{"as_of":"2026-08-09T22:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7a1a4769c60d02b44b38cebcedcf42d01a5f87e705551571bae1d57f0cde098e","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T09:30:52.016053Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.20759/citation-record","integrity":"/paper/2607.20759/integrity","json":"/paper/2607.20759/citation-record.json","paper":"/paper/2607.20759"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.09329","last_updated":"2025-08-23T11:49:50Z","snapshot_observed_at":"2026-08-08T22:52:54.691095Z","submitted_at":"2025-07-12T16:11:07Z","title":"When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.09329","snapshot_observed_at":"2026-08-01T09:30:48.387916Z","title":"When de- veloper aid becomes security debt: A systematic analysis of insecure behaviors in LLM coding agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:48.387916Z"},"links":{"cited_paper":"/paper/2507.09329","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:4b509880f0f031661012a789c43d952639347f41431816d5151fe04c1add9ec3","observation_id":"00b96736-6621-43b3-96db-d0ecb4c10ff8","resolution":{"observed_at":"2026-08-01T09:30:48.387916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16741","last_updated":"2025-04-18T18:14:31Z","snapshot_observed_at":"2026-08-02T14:58:44.167588Z","submitted_at":"2024-07-23T17:50:43Z","title":"OpenHands: An Open Platform for AI Software Developers as Generalist Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16741","snapshot_observed_at":"2026-08-01T09:30:48.497431Z","title":"OpenHands: An open platform for AI software developers as generalist agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:48.497431Z"},"links":{"cited_paper":"/paper/2407.16741","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:287155cf535812ea40da8fdcfd97182df09c90b216233ed53a1eef99d8f69355","observation_id":"39d17516-ad31-42c7-815d-f9d689553c94","resolution":{"observed_at":"2026-08-01T09:30:48.497431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18341","last_updated":"2026-04-08T10:21:32Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T10:28:10Z","title":"Agentic Much? Adoption of Coding Agents on GitHub","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18341","snapshot_observed_at":"2026-08-01T09:30:48.666592Z","title":"Agentic much? adoption of coding agents on GitHub,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:48.666592Z"},"links":{"cited_paper":"/paper/2601.18341","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:77bc62516a4cbffabbb6bbb6b15a0fe0ad6a8feb377d7230f8dcb2830e6dc61d","observation_id":"b252d1d3-5e9e-485e-a748-9fc37d3c3057","resolution":{"observed_at":"2026-08-01T09:30:48.666592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11072","last_updated":"2024-07-12T22:30:35Z","snapshot_observed_at":"2026-08-09T21:59:44.737295Z","submitted_at":"2024-07-12T22:30:35Z","title":"MaPPing Your Model: Assessing the Impact of Adversarial Attacks on LLM-based Programming Assistants","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11072","snapshot_observed_at":"2026-08-01T09:30:48.861189Z","title":"MaPPing your model: Assessing the impact of adversarial attacks on LLM-based programming assistants,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:48.861189Z"},"links":{"cited_paper":"/paper/2407.11072","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:878a6ac89a3ca3eae1e9bcff220a748a284a246afb78e3c8df0a8f08a1ce9814","observation_id":"483f0a05-786e-45ff-b2d0-36526cdc475e","resolution":{"observed_at":"2026-08-01T09:30:48.861189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04730","last_updated":"2023-12-12T19:42:11Z","snapshot_observed_at":"2026-08-09T21:05:53.921670Z","submitted_at":"2023-12-07T22:19:06Z","title":"DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04730","snapshot_observed_at":"2026-08-01T09:30:49.040148Z","title":"DeceptPrompt: Exploiting LLM-driven code generation via adversarial natural language instructions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:49.040148Z"},"links":{"cited_paper":"/paper/2312.04730","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:1e3ab73f1d46bbb1ca903f141f02f835bd1943b1f1e1cb2ed12fa8dee5b2d49b","observation_id":"7bed2130-f027-49f9-ab0d-c1d6e23eae1f","resolution":{"observed_at":"2026-08-01T09:30:49.040148Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T05:58:57.244749Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05224","snapshot_observed_at":"2026-08-01T09:30:49.265611Z","title":"A survey on backdoor threats in large language models (LLMs): Attacks, defenses, and evaluations,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:49.265611Z"},"links":{"cited_paper":"/paper/2502.05224","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:7d904a9808d1348298ecac6e24ffe23f55ecbf5af9bc0f03facb843fb2e5d2be","observation_id":"ec30df92-7a97-4f3c-9842-8833e8b5b87e","resolution":{"observed_at":"2026-08-01T09:30:49.265611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:49.461782Z","title":"OW ASP top 10 for large language model applications, version 2025,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:49.461782Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:1b34de96fd4e8a67e6457823eefa24ba238bc93e09a2ea26c24a9b0418c378e5","observation_id":"198d2706-bd01-4d90-9079-d6ca0024ee03","resolution":{"observed_at":"2026-08-01T09:30:49.461782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-01T09:30:49.613327Z","title":"Not what you’ve signed up for: Compromising real- world LLM-integrated applications with indirect prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:49.613327Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:2b8e7125743c23c773663c0c6891cb9d2fa2727fa10fdd86ede4dfa58925abd4","observation_id":"7a997758-e723-421d-9dd5-1b58ae6e3ac5","resolution":{"observed_at":"2026-08-01T09:30:49.613327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:49.783801Z","title":"From prompt injections to protocol exploits: Threats in LLM-powered AI agents workflows,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:49.783801Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:9e557d0040ea6223700c246c502c8e5ff0e299c91094ce4a6b99d8dcb4967cdb","observation_id":"255bddf3-a57d-4035-8dc1-9db6407f4f30","resolution":{"observed_at":"2026-08-01T09:30:49.783801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.22040","last_updated":"2026-04-28T01:43:32Z","snapshot_observed_at":"2026-08-02T08:19:00.747753Z","submitted_at":"2025-09-26T08:20:54Z","title":"\"Your AI, My Shell\": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.22040","snapshot_observed_at":"2026-08-01T09:30:50.268369Z","title":"“your AI, my shell","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.268369Z"},"links":{"cited_paper":"/paper/2509.22040","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:231b5861338964f74d62cbe41f568187f96a99d7d851931b6d4b71cc7dd66a05","observation_id":"fb2327e0-a826-48a3-b9f4-16e3a92d28a3","resolution":{"observed_at":"2026-08-01T09:30:50.268369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.355109Z","title":"Injecagent: Benchmark- ing indirect prompt injections in tool-integrated large language model agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.355109Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:3a731ca3486fffe1b7c5c78bc22a7446dc8f27ce6ef56e7cc988c561cc633a52","observation_id":"11c8738b-c50e-4a4d-9114-085ddc6d4fbd","resolution":{"observed_at":"2026-08-01T09:30:50.355109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.413766Z","title":"Imprompter: Tricking LLM agents into improper tool use,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.413766Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:79f366966618838fee76d1efc6e9163b934bf48d81d31f5988ef1c5902b1f851","observation_id":"6845b42b-aa08-4107-aff1-e5a37a9ee1fa","resolution":{"observed_at":"2026-08-01T09:30:50.413766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.464932Z","title":"PromptPwnd: How AI agents are exploited through prompt injection in ci/cd pipelines,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.464932Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:d889a195c3a77134ffaab9852c1f3913cc1a78c1a1b9e0ecb8931d6c0afe6a0d","observation_id":"3af8ea01-df22-464a-923a-30fb014c3f6e","resolution":{"observed_at":"2026-08-01T09:30:50.464932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.540895Z","title":"How hidden prompt injections can hijack AI code assistants,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.540895Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:4f2572987f4b471458d871cb4f7d57acdc1da1bfeae9a2b6e8f181dff06a1d07","observation_id":"c61b477e-ef28-449c-a626-068c409bfcc1","resolution":{"observed_at":"2026-08-01T09:30:50.540895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-01T09:30:50.619079Z","title":"Defending against indirect prompt injection attacks with spotlighting,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.619079Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:79092128222a265dd2b8e80de87ab6dd8d1d81ab18d915c767b876e5268d5d8f","observation_id":"efb8fd80-75fc-452a-80e6-8e0c5794b54e","resolution":{"observed_at":"2026-08-01T09:30:50.619079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.682081Z","title":"The task shield: Enforcing task alignment to defend against indirect prompt injection in LLM agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.682081Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:aed6a77e1032e93232c7c89aa702c31af32bbae5243f04434df439fb45ab43c6","observation_id":"cdc65bde-9167-4673-b789-f8a20a274502","resolution":{"observed_at":"2026-08-01T09:30:50.682081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.725862Z","title":"IPIGuard: A novel tool dependency graph-based defense against indirect prompt injection in LLM agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.725862Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:63a3a3036c8730ea465f4ff4ef2f18133a3c6c79fa1148ed2931e8aad879cffd","observation_id":"52629169-354d-45a5-a8f3-ce5620f2348f","resolution":{"observed_at":"2026-08-01T09:30:50.725862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.939382Z","title":"Struq: Defending against prompt injection with structured queries,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.939382Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:ac2b14ee517ee8a71b5e286118de13eb30fc7320363665f087f6f69e8626d010","observation_id":"6f4f2530-431b-4e61-bbca-253647a51576","resolution":{"observed_at":"2026-08-01T09:30:50.939382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.859310Z","title":"Available: https://arxiv.org/abs/2601.04795","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.859310Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:f0785550cd2b40c74766d7ac598d3546d68cb1d86a708f3ca3c1a68fea3c5182","observation_id":"7d3e33fe-1f19-44a3-b32f-0db76ca222bd","resolution":{"observed_at":"2026-08-01T09:30:50.859310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03574","last_updated":"2025-05-06T14:34:21Z","snapshot_observed_at":"2026-08-07T15:49:30.311074Z","submitted_at":"2025-05-06T14:34:21Z","title":"LlamaFirewall: An open source guardrail system for building secure AI agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.03574","snapshot_observed_at":"2026-08-01T09:30:51.102769Z","title":"Llamafire- wall: An open source guardrail system for building secure AI agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.102769Z"},"links":{"cited_paper":"/paper/2505.03574","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:61f37c4c7a91788e983d8b7e85814b1c1b30cc7e719e986e8fcdc660ac7628d0","observation_id":"5b4c6441-b3db-42e9-82cf-b170672080ef","resolution":{"observed_at":"2026-08-01T09:30:51.102769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-01T09:30:51.021596Z","title":"Defeating prompt injections by design,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.021596Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:35053f1d75dc9fb3499045a3d5428fca425ea2a74a10238727a927372c9faa90","observation_id":"3de13c0f-63cf-41a2-af31-48b1205c52d8","resolution":{"observed_at":"2026-08-01T09:30:51.021596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-01T09:30:51.290701Z","title":"Agent security bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.290701Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:5cc5f253c98ec1f46c63d48fdf12fb4d9a61e5ddfc28a9c2c49d84988e8f83b0","observation_id":"48bcac9d-1961-437b-a039-51f235b0dcad","resolution":{"observed_at":"2026-08-01T09:30:51.290701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-01T09:30:51.184109Z","title":"AgentDojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.184109Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:b0571182c26e0e924776735fbfcdf60ade848543f0ed638cad2702cb46da4596","observation_id":"707e6df5-b157-4010-89ce-b5f06de4baab","resolution":{"observed_at":"2026-08-01T09:30:51.184109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.496934Z","title":"Codex sandboxing documentation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.496934Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:f38a813428698c33568b695eb6c09a9dc624651828275ed87a0957815c37826b","observation_id":"23059227-b10b-4c0d-abb6-b1caa83d6d8d","resolution":{"observed_at":"2026-08-01T09:30:51.496934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.309796Z","title":"Claude code: An agentic cli for software engineering,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.309796Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:0abb5dbc7ebaabc14c8702019de3f2b6af00f30345dc0a12a6d01975ef7d6919","observation_id":"a1d80729-15a7-411b-ba9c-4c07d4320186","resolution":{"observed_at":"2026-08-01T09:30:51.309796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.374130Z","title":"Available: https://code.claude.com/docs/en/overview","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.374130Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:bef6b6a91d58a1d6579c5f6973e5df3066515e7501b5dba2c15e0f6af137448e","observation_id":"2b8d94ea-8980-4a05-90f6-bc2b8cea42a9","resolution":{"observed_at":"2026-08-01T09:30:51.374130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.771485Z","title":"GPT-5.4 thinking system card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.771485Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:6663302622b6469dc6001d64f0940ce3bcff732b375065ca8499fe00fffc60ee","observation_id":"b915b4a1-68ab-4026-88c5-9447d5a03f1b","resolution":{"observed_at":"2026-08-01T09:30:51.771485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.613009Z","title":"Cursor: The ai code editor,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.613009Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:d82a9950226fc0ef3ab6272fdb7a8ae366b9d8ad277464715fa802d7a9fb0004","observation_id":"e0ab4f89-f963-4360-8f29-a7ea3bd049eb","resolution":{"observed_at":"2026-08-01T09:30:51.613009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.717952Z","title":"Claude sonnet 4.6 system card,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.717952Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:e02e1a229b568b85b7afe9fd8a7057355493d0e88c736060832c6d0f91c0dcdd","observation_id":"6fe74853-1433-441a-90d8-5e4cc8a88b4b","resolution":{"observed_at":"2026-08-01T09:30:51.717952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21965","last_updated":"2024-10-29T11:47:01Z","snapshot_observed_at":"2026-07-06T19:41:28.618975Z","submitted_at":"2024-10-29T11:47:01Z","title":"SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Types","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21965","snapshot_observed_at":"2026-08-01T09:30:51.953664Z","title":"SG-Bench: Evaluating LLM safety generalization across diverse tasks and prompt types,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.953664Z"},"links":{"cited_paper":"/paper/2410.21965","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:3d64284231f091f38b3835eb7deaef47de8f434f5e3449b96a28a8bc6b0b6ba8","observation_id":"013174f2-b712-4dd3-a535-f548f7d4c2dd","resolution":{"observed_at":"2026-08-01T09:30:51.953664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.833450Z","title":"GPT-5.3-Codex system card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.833450Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:73278f7c3b75a20b8872b44583b6e050f053128109434e448aee5c6643380bd7","observation_id":"956839f1-5243-4392-b802-dd6229126c0f","resolution":{"observed_at":"2026-08-01T09:30:51.833450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:51.892522Z","title":"SWE-agent: Agent-computer interfaces enable automated software engineering,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:51.892522Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:1840f329c1cc1af85298cdfe36398228fb3cd104cbeef3f19ee5c746cbcdec29","observation_id":"9fd554ef-9132-4800-9897-e54bc269d420","resolution":{"observed_at":"2026-08-01T09:30:51.892522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.08837","last_updated":"2025-06-27T11:13:27Z","snapshot_observed_at":"2026-08-09T15:19:11.106490Z","submitted_at":"2025-06-10T14:23:55Z","title":"Design Patterns for Securing LLM Agents against Prompt Injections","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.08837","snapshot_observed_at":"2026-08-01T09:30:52.016053Z","title":"Design patterns for securing LLM agents against prompt injections,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:52.016053Z"},"links":{"cited_paper":"/paper/2506.08837","citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:f13490c6cfb4a0363f78f5ef5d65dba35f7c30ed509a22114bac3298deb1ab51","observation_id":"77f03a05-7c8b-4407-a4f2-162945b4802f","resolution":{"observed_at":"2026-08-01T09:30:52.016053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T09:30:50.095626Z","title":"Available: https://arxiv.org/abs/2601.17548","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-01T09:30:50.095626Z"},"links":{"citing_paper":"/paper/2607.20759"},"observation_digest":"sha256:c8c91fe50361e31e5805ee1fafc80b0eccb83150d762c152f363afbc6152bcd2","observation_id":"39c1ae47-6d2b-49d6-a14d-1faa08503a22","resolution":{"observed_at":"2026-08-01T09:30:50.095626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.20759","last_updated":"2026-07-22T22:20:02Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T04:22:22.445624Z","submitted_at":"2026-07-22T22:20:02Z","title":"IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2607.20759."}