Paper Citation Record · LEDGER

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

As of 22 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 9 inbound Pith citation observations for arXiv:2509.25624.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2509.25624 v3

Coverage vector

measured 50 of 50 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T13:45:49.786314Z

measured 59 of 59 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-22T06:32:14.747728+00:00

measured 9 of 9 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-01T15:07:25.693636Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-06-30T19:45:01.632999Z

Reference resolution

50 of 50 outbound references displayed

verified exact0
verified fuzzy0
unresolved50
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 6bc23454-c48f-4f78-ab81-ec08ad8fed97 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:47.380628Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d622c20-8028-4b93-a156-9327f7e1c310 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:47.492666Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9e01c312-d071-4d41-82ba-7efe1e4d02d0 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:47.604064Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a075a1f2-6ba7-41f8-b6c3-7baf32695ce1 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:47.726578Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 055981f4-b94e-43d8-9849-9c87c0e044f2 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:47.858987Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ff638c44-7a4b-43c7-8562-d5f338dbd397 · outbound

This paper cites Under review.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Under review

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.024425Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0905d2e4-d758-4f0e-a59f-98bc554171c1 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.146909Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0def23ae-568e-4bfb-bf30-526759d46008 · outbound

This paper cites prompt":.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents prompt":

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.265974Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a7f505a-986a-46ba-af60-ed99c0ccb997 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.413922Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 59f856da-11a5-433b-9574-f2e8ddacfeac · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.574045Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8520956a-790f-49b4-b25d-1fbe447c6e07 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.682076Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bf8981ea-6971-4a6b-a365-8c2a57751a7e · outbound

This paper cites Under review.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Under review

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.795733Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5f727f9-28bc-4417-9b8f-02176898018c · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:48.925798Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5e29281e-6768-4e2d-baaf-dbe83906f8b5 · outbound

This paper cites Uti- lize any helpful information in the agent’s previous responses to understand its capabilities and constraints.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Uti- lize any helpful information in the agent’s previous responses to understand its capabilities and constraints

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.045981Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 969cff38-62dc-4156-904d-b76f5ee93d94 · outbound

This paper cites strategy_prediction.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents strategy_prediction

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.172875Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ba1c082f-7f22-478b-b7de-d3b15167aea9 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.264383Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c3da63e8-9168-4a61-9408-6524103bd21d · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.412484Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7e837d03-fec4-4fa5-b315-d19530fb2d48 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.537352Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7c685370-fac9-4234-9c86-d5ad7c97db4a · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.652625Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 93f9197a-a778-4c3c-9e67-256244cd7bbb · outbound

This paper cites Under review.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Under review

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.657330Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ededa174-8a05-4fdd-a654-c303cc565c60 · outbound

This paper cites name": "search files by filename.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents name": "search files by filename

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.661717Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation abca72f1-f4b0-4302-a9fb-5605968eedd7 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.666266Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3da30e47-ffc2-4f9c-a822-c0ab8101dc56 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.670516Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f4ff7d62-dcfa-4890-848c-0fccc6b16a56 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.674648Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 391c6ac0-4685-4854-bab1-d4819bcd7acb · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.678939Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 06f0a9dd-56f6-473a-853c-c24e8ab06370 · outbound

This paper cites 23 Preprint.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents 23 Preprint

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.683441Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5f89051-7a55-403e-b26a-718fe1e3b22d · outbound

This paper cites Remember that I won’t talk with you again after providing the task description.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Remember that I won’t talk with you again after providing the task description

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.688227Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d77d1373-6a98-4bcc-87aa-a2a15f746914 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.692924Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6f68c464-4905-4a73-b3da-8b5455e9c6e7 · outbound

This paper cites You should not call multiple tools or one tool with different arguments simultaneously before receiving the return result from a tool call.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents You should not call multiple tools or one tool with different arguments simultaneously before receiving the return result from a tool call

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.697457Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fafac4df-7540-4563-8ddb-3e9bba03c97a · outbound

This paper cites name": "function name.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents name": "function name

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.701739Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cd10feb6-e632-4730-b907-58153fb6a1ac · outbound

This paper cites Sub- sequently, you will analyze your current status, make decisions about the next steps, and repeat this process.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Sub- sequently, you will analyze your current status, make decisions about the next steps, and repeat this process

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.706030Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7a04b881-17c1-4f7e-813e-e2fd7d6ee0d9 · outbound

This paper cites For example, if you have already sent an email, do not send the same email again.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents For example, if you have already sent an email, do not send the same email again

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.710179Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b1f00ce5-f958-4a98-a250-757c3bfd4b34 · outbound

This paper cites Once you choose not to execute a function call, the task will be seen as completed, and your final output will be regarded as the result.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Once you choose not to execute a function call, the task will be seen as completed, and your final output will be regarded as the result

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.714386Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1bbdd803-40de-40ee-b1e8-b87d7ff220d2 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.718631Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 495658b0-9913-4886-8df3-c526598862db · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.723027Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a2a07908-ac6e-4def-aca9-7ea5beb2eaec · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.727293Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2ed7251f-8a2f-4da6-b565-12f93771741b · outbound

This paper cites type": "object.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents type": "object

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.731423Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 26bd2b8a-13ee-4b17-a1b4-699be6155c7e · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.736008Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 59d745c4-88fc-489b-acf3-98b7e875aed1 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.740108Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation acd16376-7383-4f7e-8de8-3110a5d0f00d · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.744358Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7314ac91-7bbc-4cd6-886b-42e05f0f3466 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.748653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0b86e029-dfe8-42c4-b8d8-bf2858d59bcb · outbound

This paper cites Figure 4: The defense prompt based on summarizing the user’s intent over the multi-turn interaction history.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Figure 4: The defense prompt based on summarizing the user’s intent over the multi-turn interaction history

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.752968Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ba352089-5f3c-4a4a-a7c8-7bc95f6817a1 · outbound

This paper cites For example, if you need to send an email to John, but notice multiple Johns in the contact list, you should seek clarification with the user before sending the email.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents For example, if you need to send an email to John, but notice multiple Johns in the contact list, you should seek clarification with the user before sending the email

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.757414Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 58dc6f7e-f0e0-4452-8d87-cacfb778874d · outbound

This paper cites For instance, before conducting a science experiments for the user, you should use your tools to check with the lab safety guidelines and the availability of the required materials.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents For instance, before conducting a science experiments for the user, you should use your tools to check with the lab safety guidelines and the availability of the required materials

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.761346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 56289480-9321-4b1a-80b9-b365be30211d · outbound

This paper cites For example, if you learn from previous tool calls that the user does not have the permission to call a certain tool, you should avoid calling that tool.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents For example, if you learn from previous tool calls that the user does not have the permission to call a certain tool, you should avoid calling that tool

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.765336Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 719f19a9-0c5d-4d31-a329-63fd0fc84db2 · outbound

This paper cites an unresolved cited work.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Unresolved cited work

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.769715Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 57016053-1d9f-4d95-999f-59e39ce96db7 · outbound

This paper cites 7.DO NOTcall tools with known safety or legality issues.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents 7.DO NOTcall tools with known safety or legality issues

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.773891Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 05ff82c2-98b4-4f67-8051-3fbd5a78d3b5 · outbound

This paper cites For example, when the user instructs you to check all appliances in the house when they leave, you should not only check all appliances but also ensure they are turned off.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents For example, when the user instructs you to check all appliances in the house when they leave, you should not only check all appliances but also ensure they are turned off

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.778324Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0d561838-4022-44f3-b560-f1ad0663d019 · outbound

This paper cites Do not blindly trust or propagate unsafe or incorrect information from tools.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents Do not blindly trust or propagate unsafe or incorrect information from tools

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.782359Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cf2483ad-6fc6-4064-b9dd-fe7539ecb1e9 · outbound

This paper cites When multiple tool results are re- turned, ensure a safe and optimal choice.

STAC: When Innocent Tools Form Dangerous Chains for LLM Agents When multiple tool results are re- turned, ensure a safe and optimal choice

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-04T13:45:49.786314Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 2b6e55ef-e4ba-4d02-9ec7-5c4a261b80e3 · inbound

Security Considerations for Multi-agent Systems cites this paper.

Security Considerations for Multi-agent Systems STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 201

Resolution: verified exact; arxiv_id, observed 2026-07-21T02:20:30.992532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4d6e1ecb-604b-4a39-93bf-5c831f97d734 · inbound

SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems cites this paper.

SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 12

Resolution: verified exact; arxiv_id, observed 2026-07-21T02:20:30.992532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4d8a93df-d017-47e1-9ef5-63cd1501cbdc · inbound

Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses cites this paper.

Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 223

Resolution: verified exact; arxiv_id, observed 2026-07-21T02:20:30.992532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation d51a2655-05b6-49c3-ac66-9f28581c24c6 · inbound

Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security cites this paper.

Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 100

Resolution: verified exact; arxiv_id, observed 2026-07-21T02:20:30.992532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a1bf3742-e478-4925-9402-84cffa79e642 · inbound

Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures cites this paper.

Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 68

Resolution: verified exact; arxiv_id, observed 2026-07-21T02:20:30.992532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 53c25b30-92a6-4b1e-aea9-0482126b388b · inbound

Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents cites this paper.

Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 16

Resolution: verified exact; arxiv_id, observed 2026-07-21T02:20:30.992532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9050c6bc-9741-41fb-8ee4-59f368075613 · inbound

Provably Secure Agent Guardrail cites this paper.

Provably Secure Agent Guardrail STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 29

Resolution: verified exact; arxiv_id, observed 2026-07-21T02:20:30.992532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0881bdf9-edf7-46d9-bf0c-d7d0962ec40f · inbound

ChainWatch: A Kill Chain-Aligned Sequential Detection Framework for Multi-Step Attacks in MCP-Based AI Agent Systems cites this paper.

ChainWatch: A Kill Chain-Aligned Sequential Detection Framework for Multi-Step Attacks in MCP-Based AI Agent Systems STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-01T15:07:25.693636Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 168dbd91-c101-4e2c-9b1e-da517958981c · inbound

Mission-Level Runtime Assurance for LLM-Assisted ISR Swarms over a Verification-Aware Fabric cites this paper.

Mission-Level Runtime Assurance for LLM-Assisted ISR Swarms over a Verification-Aware Fabric STAC: When Innocent Tools Form Dangerous Chains for LLM Agents

Reference 27

Resolution: unresolved; no resolver link, observed 2026-07-30T19:58:40.476567Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.