Paper Citation Record · LEDGER

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents

As of 15 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 0 inbound Pith citation observations for arXiv:2608.03509.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.03509 v2

Coverage vector

measured 22 of 22 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-10T04:30:17.488023Z

measured 22 of 22 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-15T06:32:42.880941+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

22 of 22 outbound references displayed

verified exact0
verified fuzzy0
unresolved22
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation f3be7d9f-05b3-4729-8fab-047f5072bc1a · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.413666Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9b2dbcf1-2595-4b4a-8e01-903a497c055e · outbound

This paper cites From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.417966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7223c9f3-37ba-4deb-89c5-4b82ee80417e · outbound

This paper cites Debenedetti, J.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Debenedetti, J

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.422145Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3050acb2-17df-43f9-9d5e-daa1ada18d88 · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.425647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30aaf2ff-c22c-4ff7-9de7-26fa5b53f0cb · outbound

This paper cites BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.429016Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 27c6fb14-cb48-40f6-8bb9-ef39f96651f3 · outbound

This paper cites Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.432890Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9992dace-f810-4ed5-a172-ed26d1d2ed23 · outbound

This paper cites Skill-Pro: Learning Reusable Skills from Experience via Non-Parametric PPO for LLM Agents.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Skill-Pro: Learning Reusable Skills from Experience via Non-Parametric PPO for LLM Agents

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.436895Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e17c1100-fe14-4f39-9b88-8a9d04bd339a · outbound

This paper cites Trace2Skill: Distill Trajectory-Local Lessons into Transferable Agent Skills.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Trace2Skill: Distill Trajectory-Local Lessons into Transferable Agent Skills

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.440509Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b80b906-2431-4c3c-bc15-01891995b6bb · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.443983Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6c33900c-cd0c-4a20-9d71-0d2af8a86b2b · outbound

This paper cites Anything2Skill: Compiling External Knowledge into Reusable Skills for Agents.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Anything2Skill: Compiling External Knowledge into Reusable Skills for Agents

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.447263Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eaed5292-1a86-4ad9-a232-03aeef9cbe88 · outbound

This paper cites Shafahi, W.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Shafahi, W

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.450937Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 783dad64-0433-4c34-8c4e-a4a6a3f4ecfe · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.454169Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cd52dc41-14ee-4fa2-85b5-d18f53f121cd · outbound

This paper cites Trivedi, T.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Trivedi, T

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.457514Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e547a20f-2e8d-4384-a42c-cacc6e32b41c · outbound

This paper cites SkillX: Automatically Constructing Skill Knowledge Bases for Agents.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents SkillX: Automatically Constructing Skill Knowledge Bases for Agents

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.460917Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation af264448-677f-4f1a-9561-7e773cf2c7fe · outbound

This paper cites OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.464357Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a825894d-8253-471f-a885-b5c3b0d9d6e2 · outbound

This paper cites Agent Workflow Memory.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Agent Workflow Memory

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.467794Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ee1b9701-30c2-4326-b889-a72be2d408d9 · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.471290Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 037bd6c7-f710-45d6-9057-77bc622d6e93 · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.474509Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5f0beb60-b48e-4f15-8664-142f16e472f1 · outbound

This paper cites AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.477789Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8c2bf115-90d5-4a0a-aeb8-3f58160a9e2f · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.481154Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7b399def-ec88-43dc-9e9b-7384eabb56b8 · outbound

This paper cites an unresolved cited work.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Unresolved cited work

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.484592Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b4028339-bd95-41bb-ac55-be2e635a72c1 · outbound

This paper cites Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents.

SkillJack: Persistent Skill Backdoors in Self-Evolving Agents Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-10T04:30:17.488023Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.