Paper Citation Record · LEDGER

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems

As of 10 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2608.05563.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.05563 v2

Coverage vector

measured 29 of 29 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-10T04:29:49.892021Z

measured 29 of 29 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

29 of 29 outbound references displayed

verified exact0
verified fuzzy0
unresolved29
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 6a3f1da2-7f4b-40c9-9996-702b14b47968 · outbound

This paper cites SkillClaw: Let Skills Evolve Collectively with Agentic Evolver.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems SkillClaw: Let Skills Evolve Collectively with Agentic Evolver

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.762335Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0cafb8b5-31ac-490e-a88c-b7802d7d826e · outbound

This paper cites arXiv preprint arXiv:2603.01145 , year =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems arXiv preprint arXiv:2603.01145 , year =

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.769334Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6cdf30a6-2463-4f85-a1e1-df54ff7a2c36 · outbound

This paper cites Trace2Skill: Distill Trajectory-Local Lessons into Transferable Agent Skills.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Trace2Skill: Distill Trajectory-Local Lessons into Transferable Agent Skills

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.774081Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 73a9c838-75a1-44ad-b1ac-5ac67bc27ad3 · outbound

This paper cites MemSkill: Learning and Evolving Memory Skills for Self-Evolving Agents.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems MemSkill: Learning and Evolving Memory Skills for Self-Evolving Agents

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.778856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5647c017-e92e-4386-9a26-dfe344d324e4 · outbound

This paper cites SkillRL: Evolving Agents via Recursive Skill-Augmented Reinforcement Learning.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems SkillRL: Evolving Agents via Recursive Skill-Augmented Reinforcement Learning

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.784659Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c5db0736-a542-414b-a878-47e6b36e54a2 · outbound

This paper cites CoEvoSkills: Self-Evolving Agent Skills via Co-Evolutionary Verification.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems CoEvoSkills: Self-Evolving Agent Skills via Co-Evolutionary Verification

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.789674Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 695b0e73-c856-4b25-94ba-688632f585ab · outbound

This paper cites Skill-SD: Skill-Conditioned Self-Distillation for Multi-turn LLM Agents.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Skill-SD: Skill-Conditioned Self-Distillation for Multi-turn LLM Agents

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.794903Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a6a6577c-bdce-4bb1-8f47-90a659974c12 · outbound

This paper cites MUSE-Autoskill: Self-Evolving Agents via Skill Creation, Memory, Management, and Evaluation.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems MUSE-Autoskill: Self-Evolving Agents via Skill Creation, Memory, Management, and Evaluation

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.799394Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5dfb67fa-0f66-4914-9294-b4d6b1b38dfb · outbound

This paper cites Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.803913Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0e4d28a7-6a62-40c0-8d1a-ed33fd6a2ee1 · outbound

This paper cites BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.808605Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8db70d08-a641-4eb9-a963-8a7d2b275c12 · outbound

This paper cites Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec) , year =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec) , year =

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.813638Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3dbafdf6-f276-464a-b3e4-d04f7dcf02ea · outbound

This paper cites Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.817943Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 969276b7-9d7c-4e7c-ab90-effd9d8886a9 · outbound

This paper cites arXiv preprint arXiv:2603.22489 , year =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems arXiv preprint arXiv:2603.22489 , year =

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.822390Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f312b1f4-2b15-4db6-a278-7b6c4a7ed4f8 · outbound

This paper cites 34th USENIX Security Symposium (USENIX Security 25) , pages =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems 34th USENIX Security Symposium (USENIX Security 25) , pages =

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.826491Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b4d17ad-1b9a-47dd-ac42-67bacd754e00 · outbound

This paper cites Advances in Neural Information Processing Systems , volume =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Advances in Neural Information Processing Systems , volume =

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.830310Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1782f69d-7655-419b-ab0e-ea62687e6207 · outbound

This paper cites Advances in Neural Information Processing Systems , year =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Advances in Neural Information Processing Systems , year =

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.834333Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7ced1bd1-8e37-498c-aee2-b36e0d0e563f · outbound

This paper cites Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.838482Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 160a1226-2b24-4031-a16a-429be5d6d54a · outbound

This paper cites Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.843040Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eb1e6909-e913-4f80-bf59-14ef18089588 · outbound

This paper cites POISE: Position-Aware Undetectable Skill Injection on LLM Agents.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems POISE: Position-Aware Undetectable Skill Injection on LLM Agents

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.847324Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 307f520e-3343-4d94-b909-1a286f8e676c · outbound

This paper cites RouteGuard: Internal-Signal Detection of Skill Poisoning in LLM Agents.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems RouteGuard: Internal-Signal Detection of Skill Poisoning in LLM Agents

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.851802Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 442754fc-b7d3-495d-9321-e45a602de44d · outbound

This paper cites SpreadsheetBench: Towards Challenging Real World Spreadsheet Manipulation.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems SpreadsheetBench: Towards Challenging Real World Spreadsheet Manipulation

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.856103Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9fb54136-d0f9-4cec-b80a-a418e13fae10 · outbound

This paper cites The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.860443Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 669dca24-3b73-4494-9bb7-73974c2fc073 · outbound

This paper cites SecAlign: Defending Against Prompt Injection with Preference Optimization.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems SecAlign: Defending Against Prompt Injection with Preference Optimization

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.865067Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation de3714e7-5f7b-4e1b-b984-66e152a44058 · outbound

This paper cites Defeating Prompt Injections by Design.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Defeating Prompt Injections by Design

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.869347Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 01fcdec2-ae89-48d8-bfce-c13d9beb5a74 · outbound

This paper cites 28th USENIX Security Symposium (USENIX Security 19) , pages =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems 28th USENIX Security Symposium (USENIX Security 19) , pages =

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.873900Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation efeef50c-519a-4704-a9a2-7a93527c7e42 · outbound

This paper cites 2025 , note =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems 2025 , note =

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.878378Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1e38170a-5bf1-42ac-9d7f-89cadb7b4f72 · outbound

This paper cites 2025 , note =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems 2025 , note =

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.882714Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cc5f0034-a69e-49ff-bf02-a2818d4cbddb · outbound

This paper cites 2025 , note =.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems 2025 , note =

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.887032Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f790240b-419a-48b9-ac9b-858349955b06 · outbound

This paper cites an unresolved cited work.

When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-10T04:29:49.892021Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.