{"as_of":"2026-08-09T20:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c6fc12b58c0f73d7b8c6701b71be7c9f3dac1ff30a0325d273b9cb743fcc4f8b","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T10:45:20.111398Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T15:17:29.479184Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"cited_work":{"arxiv_id":"2601.10758","doi":"10.48550/arxiv.2601.10758","metadata_source":"arxiv_reference","pith_arxiv_id":"2601.10758","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"arXiv (Cornell University)","work_id":"0963eb06-02d3-4d57-bd96-4c6d86d78d44","year":2026},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2601.10758","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:ff7de0e5e458825b42881bb6bc5dc3fb559dbc82121de4716b7dae05117f2cfb","observation_id":"a2dc1e2f-60d3-43db-afbf-9d19f0fdb259","resolution":{"observed_at":"2026-07-07T03:18:52.400858Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.10758","snapshot_observed_at":"2026-08-02T15:17:29.479184Z","title":"arXiv preprint arXiv:2601.10758 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.479184Z"},"links":{"cited_paper":"/paper/2601.10758","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:e699021d08b7dc97516f76a777ff4584d7070f71c7a822880be57a80fdd1f509","observation_id":"434c2944-cfc8-4d31-83f4-cebc5b6a34f8","resolution":{"observed_at":"2026-08-02T15:17:29.479184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2601.10758/citation-record","integrity":"/paper/2601.10758/integrity","json":"/paper/2601.10758/citation-record.json","paper":"/paper/2601.10758"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:15.835365Z","title":"Security and Privacy4(4), e159 (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:15.835365Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:fe6729977b53aee2927efe432639ff5b8b6a77a1f7570942c28f2cde6d260a19","observation_id":"e432f370-e493-4995-89d7-62900a34e679","resolution":{"observed_at":"2026-08-03T10:45:15.835365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-03T10:45:15.947776Z","title":"arXiv preprint arXiv:2212.08073 (2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:15.947776Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:b6dc24a1e8b7312630b5dcdd8861c7bd4b614b0ee7c2684510a8b4ae4815f2e8","observation_id":"35ecfa6f-2d8d-489f-ac22-73d674ff82be","resolution":{"observed_at":"2026-08-03T10:45:15.947776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.101607Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.101607Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:1483e7d07f5a194db3c37369bbaa3a66e11f3ff110c79f310191a451c573920b","observation_id":"d11f8b85-1555-4fa0-8c3b-44052593c3c5","resolution":{"observed_at":"2026-08-03T10:45:16.101607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.246142Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.246142Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:58fe058203fe701dba463a3ceeaaba670fa0426934ad9b87b4e77f5b2b91c2f7","observation_id":"c9098b25-c8b6-4072-945e-51c76cf128f6","resolution":{"observed_at":"2026-08-03T10:45:16.246142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.407118Z","title":"In: 2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.407118Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:c541ccf9cf81719b54e55b2ef636209aedfb0084ce389151c207a1490c2c60de","observation_id":"51fba39d-55d5-47d6-96f6-8093a40e103f","resolution":{"observed_at":"2026-08-03T10:45:16.407118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.550874Z","title":"Advances in Neural Information Processing Systems37, 26814–26845 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.550874Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:3b9b1a15fde93c92b61a3ca0f8f9463ea018e656f46c1384032ef8aacf26dac3","observation_id":"b057cb23-5b13-48f2-a92e-f60277d028c0","resolution":{"observed_at":"2026-08-03T10:45:16.550874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.11368","last_updated":"2025-06-17T06:55:16Z","snapshot_observed_at":"2026-08-08T22:28:50.390446Z","submitted_at":"2025-05-16T15:32:23Z","title":"GuideBench: Benchmarking Domain-Oriented Guideline Following for LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.11368","snapshot_observed_at":"2026-08-03T10:45:16.759066Z","title":"arXiv preprint arXiv:2505.11368 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.759066Z"},"links":{"cited_paper":"/paper/2505.11368","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:28000b89bff6112a4954ba66a6d5b5e20b973b26e7f429eb827303601d004136","observation_id":"cc184c0e-2ad2-43d0-bde6-2e5ec1866066","resolution":{"observed_at":"2026-08-03T10:45:16.759066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:16.981213Z","title":"In: 2025 IEEE Symposium on Security and Privacy (SP)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:16.981213Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:5c33eb31c1abd1d7e3701c2d9a9396a64b5e8b2923e48700e8dc34ae3d8ad4bf","observation_id":"a7b20850-bce2-4faa-bcba-f59675a3a9be","resolution":{"observed_at":"2026-08-03T10:45:16.981213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.147032Z","title":"International Journal of Human-Computer Studies125, 19–31 (2019)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.147032Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:d9d465033503068f8203740d19ca034d19837903505bd4a3b4330ab7f8ee6edd","observation_id":"6ce0185b-63fe-4ab0-9523-f66284bf8351","resolution":{"observed_at":"2026-08-03T10:45:17.147032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.356157Z","title":"In: Proceedings of the 16th ACM workshop on artificial intelligence and security","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.356157Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:b13277d7eea482890724704a7ecf2b5ec3d7ee6afdcfc4cb8120875597596c38","observation_id":"62d9e10d-e54b-47f5-a2cd-8d29de7c77ee","resolution":{"observed_at":"2026-08-03T10:45:17.356157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08567","last_updated":"2024-06-03T14:15:03Z","snapshot_observed_at":"2026-08-09T09:14:39.779608Z","submitted_at":"2024-02-13T16:06:17Z","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08567","snapshot_observed_at":"2026-08-03T10:45:17.529100Z","title":"arXiv preprint arXiv:2402.08567 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.529100Z"},"links":{"cited_paper":"/paper/2402.08567","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:2007e64a17241d380f43e7af4b022bf72c3054630e39b79772c59abcbcec44d5","observation_id":"3f916113-a364-42c3-acfc-359bd3e7e16d","resolution":{"observed_at":"2026-08-03T10:45:17.529100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01680","last_updated":"2024-04-19T01:15:16Z","snapshot_observed_at":"2026-08-06T19:10:15.466826Z","submitted_at":"2024-01-21T23:36:14Z","title":"Large Language Model based Multi-Agents: A Survey of Progress and Challenges","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01680","snapshot_observed_at":"2026-08-03T10:45:17.794251Z","title":"arXiv preprint arXiv:2402.01680 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.794251Z"},"links":{"cited_paper":"/paper/2402.01680","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:90cee9645cc38e87616d8c16d4490cc53f02441c4a7c86efa268abdc989fef5d","observation_id":"8f4a2ed6-0dcf-41d9-9ffd-5b9939ece92d","resolution":{"observed_at":"2026-08-03T10:45:17.794251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.903004Z","title":"In: 33rd USENIX Security Symposium (USENIX Security 24)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.903004Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:4842eeb677cbe4d7b5fbdb9dc0486c820a3548eb1979fff1c5ff290fe8e0991d","observation_id":"098376b3-d861-4325-b755-dd84821aa5df","resolution":{"observed_at":"2026-08-03T10:45:17.903004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:17.956036Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:17.956036Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:04cd05bac64ddfeca6b8384c1a3ec4bd7f79523a9149a8084610b674e9cb0dd6","observation_id":"a6761f49-a15c-48c6-a9b5-fa50afade2dc","resolution":{"observed_at":"2026-08-03T10:45:17.956036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.009539Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.009539Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:2f1b5484005d8d6483e0934af3a7e60f7aa955eb52f0fdae6cc74d335a4ec4a3","observation_id":"6639fb5e-9397-4c43-9cbe-61c203c042ab","resolution":{"observed_at":"2026-08-03T10:45:18.009539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.080741Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.080741Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:3cdae6b6095df385ffd97a0a0fa52837775cf58ef4e0e36b2bbf84d42b9e19bf","observation_id":"4b0cef02-5cca-4e62-91f4-373d8fbbdd1f","resolution":{"observed_at":"2026-08-03T10:45:18.080741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-08T23:24:16.398221Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08586","snapshot_observed_at":"2026-08-03T10:45:18.132433Z","title":"arXiv preprint arXiv:2502.08586 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.132433Z"},"links":{"cited_paper":"/paper/2502.08586","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:de9254ce0f0672c57a460064e6f30449b4711a311d7fc31b35fa3aad460f644a","observation_id":"98b32e61-f9b1-48ef-955d-d23a9baee00c","resolution":{"observed_at":"2026-08-03T10:45:18.132433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-06T11:52:38.289574Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-03T10:45:18.184723Z","title":"arXiv preprint arXiv:2409.11295 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.184723Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:366ff66ad3d40cc710ef780b941eb5cba1f9869052f025d47ff2dbcd3938963c","observation_id":"6c061f65-f33d-4717-992c-7a16f85f5a6a","resolution":{"observed_at":"2026-08-03T10:45:18.184723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.264083Z","title":"preferences","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.264083Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:ea1679bb54ed2f63b64339ee3be590204684285f6dc1a3cc4cbc721504efeb80","observation_id":"058bcab8-04cb-4988-b4dd-dcaf3433752d","resolution":{"observed_at":"2026-08-03T10:45:18.264083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.320221Z","title":"In: Proceedings of the Extended Abstracts of the CHI Conference on Human Factors in Computing Systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.320221Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:bab2b9639794d83c287fd967b51674c95348c361d1524d63830b74ae4b452520","observation_id":"46489787-664c-4291-8fdb-c4afd4efd556","resolution":{"observed_at":"2026-08-03T10:45:18.320221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.08172","last_updated":"2024-02-21T17:42:32Z","snapshot_observed_at":"2026-07-06T16:18:49.258642Z","submitted_at":"2023-09-15T05:44:08Z","title":"LASER: LLM Agent with State-Space Exploration for Web Navigation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.08172","snapshot_observed_at":"2026-08-03T10:45:18.400841Z","title":"arXiv preprint arXiv:2309.08172 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.400841Z"},"links":{"cited_paper":"/paper/2309.08172","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:ffdb0eacdd8ca1b36b8d7d1bced794a605c8a4982793274f835e6017db0506c7","observation_id":"7dc61b19-8dca-453a-862e-d1edeeb5e11c","resolution":{"observed_at":"2026-08-03T10:45:18.400841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.511551Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.511551Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:3b1ff1ad1884dc77f54c725fdb7211402948b9543ecce545eac8c0f9887d0ecb","observation_id":"e9a8b1f2-b393-4d16-b0f8-34ebea8da355","resolution":{"observed_at":"2026-08-03T10:45:18.511551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.587713Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.587713Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:15e234c99efb7906c034d7d6ba31a00bb50d8a6e81e9bd5298f4102be5e1efd6","observation_id":"361e6f4e-b69f-43c8-97c5-4fe7c2bf7f9e","resolution":{"observed_at":"2026-08-03T10:45:18.587713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.670577Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.670577Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:40eb23fede01168647864488a15ad815d6c055c53e42bd3647789036b76dfd6c","observation_id":"d3da10df-f534-48ab-a0ad-50638d088d1a","resolution":{"observed_at":"2026-08-03T10:45:18.670577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.726697Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.726697Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:9d01bde520bb0388e1f7e95652f90e2a3497fc5f92e564c65cca7e4916decf95","observation_id":"597deca6-de6f-47f0-830b-c83d15f3a3d3","resolution":{"observed_at":"2026-08-03T10:45:18.726697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19793","snapshot_observed_at":"2026-08-03T10:45:18.810302Z","title":"arXiv preprint arXiv:2504.19793 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.810302Z"},"links":{"cited_paper":"/paper/2504.19793","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:eb0325c0229f9596508620327cbae4bffed6ca1c83325f750670908adfa7c6f0","observation_id":"2f75cb55-b457-4355-98b0-7f1fa8ccec48","resolution":{"observed_at":"2026-08-03T10:45:18.810302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.863024Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.863024Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:b7daad90e6abd467a85d0df41a36f750e019e1d44800c89fdb75c337c5d935bf","observation_id":"0472dc87-c557-4a6e-9bd9-00eb3079e021","resolution":{"observed_at":"2026-08-03T10:45:18.863024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:18.916271Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:18.916271Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:a70e8b9c65f586d3c439207c79ea4fa4ccfb4fbf5c226006aa1c2b611635f4df","observation_id":"4f96b43a-9645-4d10-a587-a55a8a268b3b","resolution":{"observed_at":"2026-08-03T10:45:18.916271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.042225Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.042225Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:511709660baf970961daaa59732a83c754af33fc0c389ba1e51296da6c93ea2e","observation_id":"d814c3da-89c8-4c9b-9f9f-e3d0789e16b1","resolution":{"observed_at":"2026-08-03T10:45:19.042225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.160989Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.160989Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:4131d546ed4d012e53ad4751f59cca58c0b7c966ffc0c8d7893cbcd6428a4eb0","observation_id":"e811ab58-647b-4606-a2f9-ae50bb07fdb3","resolution":{"observed_at":"2026-08-03T10:45:19.160989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-03T10:45:19.283817Z","title":"arXiv preprint arXiv:2404.13208 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.283817Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:c7d386e5de6c35d99b57a4e726694e2a8085ae470a581fac526703302758bd5c","observation_id":"8401c4a0-3dfa-42a8-a3f8-cf7fb49d5618","resolution":{"observed_at":"2026-08-03T10:45:19.283817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.434987Z","title":"arXiv e-prints pp","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.434987Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:72112f6ab42eff1dab74377e1e0163da812c404756972b9c6bb481ce3e1ac16d","observation_id":"cd74da55-4d1c-4d56-b1a3-9cbab589d6fb","resolution":{"observed_at":"2026-08-03T10:45:19.434987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.491402Z","title":"arXiv preprint arXiv:2510.19207 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.491402Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:b6f3f2b433efba792dc3bac2be476252d414e7a4fb243bb0e3736bc9c3c8cd6a","observation_id":"8c7bc88a-7877-42e1-aa37-ab93341389eb","resolution":{"observed_at":"2026-08-03T10:45:19.491402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.562067Z","title":"In: NDSS (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.562067Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:39b1bb84a5bfee2af1d820008c8417fee8c28e08ef221c46d66cba720ab5fba6","observation_id":"57c7835c-cd00-4931-b37f-e1bede23007f","resolution":{"observed_at":"2026-08-03T10:45:19.562067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-01T16:54:45.609883Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-03T10:45:19.642964Z","title":"arXiv preprint arXiv:2410.17401 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.642964Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:148c7882aceed9b42f063c243467b30fa1158a517035939b7b49cdc8d8001ead","observation_id":"b149cb52-69c8-4166-9817-38d256c2f88f","resolution":{"observed_at":"2026-08-03T10:45:19.642964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-03T10:45:19.715096Z","title":"arXiv preprint arXiv:2406.00083 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.715096Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:f863c7292d6fa6de86839923533136261189b19bba7fbc4d99e118aaf15bc120","observation_id":"bc236d1a-094c-4300-ab84-70e0ffb8542c","resolution":{"observed_at":"2026-08-03T10:45:19.715096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.729446Z","title":"In: Companion Proceed- ings of the 32nd ACM International Conference on the Foundations of Software Engineering","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.729446Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:a701bfa7256f0ae2b44987416f723765677d53b98dc8bd68c05c77c34c935865","observation_id":"3e346707-b1c3-48ab-809d-c875c1760100","resolution":{"observed_at":"2026-08-03T10:45:19.729446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.808251Z","title":"In: Proceedings of the 2025 Conference of the Nations of the Americas Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.808251Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:1b413a65d9983bbbcdcc7d994d2dd060fb3ca3f04e21600fa637d0d08c4f1b67","observation_id":"b4b7f5e4-10c7-4788-bf5b-7202886e1e6b","resolution":{"observed_at":"2026-08-03T10:45:19.808251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:19.950155Z","title":"IEEE Transactions on Dependable and Secure Computing21(6), 5242–5258 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.950155Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:b1ab84d427af7a0b99a20ab2a6d5e51cb99a6c923e452e46b784edf90eead9e3","observation_id":"06375c20-1ee5-4c50-981b-d6730bdeb901","resolution":{"observed_at":"2026-08-03T10:45:19.950155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T10:45:20.111398Z","title":"In: 34th USENIX Security Symposium (USENIX Security 25)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:20.111398Z"},"links":{"citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:434ba9c9826352adbc67031da7db5d778aaedd42695d5aa39f5f62d39d759f0b","observation_id":"d6a0271f-1b66-4b1f-afef-b937aaeeb5af","resolution":{"observed_at":"2026-08-03T10:45:20.111398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":40,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 2 inbound Pith citation observations for arXiv:2601.10758."}