Paper Citation Record · LEDGER

WebGuard: Building a Generalizable Guardrail for Web Agents

As of 21 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 9 inbound Pith citation observations for arXiv:2507.14293.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.14293 v1

Coverage vector

measured 60 of 60 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T16:12:52.032965Z

measured 69 of 69 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 9 of 9 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-15T15:46:06.063847Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-07-10T18:15:00.821465Z

Reference resolution

60 of 60 outbound references displayed

verified exact0
verified fuzzy19
unresolved41
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation c2e7c5bd-4227-492e-a0ac-3f2b6e3c5b18 · outbound

This paper cites Agent S: an open agentic framework that uses computers like a human.

WebGuard: Building a Generalizable Guardrail for Web Agents Agent S: an open agentic framework that uses computers like a human

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:57.242460Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 5d8808d4-7d10-4fd7-9f1c-22c94096ca56 · outbound

This paper cites Digirl: Training in-the-wild device-control agents with autonomous reinforcement learning, 2024.

WebGuard: Building a Generalizable Guardrail for Web Agents Digirl: Training in-the-wild device-control agents with autonomous reinforcement learning, 2024

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.194194Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4a189b8f-4e06-43a1-b6c2-40b8e6d5aa20 · outbound

This paper cites Qwen2.5-VL Technical Report.

WebGuard: Building a Generalizable Guardrail for Web Agents Qwen2.5-VL Technical Report

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.275932Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 43b8b139-df9a-4f4e-b7ad-9bee3f44e930 · outbound

This paper cites Doomarena: A framework for testing ai agents against evolving security threats.

WebGuard: Building a Generalizable Guardrail for Web Agents Doomarena: A framework for testing ai agents against evolving security threats

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.374120Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1095f92a-4d4e-47c4-a14f-766e8757ff8c · outbound

This paper cites The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections.

WebGuard: Building a Generalizable Guardrail for Web Agents The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.459876Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a8d481dd-6c7e-4b82-9855-b9dc97a5beb5 · outbound

This paper cites AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration.

WebGuard: Building a Generalizable Guardrail for Web Agents AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.563041Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation caa0589b-8752-4308-b471-8fef84c0721a · outbound

This paper cites Reasoning Models Don't Always Say What They Think.

WebGuard: Building a Generalizable Guardrail for Web Agents Reasoning Models Don't Always Say What They Think

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.648456Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ce47d939-6281-4a7b-bc73-a5e2336e5405 · outbound

This paper cites Shieldagent: Shielding LLM agents via verifiable safety policy reasoning.

WebGuard: Building a Generalizable Guardrail for Web Agents Shieldagent: Shielding LLM agents via verifiable safety policy reasoning

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:57.203321Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation c0349a46-98c2-4cd1-9121-69be27e9ecde · outbound

This paper cites SeeClick: Harnessing GUI grounding for advanced visual GUI agents.

WebGuard: Building a Generalizable Guardrail for Web Agents SeeClick: Harnessing GUI grounding for advanced visual GUI agents

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:57.180123Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation ca3e99d4-9116-4cc3-a3cc-fd74372bafaf · outbound

This paper cites The BrowserGym Ecosystem for Web Agent Research.

WebGuard: Building a Generalizable Guardrail for Web Agents The BrowserGym Ecosystem for Web Agent Research

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.846998Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e8ec850e-642c-49aa-9266-b79e0230029d · outbound

This paper cites Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations.

WebGuard: Building a Generalizable Guardrail for Web Agents Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:47.921568Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c4b9e735-d5a1-4e3f-90ac-9ef9f676f7fb · outbound

This paper cites Mind2web: Towards a generalist agent for the web.

WebGuard: Building a Generalizable Guardrail for Web Agents Mind2web: Towards a generalist agent for the web

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:57.156040Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 1ed7cfe6-692a-4242-86f3-61850465974f · outbound

This paper cites Preemptive detection and correction of misaligned actions in llm agents, 2024.

WebGuard: Building a Generalizable Guardrail for Web Agents Preemptive detection and correction of misaligned actions in llm agents, 2024

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:57.135336Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 432a2faf-6660-47e1-bc12-ef20d58c848c · outbound

This paper cites Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversations.

WebGuard: Building a Generalizable Guardrail for Web Agents Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversations

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:48.091007Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b7ab8103-17eb-4be4-b087-5f97783066aa · outbound

This paper cites Navigating the digital world as humans do: Universal visual grounding for GUI agents.

WebGuard: Building a Generalizable Guardrail for Web Agents Navigating the digital world as humans do: Universal visual grounding for GUI agents

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:57.113912Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 4259e9c4-a863-49cc-8190-351f3356e6a6 · outbound

This paper cites Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection.

WebGuard: Building a Generalizable Guardrail for Web Agents Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:48.306232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d55bd2a6-f801-45c4-a88c-db846a3dd196 · outbound

This paper cites Is your llm secretly a world model of the internet? model-based planning for web agents, 2024.

WebGuard: Building a Generalizable Guardrail for Web Agents Is your llm secretly a world model of the internet? model-based planning for web agents, 2024

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:57.074699Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 4bb771c3-77e6-4b39-8f09-070af4eea194 · outbound

This paper cites Cogagent: A visual language model for gui agents.

WebGuard: Building a Generalizable Guardrail for Web Agents Cogagent: A visual language model for gui agents

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:56.908262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation c5ff6590-c9ab-4da8-a2f7-01cb2a09a9b3 · outbound

This paper cites Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training.

WebGuard: Building a Generalizable Guardrail for Web Agents Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:48.546694Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2773b1bd-c4af-4f50-84bc-b984f998ef0e · outbound

This paper cites GPT-4o System Card.

WebGuard: Building a Generalizable Guardrail for Web Agents GPT-4o System Card

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:48.636906Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30f7ec07-3d44-4cf9-95d7-a88ae65cc2ed · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

WebGuard: Building a Generalizable Guardrail for Web Agents Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:48.722673Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30e41809-1982-4906-8e8b-968b5d22145e · outbound

This paper cites VisualWebArena: Evaluating Multimodal Agents on Realistic Visual Web Tasks.

WebGuard: Building a Generalizable Guardrail for Web Agents VisualWebArena: Evaluating Multimodal Agents on Realistic Visual Web Tasks

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:48.800326Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 475ea7df-b219-4e32-aa0b-7d30cb443103 · outbound

This paper cites Tree search for language model agents.

WebGuard: Building a Generalizable Guardrail for Web Agents Tree search for language model agents

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:48.886850Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a667747-59a2-4b01-b7b3-918cfde2669c · outbound

This paper cites Hendryx, Summer Yue, and Zifan Wang.

WebGuard: Building a Generalizable Guardrail for Web Agents Hendryx, Summer Yue, and Zifan Wang

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:56.636403Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation a43d976b-691e-442a-953c-420ff553abce · outbound

This paper cites Refusal-trained llms are easily jailbroken as browser agents, 2024.

WebGuard: Building a Generalizable Guardrail for Web Agents Refusal-trained llms are easily jailbroken as browser agents, 2024

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:56.261080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation da90a2ff-5c49-4f9e-8c7d-ba1e45c0051b · outbound

This paper cites Bradley Knox, and Kimin Lee.

WebGuard: Building a Generalizable Guardrail for Web Agents Bradley Knox, and Kimin Lee

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.133062Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 85b4494c-94af-4783-bbe6-2165075d40d3 · outbound

This paper cites sudo rm -rf agentic_security.

WebGuard: Building a Generalizable Guardrail for Web Agents sudo rm -rf agentic_security

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.199465Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d2305a9a-1075-4d55-b33d-24dd96bffe81 · outbound

This paper cites ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents.

WebGuard: Building a Generalizable Guardrail for Web Agents ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.302488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0262b0ef-e33f-42d1-ad1a-18c090be34ea · outbound

This paper cites Redteamcua: Realistic adversarial testing of computer-use agents in hybrid web-os environments.

WebGuard: Building a Generalizable Guardrail for Web Agents Redteamcua: Realistic adversarial testing of computer-use agents in hybrid web-os environments

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.383511Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation abae9612-218d-498a-8634-014caef4db11 · outbound

This paper cites EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage.

WebGuard: Building a Generalizable Guardrail for Web Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.478511Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d5e4330f-4c62-4e20-8c42-8eee2f5eaa92 · outbound

This paper cites Sycophancy in Large Language Models: Causes and Mitigations.

WebGuard: Building a Generalizable Guardrail for Web Agents Sycophancy in Large Language Models: Causes and Mitigations

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.594341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 02e8079a-db48-43d1-b8be-752f9b509781 · outbound

This paper cites Frontier Models are Capable of In-context Scheming.

WebGuard: Building a Generalizable Guardrail for Web Agents Frontier Models are Capable of In-context Scheming

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.659835Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f7ba4ca9-95b0-4ad4-bdf0-4d44b305f6bd · outbound

This paper cites NNetNav: Unsupervised Learning of Browser Agents Through Environment Interaction in the Wild.

WebGuard: Building a Generalizable Guardrail for Web Agents NNetNav: Unsupervised Learning of Browser Agents Through Environment Interaction in the Wild

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.754196Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 13f45acc-65b0-40e2-b566-b18e14637aef · outbound

This paper cites Testing language model agents safely in the wild.

WebGuard: Building a Generalizable Guardrail for Web Agents Testing language model agents safely in the wild

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:56.007571Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 4e67643d-8a91-4a05-8320-f454f3343446 · outbound

This paper cites Operator system card., 2025.

WebGuard: Building a Generalizable Guardrail for Web Agents Operator system card., 2025

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:55.758295Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 4a81bf5e-1a03-41a2-bfc7-a20bbd1e56bc · outbound

This paper cites Explorer: Scaling Exploration-driven Web Trajectory Synthesis for Multimodal Web Agents.

WebGuard: Building a Generalizable Guardrail for Web Agents Explorer: Scaling Exploration-driven Web Trajectory Synthesis for Multimodal Web Agents

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.052388Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e6905d58-8fda-4dc7-95a2-00730b0da54a · outbound

This paper cites Agent Q: Advanced Reasoning and Learning for Autonomous AI Agents.

WebGuard: Building a Generalizable Guardrail for Web Agents Agent Q: Advanced Reasoning and Learning for Autonomous AI Agents

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.130722Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 354f27ed-7fc2-4b1c-94b4-385219666d31 · outbound

This paper cites Webrl: Training LLM web agents via self- evolving online curriculum reinforcement learning.

WebGuard: Building a Generalizable Guardrail for Web Agents Webrl: Training LLM web agents via self- evolving online curriculum reinforcement learning

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:55.424353Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 52101733-bf6f-4e3e-802d-50e7f88ab6b9 · outbound

This paper cites UI-TARS: Pioneering Automated GUI Interaction with Native Agents.

WebGuard: Building a Generalizable Guardrail for Web Agents UI-TARS: Pioneering Automated GUI Interaction with Native Agents

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.263359Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8649ffeb-edf7-41dd-bf06-e35c8d85d5df · outbound

This paper cites Towards Understanding Sycophancy in Language Models.

WebGuard: Building a Generalizable Guardrail for Web Agents Towards Understanding Sycophancy in Language Models

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.339267Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 98bfbb10-97bd-4952-954a-b2f5a33dd205 · outbound

This paper cites Learn-by-interact: A Data-Centric Framework for Self-Adaptive Agents in Realistic Environments.

WebGuard: Building a Generalizable Guardrail for Web Agents Learn-by-interact: A Data-Centric Framework for Self-Adaptive Agents in Realistic Environments

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.409392Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 83040be3-a4a0-49a5-9392-b7921466beb6 · outbound

This paper cites Qwen2.5: A party of foundation models, September 2024.

WebGuard: Building a Generalizable Guardrail for Web Agents Qwen2.5: A party of foundation models, September 2024

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.486326Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 31e8bf2d-f917-47fb-a33f-041eded685a2 · outbound

This paper cites SafeArena: Evaluating the Safety of Autonomous Web Agents.

WebGuard: Building a Generalizable Guardrail for Web Agents SafeArena: Evaluating the Safety of Autonomous Web Agents

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.559312Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 140ba2fb-313b-4d14-b637-eb18d8e94be6 · outbound

This paper cites Can ai change your view? evidence from a large-scale online field experiment, April 2025.

WebGuard: Building a Generalizable Guardrail for Web Agents Can ai change your view? evidence from a large-scale online field experiment, April 2025

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:55.187072Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 3bbc517c-394d-4f27-b53a-39185559dc19 · outbound

This paper cites Towards Understanding Chain-of-Thought Prompting: An Empirical Study of What Matters.

WebGuard: Building a Generalizable Guardrail for Web Agents Towards Understanding Chain-of-Thought Prompting: An Empirical Study of What Matters

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.719954Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd4d4d49-5c32-40a6-a7fc-f92f9c5c6f87 · outbound

This paper cites Dissecting adversarial robustness of multimodal LM agents.

WebGuard: Building a Generalizable Guardrail for Web Agents Dissecting adversarial robustness of multimodal LM agents

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:54.903323Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation d402eb36-565c-4176-a53a-60161258d2dc · outbound

This paper cites GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning.

WebGuard: Building a Generalizable Guardrail for Web Agents GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:50.914742Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4e881b8c-86f4-46dd-a444-8be366c975d8 · outbound

This paper cites OpenAgents: An Open Platform for Language Agents in the Wild.

WebGuard: Building a Generalizable Guardrail for Web Agents OpenAgents: An Open Platform for Language Agents in the Wild

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.044093Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 10569b72-f8b6-470e-b0a8-8290ce82ad5a · outbound

This paper cites AdvAgent: Controllable Blackbox Red-teaming on Web Agents.

WebGuard: Building a Generalizable Guardrail for Web Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.111978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9b5202bd-1c0d-4e8d-aa5f-4415d66decd6 · outbound

This paper cites Set-of-Mark Prompting Unleashes Extraordinary Visual Grounding in GPT-4V.

WebGuard: Building a Generalizable Guardrail for Web Agents Set-of-Mark Prompting Unleashes Extraordinary Visual Grounding in GPT-4V

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.205216Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 176dae2d-28d1-42fe-8986-b5645525b5c9 · outbound

This paper cites Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models.

WebGuard: Building a Generalizable Guardrail for Web Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.333428Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 434daac8-3b2d-44cc-90b4-ef956887eeee · outbound

This paper cites ExACT: Teaching AI Agents to Explore with Reflective-MCTS and Exploratory Learning.

WebGuard: Building a Generalizable Guardrail for Web Agents ExACT: Teaching AI Agents to Explore with Reflective-MCTS and Exploratory Learning

Reference 52

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.405901Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5b643872-b3af-4805-a6a5-34bc3d19b471 · outbound

This paper cites an unresolved cited work.

WebGuard: Building a Generalizable Guardrail for Web Agents Unresolved cited work

Reference 53

Resolution: unresolved; raw_fallback, observed 2026-08-06T16:12:54.606093Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation deb16fda-5796-4beb-8290-da7d3a6c2079 · outbound

This paper cites Attacking Vision-Language Computer Agents via Pop-ups.

WebGuard: Building a Generalizable Guardrail for Web Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.576325Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f21657b1-bafc-4164-b794-b0f4e1f0ce8a · outbound

This paper cites From interaction to impact: Towards safer ai agent through understanding and evaluating mobile ui operation impacts.

WebGuard: Building a Generalizable Guardrail for Web Agents From interaction to impact: Towards safer ai agent through understanding and evaluating mobile ui operation impacts

Reference 55

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:54.374363Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation c621420a-238f-4d62-8ea5-f2d00ec68cb7 · outbound

This paper cites SkillWeaver: Web Agents can Self-Improve by Discovering and Honing Skills.

WebGuard: Building a Generalizable Guardrail for Web Agents SkillWeaver: Web Agents can Self-Improve by Discovering and Honing Skills

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.724294Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4c7b9d0e-0d4d-4e08-912b-f47abac6ddf1 · outbound

This paper cites Gpt-4v(ision) is a generalist web agent, if grounded.

WebGuard: Building a Generalizable Guardrail for Web Agents Gpt-4v(ision) is a generalist web agent, if grounded

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:54.105118Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 96baaf2f-49f6-48ad-a77d-c87f762a7f43 · outbound

This paper cites WebOlympus: An open platform for web agents on live websites.

WebGuard: Building a Generalizable Guardrail for Web Agents WebOlympus: An open platform for web agents on live websites

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:53.866343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 30a73cca-c0d5-44c2-91a1-beb71ec94a5f · outbound

This paper cites Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig.

WebGuard: Building a Generalizable Guardrail for Web Agents Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T16:12:53.623624Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 37e47a7e-91a5-43e4-9629-014fd5abfb46 · outbound

This paper cites Proposer-Agent-Evaluator(PAE): Autonomous Skill Discovery For Foundation Model Internet Agents.

WebGuard: Building a Generalizable Guardrail for Web Agents Proposer-Agent-Evaluator(PAE): Autonomous Skill Discovery For Foundation Model Internet Agents

Reference 60

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:52.032965Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation daae51b8-515a-4eef-84a3-91e3d663eaf9 · inbound

From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails cites this paper.

From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 36

Resolution: verified exact; arxiv_id, observed 2026-05-21T20:44:21.961440Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 8c1da3ea-63e5-44da-a8f7-4cae8809d4ec · inbound

OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows cites this paper.

OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 61

Resolution: unresolved; no resolver link, observed 2026-08-15T15:46:06.063847Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 588c5e88-bda0-401d-ab71-d3f2b019f187 · inbound

From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI cites this paper.

From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 22

Resolution: verified exact; arxiv_id, observed 2026-05-10T23:55:51.776496Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 942fdad7-9d8a-466e-80a4-8992e0276220 · inbound

Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI cites this paper.

Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-10T06:06:18.907983Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 11395251-2489-44e8-8fe2-6930d95ac106 · inbound

SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents cites this paper.

SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 58

Resolution: verified exact; arxiv_id, observed 2026-05-12T00:06:17.759432Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 79087acc-2e94-4bfc-b6cd-abe4d88b6d19 · inbound

Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security cites this paper.

Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 69

Resolution: verified exact; arxiv_id, observed 2026-06-30T19:45:01.625265Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 9930e089-a556-466e-ba8d-7aa32fd51964 · inbound

From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails cites this paper.

From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 51

Resolution: verified exact; arxiv_id, observed 2026-07-03T16:58:43.533023Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation e33b4044-cd5d-4fb9-a931-f3dfbcbf16fe · inbound

Prismata: Confining Cross-Site Prompt Injection in Web Agents cites this paper.

Prismata: Confining Cross-Site Prompt Injection in Web Agents WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 100

Resolution: verified exact; local_arxiv, observed 2026-07-10T12:27:04.085771Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation c4195ba8-2e4e-4806-931d-5db729aca21e · inbound

SeerGuard: A Safety Framework for Mobile GUI Agents via World Model Prediction cites this paper.

SeerGuard: A Safety Framework for Mobile GUI Agents via World Model Prediction WebGuard: Building a Generalizable Guardrail for Web Agents

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-01T23:03:15.423940Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.