Pith. sign in

Paper Citation Record · LEDGER

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents

As of 13 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 0 inbound Pith citation observations for arXiv:2607.05189.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.05189 v1

Coverage vector

measured 60 of 60 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-07-08T00:18:55.016013Z

measured 60 of 60 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-13T06:32:02.005865+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

60 of 60 outbound references displayed

  • verified exact7
  • verified fuzzy40
  • unresolved10
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch3

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation a3054842-2a02-411b-9cf5-2b674b4e8794 · outbound

This paper cites OpenClaw: Open-source personal AI agent frame- work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents OpenClaw: Open-source personal AI agent frame- work

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.579677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:d44b629768a7b5e2ac9dd96c12d44662348dfbc9418fef20b63c625bab5a53c8

Observation b0c93af4-2ef6-4b72-b1bb-1946fa67324b · outbound

This paper cites Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.615404Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:e3f2cb45ee29ec40edc659d4ee00a8d9449a19b844f7357a74c4a4494f59dcc8

Observation ef02c7bd-4764-445e-acf7-309b968aecd3 · outbound

This paper cites Formalizing and bench- marking prompt injection attacks and defenses,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Formalizing and bench- marking prompt injection attacks and defenses,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.611682Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:33fa3f28fed8fd47cfb28abecabba505ec94e98326c2cf23f61f762fe30e69b2

Observation f29c755e-a207-45bf-88fd-6bac5d5aa8cd · outbound

This paper cites Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.594455Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f71a525ff74098a4a8e1d43308d855ff5f097436b5ac7376d3cc3cd2d31ccf5e

Observation 6d453410-5180-409a-9376-d5b89e6d5098 · outbound

This paper cites {PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large lan- guage models,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents {PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large lan- guage models,

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.588991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f4aac87841c00f5f611b1a84af8e3212e9c59f4699fc70f65474850d99f87888

Observation 48cdb1a5-b19f-4554-b4ff-8ec30c2bbe46 · outbound

This paper cites Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory

Reference 6

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.456135Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f7b6cae86f9d52b6d0d1d0db0767400bb28ba3c08eefa05467937537b8b08dbb

Observation 1dbf73bd-0b52-4b4b-8d31-d8a46fd9e129 · outbound

This paper cites Zep: A temporal knowledge graph architecture for agent memory,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Zep: A temporal knowledge graph architecture for agent memory,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.555289Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:0bd3439380f016d5a5cfe6e90b46fd6c080199875da300f84065d8cccb3d3593

Observation d46ebe29-406f-4344-9a24-c062ecdd8d55 · outbound

This paper cites Hermes agent: The agent that grows with you.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes agent: The agent that grows with you

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.613543Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:9c37a1f93bdebff16f2da5855edb99910ce2bdfe5154fe97c8f1c67155cb5980

Observation b80c7a36-85e4-436b-a867-116782c1c006 · outbound

This paper cites Bug: System greeting prompt and thinking blocks leaked to user chat interface.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Bug: System greeting prompt and thinking blocks leaked to user chat interface

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.581466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:572f1c9c6d683c2ac8cdaf0e0304801f0bf2cc06f5f6fab84932b42864f3aad6

Observation cc119d62-f12c-4b72-b407-55e67bb7e457 · outbound

This paper cites Bug: Internal thoughts visible in web UI (Chrome, Open- Claw 2026.2.26).

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Bug: Internal thoughts visible in web UI (Chrome, Open- Claw 2026.2.26)

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.637311Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:d510d0290a922fbc38739a1a53a2864fd86b98a6bb5c5961204c43f73207e38f

Observation 5dcbee75-817a-4ba9-bd40-f78e2106ab5d · outbound

This paper cites Hermes-3 8B tool-call template leaks tool calls into content as text under realistic agent shape (Ollama).

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes-3 8B tool-call template leaks tool calls into content as text under realistic agent shape (Ollama)

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.630001Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:04c97d841b3e13edacc69facda9f150b7797bc3e8364e9481f23314fd65ac86d

Observation 44aa9991-fb1b-45b7-a629-036f206cef5b · outbound

This paper cites InjecAgent: Benchmark- ing indirect prompt injections in tool-integrated large language model agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents InjecAgent: Benchmark- ing indirect prompt injections in tool-integrated large language model agents,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.609576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:1c0617ff11815f955e89b4bb5e23061e39ab0f4bdda3096c6414279f28735cae

Observation 34745320-ac80-4aa6-89db-8bc1c4fb391a · outbound

This paper cites Agent security bench (ASB): Formalizing and bench- marking attacks and defenses in LLM-based agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agent security bench (ASB): Formalizing and bench- marking attacks and defenses in LLM-based agents,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.567518Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b2b2d9f7be44ced47fc50745b228ccfb896e3e7fdf2eb2ed50207602c43e068e

Observation 6d205a78-05b9-41ea-bc70-954e75aee862 · outbound

This paper cites Agent-SafetyBench: Evaluating the Safety of LLM Agents.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agent-SafetyBench: Evaluating the Safety of LLM Agents

Reference 14

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.452635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:d93f20eed08c6365af8da977d0c49d1fdc43a1ea7cbbe16735a70231d3589f6e

Observation 81c0fc25-6ce2-4531-bba0-85feecfda819 · outbound

This paper cites R-judge: Benchmarking safety risk awareness for LLM agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents R-judge: Benchmarking safety risk awareness for LLM agents,

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.635525Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:4920925182df5575bbfa877d4ceeb1a7a3bd1dd91574a9ba20fb804921c2e332

Observation 0a11eb64-4f65-40a2-80d9-323827befac2 · outbound

This paper cites Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Pro- file,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Pro- file,

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.607686Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:3cd32fa3d306a07319b5ce72fd9dd7e75f21fb0f0a83a3b6daf9f6a5526fa45b

Observation 1055920d-c960-4172-817e-71a4eefa5bea · outbound

This paper cites Rubrics as rewards: Reinforcement learning beyond verifiable do- mains,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Rubrics as rewards: Reinforcement learning beyond verifiable do- mains,

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.622197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:45daa546f550cc66b056c3fe07c93e69dc8aaf429e946960cc61dd818a8d4794

Observation 0f9db5da-b576-426c-b48e-a1f02f8cd333 · outbound

This paper cites Deepseekmath: Pushing the limits of mathematical reasoning in open language models,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Deepseekmath: Pushing the limits of mathematical reasoning in open language models,

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.620277Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f2e96b29cb478fd43ef4b8e5f3fe7c7cdbcbb3e580ed41f8c4736685448374bd

Observation c6064923-038a-4282-8ae2-a0610f6e092d · outbound

This paper cites Securing llm systems against prompt injection.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Securing llm systems against prompt injection

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.618439Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:cd5d510fc7163543e2e64857920d32eeb05fc5b994942f05b66a40d2e14992f5

Observation 3b917e0c-a0a1-4fe2-82ec-1580eebebca4 · outbound

This paper cites Prompt injection attacks against gpt-3.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Prompt injection attacks against gpt-3

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.605058Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b9fd41a5140146aa543c05e81eb26a082688b650d1647eb4f2fbbc228e6bc6c3

Observation 2f0d4c74-f8ba-4420-9d4d-45d24f478537 · outbound

This paper cites Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples

Reference 21

Resolution
metadata mismatch
local_arxiv, observed 2026-07-08T00:24:22.468806Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:5ac2aa4af81f070e74baa1ba5396451f18d8b4e63f6d35eb43bd7da6c8a08722

Observation 46db4377-b5c5-40ee-a72f-b9edd8b81895 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Ignore Previous Prompt: Attack Techniques For Language Models

Reference 22

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.462080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:e572b9b492d4f9d7fbc349584e1ffb280cfd1c296c230225bfa8d54a8ccae5d9

Observation f0ead309-bef3-4b21-9872-fc315f6fbcec · outbound

This paper cites Delimiters won’t save you from prompt injection.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Delimiters won’t save you from prompt injection

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.624132Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:61517b3506cc1b8e5a4ae989c277673167a5f96f7074190a7bb1b4fa48fe5dbb

Observation 596ca047-6af5-42c9-8568-fadafe95891c · outbound

This paper cites The attacker moves second: Stronger adaptive attacks bypass defenses against LLM jailbreaks and prompt injections,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents The attacker moves second: Stronger adaptive attacks bypass defenses against LLM jailbreaks and prompt injections,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.565410Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:d0191cd5c1572ac8d179debdd478a93ad8984182a5c9802309bc5b60641aee6c

Observation 535f49f8-dde5-42ca-ba68-8ab4db4f966a · outbound

This paper cites Thinking content leaks into text for MiniMax/Kimi — need per-model thinking control.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Thinking content leaks into text for MiniMax/Kimi — need per-model thinking control

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.577981Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:7770fc28ade56e6ec94a2c1a0649c10ad7856dfa02cc1ebdb4b9922c03d54f4b

Observation 53e64337-05f7-4fdc-941d-091221a52786 · outbound

This paper cites Datasentinel: A game- theoretic detection of prompt injection attacks,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Datasentinel: A game- theoretic detection of prompt injection attacks,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.561393Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f52aae2bc4aa2cba6f607f3e60cc9c720692eb07660a9db9f55f2ec60beb0595

Observation 2e8b9270-331b-47b1-881c-55de3eeca208 · outbound

This paper cites Meta secalign: A secure foundation llm against prompt injection attacks.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Meta secalign: A secure foundation llm against prompt injection attacks

Reference 27

Resolution
verified exact
arxiv_id, observed 2026-07-08T00:24:22.441236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:ea91f3b4ffcfb181cd71db9c9f4c816bd408d902814c0095a9337ff28ddcecac

Observation 5a000630-fcad-4135-a713-c202e9403c88 · outbound

This paper cites Agentdog: A diagnostic guardrail framework for ai agent safety and security,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentdog: A diagnostic guardrail framework for ai agent safety and security,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.597481Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:66bc8e4a7dc93751cd0c18f5502aaa8292c7aeb0e9e6948af0a0445b465d0fd1

Observation 85d24812-c5f4-424b-b30e-d3f375b00d01 · outbound

This paper cites From assistant to double agent: Formalizing and benchmarking attacks on OpenClaw for personalized local AI agent.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents From assistant to double agent: Formalizing and benchmarking attacks on OpenClaw for personalized local AI agent

Reference 29

Resolution
verified exact
arxiv_id, observed 2026-07-08T00:24:22.437969Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:e5939c27d37238d2868f358cc1de36585d783ee8cffbcc23e40ac5f4b0af3890

Observation 3d41f335-f9e0-4954-8317-0d15631beaa4 · outbound

This paper cites arXiv preprint arXiv:2602.14364 , year =.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents arXiv preprint arXiv:2602.14364 , year =

Reference 30

Resolution
metadata mismatch
arxiv_id, observed 2026-07-08T00:24:22.444219Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:010f08dd64133ca228f900ed743f3e6c005ebeb69a7927c9fa5785febce90806

Observation 1b44cf50-2e9d-455a-b7d1-d2a87e88799f · outbound

This paper cites Don’t let the claw grip your hand: A security analysis and defense framework for openclaw,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Don’t let the claw grip your hand: A security analysis and defense framework for openclaw,

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.596178Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:318718b761046a3d48c40272a619d33d6cd5107e86660621a41e65a407ff2bbd

Observation 6f775051-a681-43c0-9a90-2b849a0dbf6e · outbound

This paper cites Clawdrain: Exploiting tool-calling chains for stealthy token exhaustion in OpenClaw agents.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Clawdrain: Exploiting tool-calling chains for stealthy token exhaustion in OpenClaw agents

Reference 32

Resolution
verified exact
arxiv_id, observed 2026-07-08T00:24:22.465909Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:ae0b30d2af1935d49d93ebac5fad4cb065e4aeba2f38ac0de5b7cf69ef6ef2cc

Observation 5069d1f7-a859-476e-8c8b-3abb908637f6 · outbound

This paper cites Taming openclaw: Security analysis and mitigation of autonomous llm agent threats,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Taming openclaw: Security analysis and mitigation of autonomous llm agent threats,

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.585374Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:78b5db2f8ca582b29b59e8dd3b181d310ec3ef01f01327a7dd83c2dc950eb54c

Observation 3ce80ce9-c79b-481f-b0de-6b36bb6ea509 · outbound

This paper cites Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.641230Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b1ae38704e491539c871c28ce35a402b557152238e5446077f7cb7e81a37436c

Observation 9745d96d-3f00-489a-be72-eca7cf4b6ae7 · outbound

This paper cites Memory injection attacks on LLM agents via query-only interaction,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Memory injection attacks on LLM agents via query-only interaction,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.557135Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f944442b81d01773ef98b5af44456ee811f57c2ce0a1aff8c7c656f22d6b85cf

Observation 2d7ab257-7e05-44d9-8766-5d14896846d7 · outbound

This paper cites Memory poisoning attack and defense on memory based llm-agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Memory poisoning attack and defense on memory based llm-agents,

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.575739Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:b911066c602d9f7b527110dd395870773773a49a0da0f9fc337676426a7a56e4

Observation ae4c7f9b-aac7-4398-a2cb-b0012550eb6c · outbound

This paper cites Agentlab: Benchmarking llm agents against long-horizon attacks,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Agentlab: Benchmarking llm agents against long-horizon attacks,

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.583363Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:057bbec8d0be806d3dbaf5547b2d1b6758b4a12eedb76eb9df71ed97fba24b98

Observation 3362f025-1935-4388-83ea-1a8fd1f257d3 · outbound

This paper cites Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.540641Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:4a278c0b7ffbd461acca4d9e056f8f580e0a3ea87dc99a935a08c56eaa1d5c28

Observation f02a4b00-da82-42f5-98d8-9581983985a3 · outbound

This paper cites arXiv preprint arXiv:2512.16962 , year=.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents arXiv preprint arXiv:2512.16962 , year=

Reference 39

Resolution
metadata mismatch
arxiv_id, observed 2026-07-08T00:24:22.449187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:7a16d9ffbe96d4dbc224334147d6d3c655a80cfb6b949f86d27bd965c5db8f70

Observation 235bf3eb-2b0a-4441-a2dc-a1f1b23270b8 · outbound

This paper cites Context manipulation attacks : Web agents are susceptible to corrupted memory.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Context manipulation attacks : Web agents are susceptible to corrupted memory

Reference 40

Resolution
verified exact
local_arxiv, observed 2026-07-08T00:24:22.459420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:9162560e2d73e39840aca946b48ad1989c81f9519cb441500938a6c24946af7c

Observation 95e224f4-cb69-43dc-8594-711c66286d11 · outbound

This paper cites Gmail API Overview.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Gmail API Overview

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.563371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8c9edebabc1f78de86ffeaaa82c840a5b106f409a3db5838134614413f65515b

Observation 45d66257-5911-45e0-8e9f-b511ec8631cd · outbound

This paper cites Use the Microsoft Graph API.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Use the Microsoft Graph API

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.603346Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:85b3f5014e02f3568276960c1bf7e71437318ec76554563782ba8a9617547d6d

Observation 3c9af81a-f596-4149-8afe-355b8d9d0436 · outbound

This paper cites Decodingtrust-agent platform (dtap): A controllable and interactive red-teaming platform for ai agents,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Decodingtrust-agent platform (dtap): A controllable and interactive red-teaming platform for ai agents,

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.548155Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:57e3156898940ca9207bf994aa3d9eaaff689a0026718dca29115a43b2af93ca

Observation e1b0cc03-f068-40a7-bc37-acb10c76a81b · outbound

This paper cites On cost-effective llm-as-a-judge improvement techniques,.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents On cost-effective llm-as-a-judge improvement techniques,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.553369Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:a9138fda97c466d79c59ecd23a8df61018f3b8c17b5bd6e74e7cddaa6040c748

Observation 9b3dabe1-11b0-4243-b79c-737d853de8cc · outbound

This paper cites Hermes agent documentation: Memory providers.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Hermes agent documentation: Memory providers

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.631783Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:2140ff61c8bdca5b9bb75fd9259b8a967d943f905266f385cde72e350c2ac40c

Observation cdde1a45-e212-40eb-a0ee-62355204ab9b · outbound

This paper cites NanoClaw: A lightweight alternative to OpenClaw with container isolation.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents NanoClaw: A lightweight alternative to OpenClaw with container isolation

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.639447Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:9626c7a8c9a3e86ad2e6d5607560d470140e5c596d45ce280fd16b67c9af2b8c

Observation 379e5185-d606-4a75-83ee-48fb0553292b · outbound

This paper cites Automation Templates: The Silent Pattern.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Automation Templates: The Silent Pattern

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.587150Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:823a7dde26e45a5f3d24113bc6202803fb2df2b5bef5640101a6a4b52c6c1a0e

Observation 621cb83a-8d83-411b-bc0f-0fbdc8c237ec · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.543101Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:1ab6574ad7f3edfd6669a8e0768d41ccb385963d7e7bcaca0da9842e2d7d4051

Observation 67524c10-ba11-4bbb-a498-5a85d85d83ba · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 49

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.551216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:3632603ad39cb437e013c82805ba5b6704545cf053f1ef8b11c6c8d1a1c9a81c

Observation cef21a73-69e1-4a35-add7-be0550b0fec4 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 50

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.571791Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:88a3fcf7f1340d22ddf31a2391fcffe3724ac443fd24164ab20368157415cabd

Observation 5a8b81da-a772-4f57-a5a5-dfe7da838120 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 51

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.573764Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:60d3990501fdb093f2fd737614bdf4ed6bf36e7a7420b40b3cb76f73d608a164

Observation 77cc1808-e03f-4ec5-a7bc-47c7ce2c8439 · outbound

This paper cites improvement.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents improvement

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.627707Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:8043806b6ac566e89febde8e8f0b8f60fe6dfd8e0efcfbc9fffea5c4dee15bf2

Observation 7365928a-8c67-4836-9fa3-ac72178eea75 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.569589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:2864e155e5df457922a406c646675e69074b28bc6f94235206d5e5e0627aa6dd

Observation 95938d8b-97ef-402e-a27c-0c6655781963 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 54

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.599549Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:3750cde45408474aa3009bd86353d11e416635994945142b5b3e82f3655d29a6

Observation d98e770f-07ea-4a2d-9b4e-f8ccd2531da8 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 55

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.601376Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:6f115ca29748aefa3c7eaa64fd736eca9a4a4037032b98ac67f4f6098446f212

Observation 6288b007-0d85-465d-a008-eddf73b740c7 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 56

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.559110Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f799d24c469c540b57c4d6c65a998e8989726a39383154984334a90c2b31fc83

Observation 0695b283-8a84-4e3f-a77e-bc8482285141 · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 57

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.590489Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:4b03b5077f32494ada8fd90ce6f8b2313c42b5a1de16c954e7cfb1dc19f51ae9

Observation ecef514a-d2c0-489f-a1a8-c613ef4e737c · outbound

This paper cites an unresolved cited work.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents Unresolved cited work

Reference 58

Resolution
unresolved
raw_fallback, observed 2026-07-08T00:24:22.633513Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:5de15a34cb0c8f4104f253f381ea30432503104e3f06cdeec86e6c3cb0f1956a

Observation 6d363062-8560-4752-8837-32f715bd4014 · outbound

This paper cites the correct answer.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents the correct answer

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.626095Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:a57c95b1af560775aa7aeae7236e76de6b90403d7effe3047f82246d2e53ddfc

Observation 70cac6d0-b06a-425e-ad41-c9d797cc1ade · outbound

This paper cites verdict":.

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents verdict":

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-07-08T00:24:22.592150Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-07-08T00:18:55.016013Z digest=sha256:f6f5088eb5e83bc2922ac5ebaec4e513fe0b62491e0bdb3469c00df3bdc4d2c7

Pith citing papers

No inbound Pith citation observations are available.