{"as_of":"2026-08-21T03:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:21a9a2eca5a1bc0312e5621969439de872c5a1334973b6184834a225db8928d1","coverage":[{"denominator":8,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T11:51:14.939425Z","state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T11:52:15.910115Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T06:59:37.263500Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"cited_work":{"arxiv_id":"2605.28588","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.28588","snapshot_observed_at":"2026-07-04T06:59:37.263500Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","venue":"cs.CR","work_id":"0a9058c5-b1c0-4172-bdbb-0661eab8cb23","year":2026},"citing_paper":{"arxiv_id":"2605.03353","last_updated":"2026-06-03T02:50:21Z","snapshot_observed_at":"2026-08-15T03:58:51.368930Z","submitted_at":"2026-05-05T04:15:48Z","title":"SkCC: Portable and Secure Skill Compilation for Cross-Framework LLM Agents","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-01T00:27:42.245909Z"},"links":{"cited_paper":"/paper/2605.28588","citing_paper":"/paper/2605.03353"},"observation_digest":"sha256:da796509e8ab3249928f9dd8a46ed15cb5ee0c1b11b7418e314912e2219da87c","observation_id":"06f3f556-c465-4de3-815a-6e0984d5ca83","resolution":{"observed_at":"2026-07-01T00:35:10.388567Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"cited_work":{"arxiv_id":"2605.28588","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.28588","snapshot_observed_at":"2026-07-04T06:59:37.263500Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","venue":"cs.CR","work_id":"0a9058c5-b1c0-4172-bdbb-0661eab8cb23","year":2026},"citing_paper":{"arxiv_id":"2606.21071","last_updated":"2026-06-19T03:40:00Z","snapshot_observed_at":"2026-08-14T12:32:38.486195Z","submitted_at":"2026-06-19T03:40:00Z","title":"Local LLM Agents as Vulnerable Runtimes:A Source-Code Audit of the Agent Runtime Layer","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T14:02:37.404821Z"},"links":{"cited_paper":"/paper/2605.28588","citing_paper":"/paper/2606.21071"},"observation_digest":"sha256:94c219b1d94fedbe7a8129fcf693524a8b92767720261a55425fd35f1ea2538a","observation_id":"09f56075-0c82-46aa-b636-b10c44a023ef","resolution":{"observed_at":"2026-07-04T06:59:37.264746Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.28588","snapshot_observed_at":"2026-08-11T11:52:15.910115Z","title":"arXiv preprint arXiv:2605.28588","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09732","last_updated":"2026-08-10T15:32:44Z","snapshot_observed_at":"2026-08-17T00:48:13.241589Z","submitted_at":"2026-08-10T15:32:44Z","title":"ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-11T11:52:15.910115Z"},"links":{"cited_paper":"/paper/2605.28588","citing_paper":"/paper/2608.09732"},"observation_digest":"sha256:e96c7b84b6a799784b3057ad72a234032620f52c2574f4fe30d7a8ad6d0b17bd","observation_id":"bd4e4399-af3e-4b85-9657-72d139a677c4","resolution":{"observed_at":"2026-08-11T11:52:15.910115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.28588/citation-record","integrity":"/paper/2605.28588/integrity","json":"/paper/2605.28588/citation-record.json","paper":"/paper/2605.28588"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"toxic flows,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:ecd082cdd5f2a74a49691ece0361b80f9a43e739b3c4039e3d5c6a9f90fcc561","observation_id":"2f0aa0dc-27a0-4ff0-8f48-a8607fd05791","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:2135c4241877d429af371b7a187309110944b0a53d78d755badf6065a665896b","observation_id":"88165b43-c856-418d-8cbf-0d899a8d2264","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Github mcp exploited: Accessing private repositories via mcp","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:56a54be83e773d9b56bdd8af301f5d5af4835dbb1eb46b14690a4cd0d55de67f","observation_id":"1a5d0f70-1337-4666-9d13-1d9a6d451442","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Clawdbot skills ganked your crypto","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:565273978f85e14cab4954eba91bff47ff8ae125b0e8125b4062dbe7f00a3e8d","observation_id":"a2fc3971-a034-4454-9f46-17508c8757ca","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Superhuman AI exfiltrates emails","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:81123f65dcd0b083922f45b0968359fd6c5a00154b3b3497c7b457470eab06a4","observation_id":"851a70e4-26ae-49b1-88fc-ab6c3a789668","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.26328","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T15:48:35.870152Z","title":"Agent skills enable a new class of realis- tic and trivially simple prompt injections","venue":null,"work_id":"8dfc4a7d-02a6-4eb8-9562-49d4fcee1395","year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:c6a152f3068d2d9feb18ed8f0bed831bcf75fe1cc4693d795bb9d8d1e8f849c1","observation_id":"9ad1ae7f-ed32-417b-9cca-bfd2310c9a1c","resolution":{"observed_at":"2026-06-29T11:53:23.635900Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"Inside the ‘clawdhub’ malicious campaign: AI agent skills drop reverse shells on OpenClaw marketplace","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:7437c4f4134bd9d2bedf0a7e98267e78a5a1f928082cc1081251a06359bf52d3","observation_id":"a0369966-f29a-48b6-b32b-833a4f1e8c7a","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T11:51:14.939425Z","title":"The lethal trifecta","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-29T11:51:14.939425Z"},"links":{"citing_paper":"/paper/2605.28588"},"observation_digest":"sha256:088ccb9526ca5725be09e59ca2ee1dfe5c7fc86893e048af5f3761fc995ad20b","observation_id":"936ddadc-bbca-4e7f-bf7c-43fb7e50032f","resolution":{"observed_at":"2026-06-29T11:51:14.939425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.28588","last_updated":"2026-05-27T15:10:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T02:00:15.673060Z","submitted_at":"2026-05-27T15:10:10Z","title":"Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem"},"reference_resolution":{"displayed":8,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":8},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 8 of 8 outbound references and 3 inbound Pith citation observations for arXiv:2605.28588."}