{"as_of":"2026-08-10T09:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:826945a06583c88d8c2f3cdc3b371160752822a2da20a13db2f001cbd026991d","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T04:29:49.892021Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05563/citation-record","integrity":"/paper/2608.05563/integrity","json":"/paper/2608.05563/citation-record.json","paper":"/paper/2608.05563"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.08377","last_updated":"2026-04-09T15:38:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-09T15:38:27Z","title":"SkillClaw: Let Skills Evolve Collectively with Agentic Evolver","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.08377","snapshot_observed_at":"2026-08-10T04:29:49.762335Z","title":"arXiv preprint arXiv:2604.08377 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.762335Z"},"links":{"cited_paper":"/paper/2604.08377","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:9fc3de24137f0fdce6e0249251521bc7c912d84debc007d45de6e955d311cb46","observation_id":"6a3f1da2-7f4b-40c9-9996-702b14b47968","resolution":{"observed_at":"2026-08-10T04:29:49.762335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.769334Z","title":"arXiv preprint arXiv:2603.01145 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.769334Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:27d1d00d250bb476c9ceeaa9a290263a74181c9dc316940eaccfac78b79474e6","observation_id":"0cafb8b5-31ac-490e-a88c-b7802d7d826e","resolution":{"observed_at":"2026-08-10T04:29:49.769334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.25158","last_updated":"2026-06-04T12:51:52Z","snapshot_observed_at":"2026-08-06T10:33:38.415457Z","submitted_at":"2026-03-26T08:26:38Z","title":"Trace2Skill: Distill Trajectory-Local Lessons into Transferable Agent Skills","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.25158","snapshot_observed_at":"2026-08-10T04:29:49.774081Z","title":"arXiv preprint arXiv:2603.25158 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.774081Z"},"links":{"cited_paper":"/paper/2603.25158","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:8bf62aa1c01e0fb26844e88e00a10a665257043bfa6a3c7dbcf1161b81de88df","observation_id":"6cdf30a6-2463-4f85-a1e1-df54ff7a2c36","resolution":{"observed_at":"2026-08-10T04:29:49.774081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.02474","last_updated":"2026-05-24T19:01:09Z","snapshot_observed_at":"2026-08-03T05:25:38.558727Z","submitted_at":"2026-02-02T18:53:28Z","title":"MemSkill: Learning and Evolving Memory Skills for Self-Evolving Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.02474","snapshot_observed_at":"2026-08-10T04:29:49.778856Z","title":"arXiv preprint arXiv:2602.02474 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.778856Z"},"links":{"cited_paper":"/paper/2602.02474","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:310938e91fb08fd7f8902046e1434074dcd3cc81a102a712d103c95d0d01d6dd","observation_id":"73a9c838-75a1-44ad-b1ac-5ac67bc27ad3","resolution":{"observed_at":"2026-08-10T04:29:49.778856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.08234","last_updated":"2026-02-09T03:17:17Z","snapshot_observed_at":"2026-07-06T22:45:05.823859Z","submitted_at":"2026-02-09T03:17:17Z","title":"SkillRL: Evolving Agents via Recursive Skill-Augmented Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.08234","snapshot_observed_at":"2026-08-10T04:29:49.784659Z","title":"arXiv preprint arXiv:2602.08234 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.784659Z"},"links":{"cited_paper":"/paper/2602.08234","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:b4d85cad83467d4bfa78997b0c3ffcd54896e5f5533be7dbb5b53b4930f6f17e","observation_id":"5647c017-e92e-4386-9a26-dfe344d324e4","resolution":{"observed_at":"2026-08-10T04:29:49.784659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.01687","last_updated":"2026-04-12T23:04:42Z","snapshot_observed_at":"2026-07-06T22:51:35.522923Z","submitted_at":"2026-04-02T06:43:20Z","title":"CoEvoSkills: Self-Evolving Agent Skills via Co-Evolutionary Verification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.01687","snapshot_observed_at":"2026-08-10T04:29:49.789674Z","title":"Yu , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.789674Z"},"links":{"cited_paper":"/paper/2604.01687","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:fa289442ef2981637ad63f891ea3ff39a4dfa5464da867af9092d4080cd3880d","observation_id":"c5db0736-a542-414b-a878-47e6b36e54a2","resolution":{"observed_at":"2026-08-10T04:29:49.789674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.10674","last_updated":"2026-04-12T14:57:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-12T14:57:52Z","title":"Skill-SD: Skill-Conditioned Self-Distillation for Multi-turn LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.10674","snapshot_observed_at":"2026-08-10T04:29:49.794903Z","title":"arXiv preprint arXiv:2604.10674 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.794903Z"},"links":{"cited_paper":"/paper/2604.10674","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:bb7d449bd388cc9bcce7594758ef933d8c1dd12499bd37aaf1d8d96becb7aeb2","observation_id":"695b0e73-c856-4b25-94ba-688632f585ab","resolution":{"observed_at":"2026-08-10T04:29:49.794903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.27366","last_updated":"2026-07-03T08:22:38Z","snapshot_observed_at":"2026-07-31T02:06:56.514566Z","submitted_at":"2026-05-26T17:59:19Z","title":"MUSE-Autoskill: Self-Evolving Agents via Skill Creation, Memory, Management, and Evaluation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.27366","snapshot_observed_at":"2026-08-10T04:29:49.799394Z","title":"arXiv preprint arXiv:2605.27366 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.799394Z"},"links":{"cited_paper":"/paper/2605.27366","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:36205d7b6e678e95f879611c1511bbd9ed1839517a6f9d3b085563b7e61738ab","observation_id":"a6a6577c-bdce-4bb1-8f47-90a659974c12","resolution":{"observed_at":"2026-08-10T04:29:49.799394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.12430","last_updated":"2026-06-02T16:14:54Z","snapshot_observed_at":"2026-08-06T11:11:16.632352Z","submitted_at":"2026-02-12T21:33:25Z","title":"Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.12430","snapshot_observed_at":"2026-08-10T04:29:49.803913Z","title":"arXiv preprint arXiv:2602.12430 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.803913Z"},"links":{"cited_paper":"/paper/2602.12430","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:2850df183098756dbec851e3cf3031577a555f4b2f76ef0cb018211a82657519","observation_id":"5dfb67fa-0f66-4914-9294-b4d6b1b38dfb","resolution":{"observed_at":"2026-08-10T04:29:49.803913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.09378","last_updated":"2026-04-10T14:48:29Z","snapshot_observed_at":"2026-07-06T22:58:17.167367Z","submitted_at":"2026-04-10T14:48:29Z","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.09378","snapshot_observed_at":"2026-08-10T04:29:49.808605Z","title":"arXiv preprint arXiv:2604.09378 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.808605Z"},"links":{"cited_paper":"/paper/2604.09378","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:411b77ba340bc37d50ac6d3304c7ca857a6ff27dd7e3a4c312ff3762a270e3be","observation_id":"0e4d28a7-6a62-40c0-8d1a-ed33fd6a2ee1","resolution":{"observed_at":"2026-08-10T04:29:49.808605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.813638Z","title":"Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.813638Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:c44ba79c66a05af15ce68e332d38562413e3f469b6986ecc4bdf89979034aa55","observation_id":"8db70d08-a641-4eb9-a963-8a7d2b275c12","resolution":{"observed_at":"2026-08-10T04:29:49.813638Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.20156","last_updated":"2026-02-25T18:14:01Z","snapshot_observed_at":"2026-08-03T01:14:27.800784Z","submitted_at":"2026-02-23T18:59:27Z","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.20156","snapshot_observed_at":"2026-08-10T04:29:49.817943Z","title":"arXiv preprint arXiv:2602.20156 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.817943Z"},"links":{"cited_paper":"/paper/2602.20156","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:76c951e45792d9544e79e51fcb57982c52f27be12303272385ae057f84be0127","observation_id":"3dbafdf6-f276-464a-b3e4-d04f7dcf02ea","resolution":{"observed_at":"2026-08-10T04:29:49.817943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.822390Z","title":"arXiv preprint arXiv:2603.22489 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.822390Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:51fe66c159b85bef7aa05a0c3870b9c02925f329e8088c81dfa1e4844a1f2b19","observation_id":"969276b7-9d7c-4e7c-ab90-effd9d8886a9","resolution":{"observed_at":"2026-08-10T04:29:49.822390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.826491Z","title":"34th USENIX Security Symposium (USENIX Security 25) , pages =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.826491Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:89ddfbc5cb3a013defc476b9a9f8b87dd5eb08819c02d641f78695af1681b6b8","observation_id":"f312b1f4-2b15-4db6-a278-7b6c4a7ed4f8","resolution":{"observed_at":"2026-08-10T04:29:49.826491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.830310Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.830310Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:27a29987614b38cbad68a4a521904b0fcb6d4b5ca8d7948726b3aa9572919e23","observation_id":"8b4d17ad-1b9a-47dd-ac42-67bacd754e00","resolution":{"observed_at":"2026-08-10T04:29:49.830310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.834333Z","title":"Advances in Neural Information Processing Systems , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.834333Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:ef1e898db23cab6997e985524fc2e82c26e6e1d66f6415b185ae9ee0c760fa17","observation_id":"1782f69d-7655-419b-ab0e-ea62687e6207","resolution":{"observed_at":"2026-08-10T04:29:49.834333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-05T14:57:29.112440Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-08-10T04:29:49.838482Z","title":"arXiv preprint arXiv:2604.02623 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.838482Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:aa8c7c1399b5a6d87c0d4572e34f3bb620f1b40669f0859d03538c65c2356055","observation_id":"7ced1bd1-8e37-498c-aee2-b36e0d0e563f","resolution":{"observed_at":"2026-08-10T04:29:49.838482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03081","last_updated":"2026-04-03T14:58:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-03T14:58:58Z","title":"Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03081","snapshot_observed_at":"2026-08-10T04:29:49.843040Z","title":"arXiv preprint arXiv:2604.03081 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.843040Z"},"links":{"cited_paper":"/paper/2604.03081","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:0b86026207036735007d588c250a37c7fcec1866554065e6f447dbba466105f6","observation_id":"160a1226-2b24-4031-a16a-429be5d6d54a","resolution":{"observed_at":"2026-08-10T04:29:49.843040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.07943","last_updated":"2026-06-06T02:10:03Z","snapshot_observed_at":"2026-08-07T22:38:29.909628Z","submitted_at":"2026-06-06T02:10:03Z","title":"POISE: Position-Aware Undetectable Skill Injection on LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.07943","snapshot_observed_at":"2026-08-10T04:29:49.847324Z","title":"arXiv preprint arXiv:2606.07943 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.847324Z"},"links":{"cited_paper":"/paper/2606.07943","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:4c751ef6778b3d705c9129c4025207a0c7436c5eb88dfa1c3fd0b604664cd238","observation_id":"eb1e6909-e913-4f80-bf59-14ef18089588","resolution":{"observed_at":"2026-08-10T04:29:49.847324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.22888","last_updated":"2026-04-24T09:07:05Z","snapshot_observed_at":"2026-07-06T23:09:10.050398Z","submitted_at":"2026-04-24T09:07:05Z","title":"RouteGuard: Internal-Signal Detection of Skill Poisoning in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.22888","snapshot_observed_at":"2026-08-10T04:29:49.851802Z","title":"arXiv preprint arXiv:2604.22888 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.851802Z"},"links":{"cited_paper":"/paper/2604.22888","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:6f0e85dc96ca414072ccbbc46dda022e8e2de7ccc7b6a2b9e6fdcf55cc51f40b","observation_id":"307f520e-3343-4d94-b909-1a286f8e676c","resolution":{"observed_at":"2026-08-10T04:29:49.851802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14991","last_updated":"2024-10-17T07:23:23Z","snapshot_observed_at":"2026-07-06T18:34:47.155846Z","submitted_at":"2024-06-21T09:06:45Z","title":"SpreadsheetBench: Towards Challenging Real World Spreadsheet Manipulation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14991","snapshot_observed_at":"2026-08-10T04:29:49.856103Z","title":"Advances in Neural Information Processing Systems , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.856103Z"},"links":{"cited_paper":"/paper/2406.14991","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:2bedc17b634e8498ac9fde5b6bac7d6077a93c361f43c64523c2b9512f9f0066","observation_id":"442754fc-b7d3-495d-9321-e45a602de44d","resolution":{"observed_at":"2026-08-10T04:29:49.856103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-10T04:45:11.275468Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-10T04:29:49.860443Z","title":"arXiv preprint arXiv:2404.13208 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.860443Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:1a6959e7a83a613eaa7b5752f5c136573e930c97dd313c7adc554da58162f740","observation_id":"9fb54136-d0f9-4cec-b80a-a418e13fae10","resolution":{"observed_at":"2026-08-10T04:29:49.860443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-08-09T06:23:57.503977Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-10T04:29:49.865067Z","title":"arXiv preprint arXiv:2410.05451 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.865067Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:b660f03fd5276e163dbc4cb8c866d144323b06f753184e6420b19d2e303f6724","observation_id":"669dca24-3b73-4494-9bb7-73974c2fc073","resolution":{"observed_at":"2026-08-10T04:29:49.865067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-10T04:29:49.869347Z","title":"arXiv preprint arXiv:2503.18813 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.869347Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:ffc94152eaffb36365879c1cfa0a7172da34e3d3cb5cbf0bb7e3c6b5e4afddc6","observation_id":"de3714e7-5f7b-4e1b-b984-66e152a44058","resolution":{"observed_at":"2026-08-10T04:29:49.869347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.873900Z","title":"28th USENIX Security Symposium (USENIX Security 19) , pages =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.873900Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:0e7478f2895e1214c7b10fe2ecf9af1e43bbfe791dd9bf9084dd6ede7e0f6872","observation_id":"01fcdec2-ae89-48d8-bfce-c13d9beb5a74","resolution":{"observed_at":"2026-08-10T04:29:49.873900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.878378Z","title":"2025 , note =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.878378Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:0145e87203462f09a137035fcc7916fc4cd61ea324ebccbf3f1bdb820bed8f6f","observation_id":"efeef50c-519a-4704-a9a2-7a93527c7e42","resolution":{"observed_at":"2026-08-10T04:29:49.878378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.882714Z","title":"2025 , note =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.882714Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:4a531eb240739f8a8ea00209e122e73a0e51d96dc57d7b97e0e03cb4284f8056","observation_id":"1e38170a-5bf1-42ac-9d7f-89cadb7b4f72","resolution":{"observed_at":"2026-08-10T04:29:49.882714Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.887032Z","title":"2025 , note =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.887032Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:ebf7e164ceba56eb932f29f285f1b3d1a9efd2d35442c73d0b7efac8866570f2","observation_id":"cc5f0034-a69e-49ff-bf02-a2818d4cbddb","resolution":{"observed_at":"2026-08-10T04:29:49.887032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:29:49.892021Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-10T04:29:49.892021Z"},"links":{"citing_paper":"/paper/2608.05563"},"observation_digest":"sha256:f6a3c945c1f8815691c3d24c3eac5644ecca3cc2530da4a77c9c8f38b5f64748","observation_id":"f790240b-419a-48b9-ac9b-858349955b06","resolution":{"observed_at":"2026-08-10T04:29:49.892021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.05563","last_updated":"2026-08-07T09:49:25Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T08:09:42.040623Z","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":29,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2608.05563."}