecb32-0cc7-4968-ba6b-2d35d5ec0ff1","resolution":{"observed_at":"2026-08-06T21:34:40.436061Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.522064Z","title":"AI agent security: Emerging threats and defense paradigms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.522064Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:48234be9bacf9bd54fc5d5fb3880e20b592174ca43215a86fe8365f113cea2bf","observation_id":"64d71958-ee2e-4f26-b1bb-ca5535f760d4","resolution":{"observed_at":"2026-08-06T21:34:40.522064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.589837Z","title":"AdvLM: Visual adversarial attacks on autonomous driving vision-language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.589837Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:36940f8982a0ed425cbc4e7ff30b8d17d06f4f7a90146c11732c8983b288be96","observation_id":"1c882dd1-6f23-471b-836c-71330cbf59dd","resolution":{"observed_at":"2026-08-06T21:34:40.589837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-06T21:34:40.687619Z","title":"Agent Security Bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.687619Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:cf339eb8fccc6970bf8c39ec9ac0cbd448dee3faf4fe216626f30e04bbc630d3","observation_id":"8674ac8d-2cdd-43ec-b332-a80abb8dfd35","resolution":{"observed_at":"2026-08-06T21:34:40.687619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.745087Z","title":"ASB: A security bench- mark for LLM-based autonomous agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.745087Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:0e0adf50ea176b918c1951a77b574942160af53c85b9de4fd3eb5d8ff54f83e1","observation_id":"2272082c-a451-4bf2-ae4a-16ba984047d5","resolution":{"observed_at":"2026-08-06T21:34:40.745087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20859","last_updated":"2024-07-30T14:35:31Z","snapshot_observed_at":"2026-07-06T18:53:57.980865Z","submitted_at":"2024-07-30T14:35:31Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20859","snapshot_observed_at":"2026-08-06T21:34:40.846006Z","title":"Breaking agents: Compromising autonomous LLM agents through malfunction amplification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.846006Z"},"links":{"cited_paper":"/paper/2407.20859","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:1b22e4950c79b30aef8ec4dcb41b53e97d5b25f50476765270a183ce51ae989d","observation_id":"38da46af-33d6-4c90-9f1c-191963725db3","resolution":{"observed_at":"2026-08-06T21:34:40.846006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:40.920603Z","title":"TrustAgent: Towards safe and trustworthy LLM-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.920603Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b1d3a9f1f798d189addc2d86482175858c52b06ce4278065b63d4643c5491fa8","observation_id":"32d3bc86-65ec-468a-9044-f6e34df00996","resolution":{"observed_at":"2026-08-06T21:34:40.920603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09648","last_updated":"2025-03-12T08:42:05Z","snapshot_observed_at":"2026-08-07T17:10:45.463485Z","submitted_at":"2025-03-12T08:42:05Z","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09648","snapshot_observed_at":"2026-08-06T21:34:40.994120Z","title":"A survey on trustwor- thy llm agents: Threats and countermeasures,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:40.994120Z"},"links":{"cited_paper":"/paper/2503.09648","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a574cd146b8bea5889583e0636f7781abdd50f16ba54a24e1b35a10177b7c495","observation_id":"428af265-4750-4626-988a-3b99fc665b03","resolution":{"observed_at":"2026-08-06T21:34:40.994120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-08T23:24:16.398221Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08586","snapshot_observed_at":"2026-08-06T21:34:41.058806Z","title":"Commercial llm agents are already vulnerable to simple yet dangerous attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.058806Z"},"links":{"cited_paper":"/paper/2502.08586","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:86e202e3e56405ffbf58270427b85fe3cd11432d82e1b6d37e303f8ac15103c3","observation_id":"26006061-4145-4732-9dd9-8613a9c4af73","resolution":{"observed_at":"2026-08-06T21:34:41.058806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-06T21:34:41.144903Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.144903Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a37e11d1c2da10582c9f837c7d6c096bcc7b56737c2251b75ae707318c0f874c","observation_id":"22d115e0-8aca-4c8c-bb73-4c8cc98bfe99","resolution":{"observed_at":"2026-08-06T21:34:41.144903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-10T10:06:47.379152Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-06T21:34:41.202535Z","title":"Securing agentic ai: A compre- hensive threat model and mitigation framework for generative ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.202535Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:0a827c950c3336108243199507ee84343242ffb8e20e11dc0fa28a295cce21d8","observation_id":"81654916-8d80-4015-9ae5-5f06c436e780","resolution":{"observed_at":"2026-08-06T21:34:41.202535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.03428","last_updated":"2024-01-07T09:08:24Z","snapshot_observed_at":"2026-07-06T17:12:26.471069Z","submitted_at":"2024-01-07T09:08:24Z","title":"Exploring Large Language Model based Intelligent Agents: Definitions, Methods, and Prospects","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.03428","snapshot_observed_at":"2026-08-06T21:34:41.287590Z","title":"Exploring large language model based intelligent agents: Definitions, methods, and prospects,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.287590Z"},"links":{"cited_paper":"/paper/2401.03428","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ab0d6d642d9afd65f215d948c2786bc38ff9d57ac758616d8c97cb7512fdf962","observation_id":"8a2d8925-c878-4c34-add3-807a6e124bd9","resolution":{"observed_at":"2026-08-06T21:34:41.287590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01616","last_updated":"2025-06-02T12:56:27Z","snapshot_observed_at":"2026-08-08T16:00:43.942253Z","submitted_at":"2025-06-02T12:56:27Z","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01616","snapshot_observed_at":"2026-08-06T21:34:41.371201Z","title":"Mla-trust: Benchmarking trustworthiness of multimodal llm agents in gui environments,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.371201Z"},"links":{"cited_paper":"/paper/2506.01616","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:73476bd9d92ac80bfcdae6f29483a2382c3b3ff1f95a79262af3fb3094e64c71","observation_id":"264fee2f-c180-46c9-9f0c-de7b6b451ea7","resolution":{"observed_at":"2026-08-06T21:34:41.371201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17815","last_updated":"2024-05-08T17:25:29Z","snapshot_observed_at":"2026-08-10T02:19:09.530261Z","submitted_at":"2024-03-26T15:52:51Z","title":"Ultrafast Heating Induced Suppression of $d$-band Dominance in the Electronic Excitation Spectrum of Cuprum","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17815","snapshot_observed_at":"2026-08-06T21:34:41.417648Z","title":"Alignment challenges in autonomous language agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.417648Z"},"links":{"cited_paper":"/paper/2403.17815","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:eb9c2fd8864491b9bc258f1cdf7d65c4c907139dce9b41087ece5c29d1c2d73d","observation_id":"f3712925-f4d9-409d-bac9-bcbdba263b5d","resolution":{"observed_at":"2026-08-06T21:34:41.417648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02544","last_updated":"2025-09-05T09:21:10Z","snapshot_observed_at":"2026-08-10T03:18:43.503087Z","submitted_at":"2024-08-05T15:16:22Z","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02544","snapshot_observed_at":"2026-08-06T21:34:41.494159Z","title":"Caution for the environment: Multimodal agents are susceptible to environmental distractions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.494159Z"},"links":{"cited_paper":"/paper/2408.02544","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2e2832dc063440d71c76dc51b8cda6d437dda00d53a452b486fda0e270ae0b7a","observation_id":"909901f2-88d7-4faf-95bb-c12875a4b8e7","resolution":{"observed_at":"2026-08-06T21:34:41.494159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-06T21:34:41.548239Z","title":"AgentDojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.548239Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:cd17f665cc037493708f881868c99c404e8393217f20791cdfcb4f8f7223843c","observation_id":"69267f17-4138-4585-856b-e550a0694b7c","resolution":{"observed_at":"2026-08-06T21:34:41.548239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10807","last_updated":"2025-06-12T10:17:02Z","snapshot_observed_at":"2026-07-06T20:07:01.648579Z","submitted_at":"2024-12-14T12:11:26Z","title":"Towards Action Hijacking of Large Language Model-based Agent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10807","snapshot_observed_at":"2026-08-06T21:34:41.624343Z","title":"Towards action hijacking of large language model-based agent,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.624343Z"},"links":{"cited_paper":"/paper/2412.10807","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:271554ed5d65508f42890b8af9c023aeb5a9373a57058c61e22b2647a93aa3bb","observation_id":"a7f02b92-2c31-43f7-afec-5de2bedf923e","resolution":{"observed_at":"2026-08-06T21:34:41.624343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:41.684835Z","title":"AgentPoison: Red-teaming LLM agents via poisoning memory or knowledge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.684835Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a60e970c1c1f0a7b2ae44df015feec05562159dc573c6fb6662b301be93d793b","observation_id":"4c8c80be-8613-4fde-9bec-2ca2ac4bac74","resolution":{"observed_at":"2026-08-06T21:34:41.684835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.08026","last_updated":"2025-07-28T00:39:17Z","snapshot_observed_at":"2026-08-07T17:14:26.196304Z","submitted_at":"2025-03-11T04:15:52Z","title":"In Prospect and Retrospect: Reflective Memory Management for Long-term Personalized Dialogue Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.08026","snapshot_observed_at":"2026-08-06T21:34:41.770109Z","title":"In prospect and retrospect: Reflective memory management for long-term personalized dialogue agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.770109Z"},"links":{"cited_paper":"/paper/2503.08026","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d828eabd848a8229f5b3e4e6d99857b8b209dc6f6d9121aaedb84baa77e1297f","observation_id":"9a2eae23-549a-430d-b7df-d6d9e4fe4acd","resolution":{"observed_at":"2026-08-06T21:34:41.770109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.08197","last_updated":"2025-02-26T03:24:58Z","snapshot_observed_at":"2026-07-06T19:31:23.072307Z","submitted_at":"2024-10-10T17:58:44Z","title":"From Exploration to Mastery: Enabling LLMs to Master Tools via Self-Driven Interactions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.08197","snapshot_observed_at":"2026-08-06T21:34:41.861450Z","title":"From exploration to mastery: Enabling LLMs to master tools via self-driven interac- tions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.861450Z"},"links":{"cited_paper":"/paper/2410.08197","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3ba9816f42b26f4aa3af24ca1a3aa6854f2b77b57fb8b084350964215b763a21","observation_id":"aec03e9e-5784-4527-b871-ad6e804718e9","resolution":{"observed_at":"2026-08-06T21:34:41.861450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10174","last_updated":"2025-02-14T14:09:43Z","snapshot_observed_at":"2026-08-09T21:43:08.134486Z","submitted_at":"2025-02-14T14:09:43Z","title":"Technical Risks of (Lethal) Autonomous Weapons Systems","version":1},"cited_work":{"arxiv_id":"2502.10174","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.10174","snapshot_observed_at":"2026-08-06T21:34:46.720686Z","title":"Technical Risks of (Lethal) Autonomous Weapons Systems","venue":"cs.CY","work_id":"ab7651a5-e1f3-4ef6-86e7-43135f24c375","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:41.921447Z"},"links":{"cited_paper":"/paper/2502.10174","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:4f2f96be5c8dc97e53c61a22178fb2a7c330dcc81018bc3b5c40a546e76c054d","observation_id":"977157d7-6733-404b-a42b-9b8d4999528b","resolution":{"observed_at":"2026-08-06T21:34:46.725127Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.053425Z","title":"Tool-induced misalign- ment in llm agents: A causal analysis,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.053425Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:fb4e65987069ff4f9e7c0707891125d42b2cc02f1b9993e2737784c00d50e765","observation_id":"d6ff52e3-31a5-41b4-a8b4-7093e0f8171a","resolution":{"observed_at":"2026-08-06T21:34:42.053425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.03793","last_updated":"2025-02-28T22:26:17Z","snapshot_observed_at":"2026-07-06T19:11:09.921186Z","submitted_at":"2024-09-03T10:14:51Z","title":"Safeguarding AI Agents: Developing and Analyzing Safety Architectures","version":3},"cited_work":{"arxiv_id":"2409.03793","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.03793","snapshot_observed_at":"2026-08-06T21:34:46.696018Z","title":"Safeguarding AI Agents: Developing and Analyzing Safety Architectures","venue":"cs.CR","work_id":"834575da-da98-46ed-ad8e-1f7bdaeec3f5","year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.123271Z"},"links":{"cited_paper":"/paper/2409.03793","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2742014eee62c83521c9827189424f305c2e5bae2fef229f38fbc650a4117360","observation_id":"2ffc464b-6cfb-47e6-8e5f-229f9f9395d4","resolution":{"observed_at":"2026-08-06T21:34:46.700244Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.209958Z","title":"Levels of AGI for op- erationalizing progress on the path to AGI,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.209958Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:5804d8313998f0c9baf368f2d88eee87930c085878c2c96b2efb7b4c60d497e5","observation_id":"29298ee2-e3a7-44b3-9c7b-e70d1bd4b67c","resolution":{"observed_at":"2026-08-06T21:34:42.209958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.15212","last_updated":"2025-02-21T04:58:40Z","snapshot_observed_at":"2026-08-08T16:23:32.085816Z","submitted_at":"2025-02-21T04:58:40Z","title":"Measuring AI agent autonomy: Towards a scalable approach with code inspection","version":1},"cited_work":{"arxiv_id":"2502.15212","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.15212","snapshot_observed_at":"2026-08-06T21:34:46.642340Z","title":"Measuring AI agent autonomy: Towards a scalable approach with code inspection","venue":"cs.AI","work_id":"af0042bb-7aa4-4385-a74a-a41211a3a89f","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.272852Z"},"links":{"cited_paper":"/paper/2502.15212","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:88d3c7f136dafdb1c1212c65d0bf05343b1351c22b310d67ac95ceb7a7f284f1","observation_id":"619a597c-02df-43ea-a70a-4c93ceebadf8","resolution":{"observed_at":"2026-08-06T21:34:46.646068Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.329388Z","title":"Levels of autonomy: Liability in the age of AI agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.329388Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:96a577059b5b90386f1bdef2f6e444558f12cd0eadb823aa698f71f62a2b73d8","observation_id":"3c2ceb45-0575-4099-ac6b-03b1804c430e","resolution":{"observed_at":"2026-08-06T21:34:42.329388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13172","last_updated":"2025-06-03T17:08:56Z","snapshot_observed_at":"2026-08-07T18:11:02.941133Z","submitted_at":"2025-02-17T19:55:53Z","title":"Unveiling Privacy Risks in LLM Agent Memory","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13172","snapshot_observed_at":"2026-08-06T21:34:42.378224Z","title":"Unveiling privacy risks in llm agent memory,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.378224Z"},"links":{"cited_paper":"/paper/2502.13172","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a491bc2977db2696170c592a67fc67444a01852348117197b11ec7bede301f0e","observation_id":"f436436a-a890-4535-bc56-111238c22b25","resolution":{"observed_at":"2026-08-06T21:34:42.378224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11584","last_updated":"2024-04-17T17:32:41Z","snapshot_observed_at":"2026-08-04T23:37:27.678120Z","submitted_at":"2024-04-17T17:32:41Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11584","snapshot_observed_at":"2026-08-06T21:34:42.446970Z","title":"The landscape of emerg- ing ai agent architectures for reasoning, planning, and tool call- ing: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.446970Z"},"links":{"cited_paper":"/paper/2404.11584","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:7c1cc651845c96292e3a6472acdb38de3de65bc8b3367c87b074e0e866a543af","observation_id":"60961e07-f761-4580-b2ac-070efa9d2d47","resolution":{"observed_at":"2026-08-06T21:34:42.446970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.500609Z","title":"Tptu: Task planning and tool usage of large language model-based ai agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.500609Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:0e2df2574ef871d3a582ffd2b1b7fa3eb3cda8e6b079af6d263ba72051a7bcf6","observation_id":"77b7a001-5b84-4a5b-bfbe-4cffdec567e6","resolution":{"observed_at":"2026-08-06T21:34:42.500609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05376","last_updated":"2023-10-02T17:03:01Z","snapshot_observed_at":"2026-08-10T03:24:49.554752Z","submitted_at":"2023-04-11T17:41:13Z","title":"ChemCrow: Augmenting large-language models with chemistry tools","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05376","snapshot_observed_at":"2026-08-06T21:34:42.547508Z","title":"Chemcrow: Augmenting large-language models with chemistry tools,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.547508Z"},"links":{"cited_paper":"/paper/2304.05376","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ffa9b85fb9a659e624e3b73f1a12b8031a2b2b680f50603de332c2fefd08b197","observation_id":"0df2bb78-542a-48c7-8c08-7df559393247","resolution":{"observed_at":"2026-08-06T21:34:42.547508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.19263","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:46.597874Z","title":"Dwim: Towards tool-aware visual reasoning via discrepancy-aware workflow generation & instruct-masking tuning,","venue":null,"work_id":"c04ae995-8b5b-4521-aaa3-740af9c18b80","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.623375Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:baf6f3561f3744a17b9439bf6f39c967748918b52cd8b87816186d96f172ff81","observation_id":"e747835f-9c20-4258-a197-52fddc4b279c","resolution":{"observed_at":"2026-08-06T21:34:46.603521Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17574","last_updated":"2024-06-06T18:40:47Z","snapshot_observed_at":"2026-08-09T19:59:05.401223Z","submitted_at":"2024-02-27T15:09:20Z","title":"Agent-Pro: Learning to Evolve via Policy-Level Reflection and Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17574","snapshot_observed_at":"2026-08-06T21:34:42.695008Z","title":"Agent-pro: Learning IEEE TRANSACTIONS ON PATTERN ANAL YSIS AND MACHINE INTELLIGENCE 18 to evolve via policy-level reflection and optimization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.695008Z"},"links":{"cited_paper":"/paper/2402.17574","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:44cde443649388963eee79e85d5697edc12e890d17980788eebe0fcb22011de8","observation_id":"69e25ffc-54ad-4ef8-b964-6658e1d7f3e8","resolution":{"observed_at":"2026-08-06T21:34:42.695008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07199","last_updated":"2024-08-13T20:52:13Z","snapshot_observed_at":"2026-08-01T22:07:45.419539Z","submitted_at":"2024-08-13T20:52:13Z","title":"Agent Q: Advanced Reasoning and Learning for Autonomous AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07199","snapshot_observed_at":"2026-08-06T21:34:42.699357Z","title":"Agent q: Advanced reasoning and learning for autonomous ai agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.699357Z"},"links":{"cited_paper":"/paper/2408.07199","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:52c0b3c42a4710d092b1f6d30cbd2db2659e41bf24dab7c8c5476cc9948b6c12","observation_id":"ae2c4d77-18e2-46e6-b375-3b55ec4a6cc0","resolution":{"observed_at":"2026-08-06T21:34:42.699357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.09701","last_updated":"2023-04-19T14:45:36Z","snapshot_observed_at":"2026-08-10T04:01:55.183615Z","submitted_at":"2023-04-19T14:45:36Z","title":"On the complexity of Dominating Set for graphs with fixed diameter","version":1},"cited_work":{"arxiv_id":"2304.09701","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.09701","snapshot_observed_at":"2026-08-06T21:34:46.480797Z","title":"On the complexity of Dominating Set for graphs with fixed diameter","venue":"math.CO","work_id":"11c44239-d489-4b97-ab21-8dc871919bc9","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.752161Z"},"links":{"cited_paper":"/paper/2304.09701","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:e6369b73e65e7b1aae32b10941a2ee9158f47075d580d9a4b5531c299ebe68e0","observation_id":"6df1a124-9a9b-42dc-b862-40087227c7d5","resolution":{"observed_at":"2026-08-06T21:34:46.484622Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T21:34:42.876489Z","title":"Universal and transferable ad- versarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.876489Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b8eb63d8e41631e57d1d7fd9ce914871e5e8b2b08f3917d18fe16b3069b1f253","observation_id":"50f4deff-09c4-4ce8-ba09-7bae97978e6c","resolution":{"observed_at":"2026-08-06T21:34:42.876489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:42.947013Z","title":"Auto-gpt: An experimental open-source attempt to make gpt-4 fully autonomous,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:42.947013Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:834d6b37efbfa50879343841a6db8931db864c490c194a90300a495700a074f2","observation_id":"7f3f3852-5890-4fc9-99a1-908c282ba66d","resolution":{"observed_at":"2026-08-06T21:34:42.947013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.057797Z","title":"Reflexion: Language agents with verbal reinforcement learn- ing,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.057797Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:badd2eb766af332f84a443553b487bd2a80d0f85e7740efbd8b925815cd55b1b","observation_id":"f04a2f7a-a352-4ca1-a4e8-c55a9bf2660a","resolution":{"observed_at":"2026-08-06T21:34:43.057797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.06696","last_updated":"2023-02-13T21:21:04Z","snapshot_observed_at":"2026-07-06T14:51:26.249912Z","submitted_at":"2023-02-13T21:21:04Z","title":"Current fluctuations in stochastically resetting particle systems","version":1},"cited_work":{"arxiv_id":"2302.06696","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.06696","snapshot_observed_at":"2026-08-06T21:34:46.455549Z","title":"Current fluctuations in stochastically resetting particle systems","venue":"cond-mat.stat-mech","work_id":"e8951305-0387-47e0-b5f2-284c0f35837c","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.166912Z"},"links":{"cited_paper":"/paper/2302.06696","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d0e18b753a4533409fb2cd808553312e4131803dc51bdeba635c1f45472cc2fa","observation_id":"3a2891e2-f166-4077-8bd3-83e246021fb5","resolution":{"observed_at":"2026-08-06T21:34:46.459809Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.309916Z","title":"Reinforcement learning with learned world models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.309916Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:0504ddd49f7ff941bad67a2ea4104590b1a8a55309b012038a308b0c915aaaca","observation_id":"a47370c5-854e-4379-a5cf-9a2041e6805e","resolution":{"observed_at":"2026-08-06T21:34:43.309916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.419080Z","title":"Agi ruin: A list of lethalities,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.419080Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:72cf43b1c02fa196c17da62acb0a57699b155bfd09cecf63b313230b24941c13","observation_id":"2886ba4e-4b26-4c23-9e6d-9009e89c1bc4","resolution":{"observed_at":"2026-08-06T21:34:43.419080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.505711Z","title":"Deep reinforcement learning from human preferences,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.505711Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:11ee1cf755ac0c2d713c8fe996c66dec6e84174418a3042549951ac94511ca9f","observation_id":"8c9b73a3-6fbb-4e44-aa90-8ace8707679d","resolution":{"observed_at":"2026-08-06T21:34:43.505711Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-06T21:34:43.602465Z","title":"Refusal- trained llms are easily jailbroken as browser agents,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.602465Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:2119ff0a57a299b36cd2e9e83885204cf31391612b3807d8fc1eae402c0cdd2b","observation_id":"e5d4f524-359c-4948-a729-9195ce0ab1da","resolution":{"observed_at":"2026-08-06T21:34:43.602465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10019","last_updated":"2024-10-05T06:50:15Z","snapshot_observed_at":"2026-08-06T04:21:24.397587Z","submitted_at":"2024-01-18T14:40:46Z","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.10019","snapshot_observed_at":"2026-08-06T21:34:43.710691Z","title":"R-judge: Benchmarking safety risk awareness for llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.710691Z"},"links":{"cited_paper":"/paper/2401.10019","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:92657b9c4efa02c88aa48660afc2270d10a4ecc8e5ed311309260d2feddfe45a","observation_id":"8c0ea063-b65e-4718-9e90-195ddb4cd025","resolution":{"observed_at":"2026-08-06T21:34:43.710691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.15624","last_updated":"2025-06-18T16:53:38Z","snapshot_observed_at":"2026-08-08T15:45:16.463188Z","submitted_at":"2025-06-18T16:53:38Z","title":"The Effect of State Representation on LLM Agent Behavior in Dynamic Routing Games","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.15624","snapshot_observed_at":"2026-08-06T21:34:43.819324Z","title":"The effect of state represen- tation on llm agent behavior in dynamic routing games,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.819324Z"},"links":{"cited_paper":"/paper/2506.15624","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ae3b89c4742c5ad7836fbb3ac82f7be116e52f03f0afcc7454eccb7dd17dd0d7","observation_id":"0be2d40a-9cd3-46f0-af53-a26bd9d8feb7","resolution":{"observed_at":"2026-08-06T21:34:43.819324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23020","last_updated":"2025-05-29T03:02:18Z","snapshot_observed_at":"2026-08-09T21:38:18.606762Z","submitted_at":"2025-05-29T03:02:18Z","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23020","snapshot_observed_at":"2026-08-06T21:34:43.923032Z","title":"Agentalign: Navigating safety alignment in the shift from informative to agentic large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.923032Z"},"links":{"cited_paper":"/paper/2505.23020","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:38e7d61ad6432ff7cc08063f4b2290b24d49594ba84178c31846d15d66cc7dbe","observation_id":"403ee0da-d620-44bd-9964-1f59e2872e81","resolution":{"observed_at":"2026-08-06T21:34:43.923032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.947115Z","title":"Medical hallucinations in foundation models and their impact on healthcare,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.947115Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:df05516a5605048cc279c4e87613dc8b5bc6fe341c23a2ce7dbd8c93caff3d22","observation_id":"46dfa291-4d68-4715-830c-48ff9b9dfb43","resolution":{"observed_at":"2026-08-06T21:34:43.947115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.08593","last_updated":"2020-01-08T23:02:36Z","snapshot_observed_at":"2026-08-08T07:44:49.921146Z","submitted_at":"2019-09-18T17:33:39Z","title":"Fine-Tuning Language Models from Human Preferences","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.08593","snapshot_observed_at":"2026-08-06T21:34:43.950381Z","title":"Fine-tuning language models from human preferences,","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.950381Z"},"links":{"cited_paper":"/paper/1909.08593","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ba7c76b6efa438f8d17e653e9fe751f40087d2c77c9d07a7619e3eea97b819dd","observation_id":"94da9eb3-4849-4793-a8c4-bba794d1800b","resolution":{"observed_at":"2026-08-06T21:34:43.950381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.953699Z","title":"Learning to sum- marize with human feedback,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.953699Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b1b1ac8042965fbf404087baa4df0ddbe486260746c5f0a6206402f41724f514","observation_id":"22227846-4b94-472e-9aaa-14955f0ba341","resolution":{"observed_at":"2026-08-06T21:34:43.953699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:43.956519Z","title":"Train- ing language models to follow instructions with human feed- back,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.956519Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:d1d74aff2a0dc358ac61e0ced4f82afa258502917d92c2a5bd49c53a1f64a480","observation_id":"319856d1-8632-42c6-a87f-27d88224e601","resolution":{"observed_at":"2026-08-06T21:34:43.956519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13295","last_updated":"2025-08-27T11:15:11Z","snapshot_observed_at":"2026-08-07T18:07:08.742124Z","submitted_at":"2025-02-18T21:32:24Z","title":"Demonstrating specification gaming in reasoning models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13295","snapshot_observed_at":"2026-08-06T21:34:43.969499Z","title":"Demonstrat- ing specification gaming in reasoning models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.969499Z"},"links":{"cited_paper":"/paper/2502.13295","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:53fe2160e2c9afab6d390403d2d79048a1fd3fb0b0cc0b8d80be6c8837d71ca2","observation_id":"3e43be03-6e6f-44e1-a570-0017ba183b36","resolution":{"observed_at":"2026-08-06T21:34:43.969499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.029256Z","title":"The emerged security and privacy of llm agent: A survey with case studies,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.029256Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:79f3f2ba1540fcebd06f7e56ef789b3384496926cb236d0bbdb084466e127afd","observation_id":"e03b3156-ada0-483e-aa53-0714ed4761e2","resolution":{"observed_at":"2026-08-06T21:34:44.029256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1606.06565","last_updated":"2016-07-25T17:23:29Z","snapshot_observed_at":"2026-07-06T05:00:46.434335Z","submitted_at":"2016-06-21T13:37:05Z","title":"Concrete Problems in AI Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1606.06565","snapshot_observed_at":"2026-08-06T21:34:44.098139Z","title":"Concrete problems in AI safety,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.098139Z"},"links":{"cited_paper":"/paper/1606.06565","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:85b0afa829c045e51e5577b591229cd6c9c918e9963d9e8d064df23428210129","observation_id":"a369de90-8bb0-45b2-941b-fd13bf90ec1a","resolution":{"observed_at":"2026-08-06T21:34:44.098139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.17259","last_updated":"2024-05-28T05:34:52Z","snapshot_observed_at":"2026-08-09T19:33:22.073259Z","submitted_at":"2023-12-22T05:59:00Z","title":"Empowering Working Memory for Large Language Model Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.17259","snapshot_observed_at":"2026-08-06T21:34:44.157801Z","title":"Empowering working memory for large language model agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.157801Z"},"links":{"cited_paper":"/paper/2312.17259","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:df82eb3f6a7bd7a4c4e1aa2272ee7e79a68429d9ec832039475ed2361d6eccdb","observation_id":"ced737db-ed17-4251-9604-b279bb611364","resolution":{"observed_at":"2026-08-06T21:34:44.157801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.214415Z","title":"OpenAI red teaming network,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.214415Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:90df0701098b4799f80d8cdfb07c3abcc7d25b527a9d7c6b2507925df8df5d61","observation_id":"50076240-2803-496c-9029-60a500ccd30b","resolution":{"observed_at":"2026-08-06T21:34:44.214415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.09819","last_updated":"2022-12-02T13:55:29Z","snapshot_observed_at":"2026-08-09T18:48:52.298773Z","submitted_at":"2022-10-18T12:57:30Z","title":"Eye-tracking based classification of Mandarin Chinese readers with and without dyslexia using neural sequence models","version":2},"cited_work":{"arxiv_id":"2210.09819","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.09819","snapshot_observed_at":"2026-08-06T21:34:46.307789Z","title":"Eye-tracking based classification of Mandarin Chinese readers with and without dyslexia using neural sequence models","venue":"cs.CL","work_id":"a62b18d1-140a-4259-af33-e39f1d6b0cd0","year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.299452Z"},"links":{"cited_paper":"/paper/2210.09819","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:85b44b791821570ed96602a366af43bad3509b30b60bc647f6d08f253ebbce52","observation_id":"40a447bc-b110-412c-93f2-2de9eace090a","resolution":{"observed_at":"2026-08-06T21:34:46.311852Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-06T21:34:44.358707Z","title":"Ignore previous prompt: Attack tech- niques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.358707Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:c602e9906c802b8c3ab49d7eea07686cf4acc6ecf77122bacd2609a848214369","observation_id":"a716f632-1209-46ce-890f-f1457daefe12","resolution":{"observed_at":"2026-08-06T21:34:44.358707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10196","last_updated":"2024-02-15T18:51:32Z","snapshot_observed_at":"2026-08-04T06:28:18.014892Z","submitted_at":"2024-02-15T18:51:32Z","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10196","snapshot_observed_at":"2026-08-06T21:34:44.440604Z","title":"A trembling house of cards? mapping adversarial attacks against language agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.440604Z"},"links":{"cited_paper":"/paper/2402.10196","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:4dd145fe77dac79cc8e4e18dddff46bb993c3150800138f46d7c6726ae6e1071","observation_id":"942cee6a-06f6-463d-84d7-e70722eeac6e","resolution":{"observed_at":"2026-08-06T21:34:44.440604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-06T21:34:44.473874Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.473874Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:183cbacac77b468130e6c2a5fa2aca7c5bdb13d87516a8c82f70957132f0020c","observation_id":"e992e2d9-83e4-4241-bf08-5156052f98c2","resolution":{"observed_at":"2026-08-06T21:34:44.473874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.477025Z","title":"Adversarial examples: Attacks and defenses for deep learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.477025Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:932ca157e3e44de9d04fb59c6227c5c57489424c5e6da6a78f38450b63be17e5","observation_id":"b6165ef7-65b4-4de8-b1d9-7d4abd49654b","resolution":{"observed_at":"2026-08-06T21:34:44.477025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-06T21:34:44.480516Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.480516Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b6d753918898cdbbdd57cf9ee66c382ea528b5b13e2b5a59177e310b01305925","observation_id":"8bc7b98b-bd1a-42ad-9fc4-28f57c271cbc","resolution":{"observed_at":"2026-08-06T21:34:44.480516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.509344Z","title":"Multitrust: A comprehensive benchmark towards trustworthy multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.509344Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:351adddeaf17e114f588cc9400d8779b3b9039f1951c0191e5beffb1234f881a","observation_id":"7bf99a70-466f-4b5c-8d38-fab6e28a104c","resolution":{"observed_at":"2026-08-06T21:34:44.509344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.569564Z","title":"Sensor attack taxonomy and defense for cyber- physical systems,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.569564Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:377c690fff277f8fb5c721e460129927c9eb3f5c79c953d2f8482fdafb045bb0","observation_id":"d2917586-76a8-4720-9df2-5d04ae00cae6","resolution":{"observed_at":"2026-08-06T21:34:44.569564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00247","last_updated":"2023-09-01T04:33:24Z","snapshot_observed_at":"2026-07-06T16:13:07.384791Z","submitted_at":"2023-09-01T04:33:24Z","title":"Further study on forbidden subgraphs of power graph","version":1},"cited_work":{"arxiv_id":"2309.00247","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.00247","snapshot_observed_at":"2026-08-06T21:34:46.254832Z","title":"Further study on forbidden subgraphs of power graph","venue":"math.CO","work_id":"9cc5a1a4-c8f9-4d47-a461-cd83d26eb4d7","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.649753Z"},"links":{"cited_paper":"/paper/2309.00247","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:6ef5dfdb103e979b7f4cba26b51ce78e3fa705df799dbc3be007547320bb1732","observation_id":"8c99aee2-c381-44db-9c51-d704ff5404c7","resolution":{"observed_at":"2026-08-06T21:34:46.258518Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.729192Z","title":"Extracting training data from large language models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.729192Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:24439f16928a17bc1362245aa6b17685b8058b15d07558f98d173228d3442d3f","observation_id":"c24b7468-62b5-4f23-aa44-f9b4b1834f70","resolution":{"observed_at":"2026-08-06T21:34:44.729192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.793227Z","title":"Membership inference attacks on sequence-to- sequence models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.793227Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:ff61e41eba1e2f63938874b5fe2344886cf9dc4f618def92c40970b5999d6584","observation_id":"7611f0cc-4b57-409f-976e-59151ac12009","resolution":{"observed_at":"2026-08-06T21:34:44.793227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:44.866752Z","title":"The surprising effectiveness of latent world models for continual reinforcement learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.866752Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a803ba8e420517ae1e802dfa776d4a7c65ac4ff7f2850a702ee3e4bcc9e50d1b","observation_id":"03c648da-9a86-414b-9a8f-03afa0072b18","resolution":{"observed_at":"2026-08-06T21:34:44.866752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.03277","last_updated":"2023-04-06T17:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-06T17:58:09Z","title":"Instruction Tuning with GPT-4","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.03277","snapshot_observed_at":"2026-08-06T21:34:44.946924Z","title":"Instruction tuning with gpt-4,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.946924Z"},"links":{"cited_paper":"/paper/2304.03277","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a066a7f9ddcb0859afd9785aa77d017edc2daeac6b89c4d6a2d19a6e9babf6e8","observation_id":"d69e9233-7125-4b01-9827-13211e949a04","resolution":{"observed_at":"2026-08-06T21:34:44.946924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-06T21:34:44.996658Z","title":"Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.996658Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:964d6a494aa71607866373996c4bda2a8cb1ad44601277c9daae75a4360ad572","observation_id":"42f08bbf-97f1-4816-906f-6f32ae079bcc","resolution":{"observed_at":"2026-08-06T21:34:44.996658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01819","last_updated":"2024-07-18T08:57:36Z","snapshot_observed_at":"2026-07-06T16:26:58.234941Z","submitted_at":"2023-10-03T06:16:38Z","title":"TP2O: Creative Text Pair-to-Object Generation using Balance Swap-Sampling","version":4},"cited_work":{"arxiv_id":"2310.01819","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.01819","snapshot_observed_at":"2026-08-06T21:34:46.220173Z","title":"TP2O: Creative Text Pair-to-Object Generation using Balance Swap-Sampling","venue":"cs.CV","work_id":"93f2b60a-f805-47ea-afd1-4689c92372a1","year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.000236Z"},"links":{"cited_paper":"/paper/2310.01819","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:7b583772466354aa7274ce0bc1107e3177261ea6a169ee966d759a96bcac1fee","observation_id":"e6420e77-da93-44a8-a86f-fddd7885aa52","resolution":{"observed_at":"2026-08-06T21:34:46.224273Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T21:34:45.003279Z","title":"Prompt injec- tion attack against LLM-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.003279Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:1618e4bd70da560b154a15a65f3f0ef09622d7849d3fc8aa10ede2ffa382670c","observation_id":"e7360748-e040-4c33-bf20-bead452b7b24","resolution":{"observed_at":"2026-08-06T21:34:45.003279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.006375Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.006375Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:acc867e1609a35dbc99788c05d9a777bfe5ed3dd45fb6e531d8394e9f199c713","observation_id":"c5957bfe-978e-4e85-881c-bbbb248cb84d","resolution":{"observed_at":"2026-08-06T21:34:45.006375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.21277","last_updated":"2025-05-28T14:16:10Z","snapshot_observed_at":"2026-08-09T03:35:23.473114Z","submitted_at":"2025-05-27T14:48:44Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","version":2},"cited_work":{"arxiv_id":"2505.21277","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.21277","snapshot_observed_at":"2026-08-06T21:34:46.196347Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","venue":"cs.CR","work_id":"c863671b-f00c-4f2b-8523-fe137e5fb044","year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.009316Z"},"links":{"cited_paper":"/paper/2505.21277","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:66edd4893d0183e3fbd4050ce9e7a85b9b589f4d52f2613097dd6df997b231fb","observation_id":"3ec1bfe1-174d-4668-82d6-8c0d72bdbeea","resolution":{"observed_at":"2026-08-06T21:34:46.200460Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.012604Z","title":"Attention tracker: Detecting prompt injection attacks in LLMs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.012604Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:a97bfe989345ff4b97ccd8026eab479900e4393758fddfbe31f3f99b0b41ac41","observation_id":"10edd366-0997-456e-a7d8-c44306a1dd7d","resolution":{"observed_at":"2026-08-06T21:34:45.012604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-08T20:41:26.386035Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04806","snapshot_observed_at":"2026-08-06T21:34:45.015831Z","title":"Red teaming the mind of the machine: A systematic evaluation of prompt injection and jailbreak vulnerabilities in llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.015831Z"},"links":{"cited_paper":"/paper/2505.04806","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:275d6d580e364eac73dc70075335ce9b99ca22cf79108267721dcd252bd31ed3","observation_id":"b4282a96-6bb9-4961-b94c-0cb55c1f85d4","resolution":{"observed_at":"2026-08-06T21:34:45.015831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.018828Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.018828Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:5bd4edee9480cf00045317fd8a6fff868612ad55715ec407b04276dad3486514","observation_id":"668ea879-801a-4aa4-8239-dcbbb53a3447","resolution":{"observed_at":"2026-08-06T21:34:45.018828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:34:45.022044Z","title":"Adversarial attacks on multimodal agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.022044Z"},"links":{"citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:15bcb17bccb778f438f347c4c516d3b20f4747eb5b5a4632e40427736e844ab4","observation_id":"c932d3dd-e9d8-46e4-970b-5a60f47319c6","resolution":{"observed_at":"2026-08-06T21:34:45.022044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13461","last_updated":"2024-08-21T11:02:40Z","snapshot_observed_at":"2026-08-09T20:26:31.924865Z","submitted_at":"2024-06-19T11:38:05Z","title":"Static neutral black holes in Kalb-Ramond gravity","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13461","snapshot_observed_at":"2026-08-06T21:34:45.025473Z","title":"Probing the robustness of vision–language pretrained mod- els: A multimodal adversarial attack approach,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.025473Z"},"links":{"cited_paper":"/paper/2406.13461","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b24735e008a93c6e2ee4ddfe6e1f2a6efaadedf509ad1c0fb4bb0c404968bed0","observation_id":"5e70b4dc-5b87-43be-bec4-7686ac9365da","resolution":{"observed_at":"2026-08-06T21:34:45.025473Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":5,"parse_uncertain":0,"unresolved":90,"verified_exact":5,"verified_fuzzy":0},"total_outbound_references":169},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 100 of 169 outbound references and 14 inbound Pith citation observations for arXiv:2506.23844."}