{"as_of":"2026-08-16T12:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c01f3b7cf7952a28d62fce8a437a951adc5381ddf2c4b1a8ba4a8ade56c44f54","coverage":[{"denominator":162,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T14:21:42.411193Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.10530/citation-record","integrity":"/paper/2608.10530/integrity","json":"/paper/2608.10530/citation-record.json","paper":"/paper/2608.10530"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.12503","last_updated":"2025-06-11T23:27:36Z","snapshot_observed_at":"2026-08-13T13:24:48.016930Z","submitted_at":"2024-03-19T07:10:58Z","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12503","snapshot_observed_at":"2026-08-15T14:21:41.761755Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.761755Z"},"links":{"cited_paper":"/paper/2403.12503","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ef4f8becac4b8d7f988ce4041e52da2c616d90bef54c3632e482cd02d1c764d9","observation_id":"be9dba93-dd12-4b13-b621-93b7de6dcbdb","resolution":{"observed_at":"2026-08-15T14:21:41.761755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13434","last_updated":"2025-06-16T12:52:19Z","snapshot_observed_at":"2026-08-10T20:55:41.907974Z","submitted_at":"2025-06-16T12:52:19Z","title":"From Promise to Peril: Rethinking Cybersecurity Red and Blue Teaming in the Age of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.13434","snapshot_observed_at":"2026-08-15T14:21:41.770140Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.770140Z"},"links":{"cited_paper":"/paper/2506.13434","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:fdb5743eab51eec7e788e095652f62eb8fcb5e66f0353b8558658d1febc2b556","observation_id":"03afa743-c61b-4090-95bb-011e4fd1797d","resolution":{"observed_at":"2026-08-15T14:21:41.770140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.12688/f1000research.169927.1","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:35.322510Z","title":null,"venue":null,"work_id":"54c51f05-526f-4d5d-bcc3-02aaada700a8","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.775718Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c5d59fd8294b3eb588365ff31dbf92f5ceec067901162d77206c04e796506a0c","observation_id":"0a348a21-2a91-40ee-b186-560a1f38d811","resolution":{"observed_at":"2026-08-15T14:23:35.327230Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2510.25445","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:35.240668Z","title":null,"venue":null,"work_id":"c7e6a9f6-0da1-4b90-a8ca-69af405476a6","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.780898Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:516d25126b01aae324ac9c2da556cfdbba2c1d6eb1933047a77c848effd8fb0b","observation_id":"43094c58-36d0-47dd-9633-3edf60ac8a1c","resolution":{"observed_at":"2026-08-15T14:23:35.282673Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15396","last_updated":"2024-10-20T14:07:24Z","snapshot_observed_at":"2026-08-15T16:11:31.073978Z","submitted_at":"2024-10-20T14:07:24Z","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","version":1},"cited_work":{"arxiv_id":"2410.15396","doi":"10.48550/arxiv.2410.15396","metadata_source":"pith","pith_arxiv_id":"2410.15396","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","venue":"cs.CR","work_id":"1937f526-5470-42e2-ab97-eac27b887769","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.786001Z"},"links":{"cited_paper":"/paper/2410.15396","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:de2a7ed04848399ea0410515730b927652da5396e4eb4e7076af5e10ba259220","observation_id":"b66b7867-adac-4c78-97c7-5068b00ec8b4","resolution":{"observed_at":"2026-08-15T14:23:35.154072Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.792446Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.792446Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:fdea3133584593e7a789061e6f90ec28ed10966285a864858c26eb2bc9ec8c1e","observation_id":"2f9d3e0c-c261-4dd4-9812-f666714f0eb7","resolution":{"observed_at":"2026-08-15T14:21:41.792446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.04442","last_updated":"2024-04-05T22:59:02Z","snapshot_observed_at":"2026-08-13T19:08:38.601926Z","submitted_at":"2024-04-05T22:59:02Z","title":"Exploring Autonomous Agents through the Lens of Large Language Models: A Review","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.04442","snapshot_observed_at":"2026-08-15T14:21:41.798547Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.798547Z"},"links":{"cited_paper":"/paper/2404.04442","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:988c683841d3a7fadc27357625a9696b5ec0b5ff65d5d88d96a213a16dfac300","observation_id":"6c8b572c-4f19-4acd-b562-d9ef95802fa7","resolution":{"observed_at":"2026-08-15T14:21:41.798547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.10374","last_updated":"2025-04-14T16:22:11Z","snapshot_observed_at":"2026-08-07T16:05:49.364751Z","submitted_at":"2025-04-14T16:22:11Z","title":"Ctrl-Z: Controlling AI Agents via Resampling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.10374","snapshot_observed_at":"2026-08-15T14:21:41.804267Z","title":"Kaufman, Tyler Tracy, Vasil Georgiev, Dávid Matolcsi, Akbir Khan, and Buck Shlegeris","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.804267Z"},"links":{"cited_paper":"/paper/2504.10374","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6d0be569f9c1b1cab81196dd5d8b8381b3adbf000dde67d608c9be551e7cacd9","observation_id":"86eab773-fbaa-4b43-90a6-05297c586783","resolution":{"observed_at":"2026-08-15T14:21:41.804267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.05159","last_updated":"2026-08-03T18:11:09Z","snapshot_observed_at":"2026-08-07T23:09:07.293633Z","submitted_at":"2025-10-03T12:47:21Z","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.05159","snapshot_observed_at":"2026-08-15T14:21:41.809018Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.809018Z"},"links":{"cited_paper":"/paper/2510.05159","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d4fc424e8bb41af2cfec8145e7951e6bc15b5813441d6861cb097d9870a9a0a5","observation_id":"362c3b4d-8ff3-42a2-9141-879488d4adf4","resolution":{"observed_at":"2026-08-15T14:21:41.809018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16222","last_updated":"2025-05-30T11:02:54Z","snapshot_observed_at":"2026-08-12T22:18:19.821562Z","submitted_at":"2024-10-21T17:27:01Z","title":"An Interpretable N-gram Perplexity Threat Model for Large Language Model Jailbreaks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.16222","snapshot_observed_at":"2026-08-15T14:21:41.814524Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.814524Z"},"links":{"cited_paper":"/paper/2410.16222","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0f94b8498275932bfbd1c4050c1ddb3ba6f8c5a2d3d7b5c9226d3c8ffb53fc11","observation_id":"9bce1d34-fbfa-4ea8-a428-cf12b691cf1b","resolution":{"observed_at":"2026-08-15T14:21:41.814524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.3390/a18080499","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:34.930357Z","title":null,"venue":null,"work_id":"09894a8d-a05a-4aaa-868f-befd3715fc19","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.820157Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:874b9cae291130ebc09b12a7244d223dd8e912d4b1512ae96fbbeae59abfc475","observation_id":"a5d083b6-5bb4-4c2c-a490-5748ca2f9041","resolution":{"observed_at":"2026-08-15T14:23:34.974041Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.826064Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.826064Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:473450105a0d2318c9d7879c2342b6e5a57bcf9e43c118dd07fe0a2a24822735","observation_id":"25775e0c-70f9-4fdf-b917-f47aec4c5734","resolution":{"observed_at":"2026-08-15T14:21:41.826064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18002","last_updated":"2025-01-29T21:33:02Z","snapshot_observed_at":"2026-08-11T08:12:38.089495Z","submitted_at":"2025-01-29T21:33:02Z","title":"Agentic Workflows for Conversational Human-AI Interaction Design","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18002","snapshot_observed_at":"2026-08-15T14:21:41.832539Z","title":"Verma, Atieh Taheri, Radha Kumaran, Zichen Chen, Jiaao Chen, Tobias Höllerer, and Misha Sra","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.832539Z"},"links":{"cited_paper":"/paper/2501.18002","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:22531fd1c77ebbfbab10f73fc353bcf8d8625da2dd6e10b9fe84fae9b643553b","observation_id":"fd89136a-5836-403d-97bd-d0c6d1360ded","resolution":{"observed_at":"2026-08-15T14:21:41.832539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17922","last_updated":"2025-02-09T03:34:47Z","snapshot_observed_at":"2026-08-12T22:16:39.464079Z","submitted_at":"2024-10-23T14:40:37Z","title":"Dynamic Guided and Domain Applicable Safeguards for Enhanced Security in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17922","snapshot_observed_at":"2026-08-15T14:21:41.837763Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.837763Z"},"links":{"cited_paper":"/paper/2410.17922","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:836ef64006f3a38a7dd66f4e309dbd8e43e1988132891fc7fa403a11b16ddd43","observation_id":"ac9f0e27-d326-4eec-9f14-b301ec887b20","resolution":{"observed_at":"2026-08-15T14:21:41.837763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.843756Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.843756Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:93a5a5a1e2bc83ed3a0a95c4c8bf18d44aaa52e2f35dee999259b7f9bcb9a35d","observation_id":"e3827e7c-9b9e-4355-818e-4624a814da23","resolution":{"observed_at":"2026-08-15T14:21:41.843756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00384","last_updated":"2025-03-01T07:17:18Z","snapshot_observed_at":"2026-08-10T14:56:02.135612Z","submitted_at":"2025-03-01T07:17:18Z","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","version":1},"cited_work":{"arxiv_id":"2503.00384","doi":"10.48550/arxiv.2503.00384","metadata_source":"pith","pith_arxiv_id":"2503.00384","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","venue":"cs.CV","work_id":"499e7379-724e-4b41-a650-94d683b08cd3","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.852561Z"},"links":{"cited_paper":"/paper/2503.00384","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d026ee10103919d88ab18305024ef4084cf6ddd1f337ad598d053a11c0c734c4","observation_id":"0d5260d1-8def-4835-869f-f18f05ebae5c","resolution":{"observed_at":"2026-08-15T14:23:34.803627Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-08-15T07:38:32.361902Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-15T14:21:41.862200Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.862200Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7c21f29530dc5f77b1269e6b7f7da9a6dffe1c91eed20446dd343a7a0b220837","observation_id":"c5f3f421-b485-4e17-bab6-46092d2d418e","resolution":{"observed_at":"2026-08-15T14:21:41.862200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.879771Z","title":"do anything now","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.879771Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:673ce097907e05ba3a43b080240e8d42f5d29d8402a166e927b6c32ee78319d2","observation_id":"c8a6f5e4-644e-411b-bb48-df949d41fdca","resolution":{"observed_at":"2026-08-15T14:21:41.879771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2512.01295","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:34.616678Z","title":null,"venue":null,"work_id":"11dd4768-0caa-4ae2-9db5-f78544874d1e","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.886856Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ff7e27f59f4df9337aa9073d4f22417b19700c61ffe1db7a872a1f1489a42daa","observation_id":"6fb35f92-cf24-45f4-a2e6-d955280d7661","resolution":{"observed_at":"2026-08-15T14:23:34.659697Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.03274","last_updated":"2024-12-02T08:53:40Z","snapshot_observed_at":"2026-08-14T01:29:12.213184Z","submitted_at":"2024-09-05T06:31:37Z","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.03274","snapshot_observed_at":"2026-08-15T14:21:41.892761Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.892761Z"},"links":{"cited_paper":"/paper/2409.03274","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:870dbbe68c314fd9abde45fa796255299026ad1d6af9e7141589424f5fd38964","observation_id":"7d91ad27-fbb6-4124-82e5-65ee3a358257","resolution":{"observed_at":"2026-08-15T14:21:41.892761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13038","last_updated":"2025-07-17T12:09:39Z","snapshot_observed_at":"2026-08-15T19:18:14.079695Z","submitted_at":"2025-07-17T12:09:39Z","title":"MAD-Spear: A Conformity-Driven Prompt Injection Attack on Multi-Agent Debate Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.13038","snapshot_observed_at":"2026-08-15T14:21:41.898216Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.898216Z"},"links":{"cited_paper":"/paper/2507.13038","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:174919c0b0957f9ee819267ea448dd07b6941ef31fe9a08944e8c9a24df2a575","observation_id":"47065ae6-7c85-42a3-befa-b7d4826b116b","resolution":{"observed_at":"2026-08-15T14:21:41.898216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.12872","last_updated":"2025-07-17T07:45:53Z","snapshot_observed_at":"2026-08-11T10:32:07.446828Z","submitted_at":"2025-07-17T07:45:53Z","title":"Manipulation Attacks by Misaligned AI: Risk Analysis and Safety Case Framework","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.12872","snapshot_observed_at":"2026-08-15T14:21:41.905782Z","title":"Lentati, Jason R","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.905782Z"},"links":{"cited_paper":"/paper/2507.12872","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:25b5c65a228ecf5e4a84a87d7dc81ae11effcb4f2bc9c6c4cc5c20a0f0744367","observation_id":"1ba874dc-285f-4dae-979c-1a8a1a803003","resolution":{"observed_at":"2026-08-15T14:21:41.905782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-13T20:52:15.127327Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.23883","snapshot_observed_at":"2026-08-15T14:21:41.911301Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.911301Z"},"links":{"cited_paper":"/paper/2510.23883","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9d91114a8cf18558d036c969d22080abf99f78fcf44aee0fc9c46d6d55a30045","observation_id":"94c483af-1147-4dc6-8420-3d4f2f4b4f4f","resolution":{"observed_at":"2026-08-15T14:21:41.911301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-15T14:21:41.916506Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.916506Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:a0e3e22e88c2cd5c15e3d5a7affe92992dfec3a278de45b9c55f0cb28a54fa69","observation_id":"095b62c7-a70a-4a14-9cd6-d3349e6e5644","resolution":{"observed_at":"2026-08-15T14:21:41.916506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.24380","last_updated":"2026-07-04T03:50:21Z","snapshot_observed_at":"2026-08-16T08:21:48.955157Z","submitted_at":"2025-09-29T07:29:18Z","title":"Agentic Services Computing","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.24380","snapshot_observed_at":"2026-08-15T14:21:41.923024Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.923024Z"},"links":{"cited_paper":"/paper/2509.24380","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6c96ff05a0a01962d667ec7fdc8a3cae9e69fd2768305a34aa407ec72832d825","observation_id":"b710b2b9-9f24-47e5-b51a-98c560be80f0","resolution":{"observed_at":"2026-08-15T14:21:41.923024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.930118Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.930118Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:cdb40c4078dc8743d8940cf078834be4df67735387b0a5ff2ade37cea87a7fde","observation_id":"71ebae16-d051-4db5-97d2-42a80323458c","resolution":{"observed_at":"2026-08-15T14:21:41.930118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.935211Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.935211Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:ad407ca4c63cda4824da2ed9405652fb96abf11d8da1f399cc65ddb2bbcd7a4b","observation_id":"879fad1b-6be0-463b-9645-24de41a7c5f1","resolution":{"observed_at":"2026-08-15T14:21:41.935211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.18359","last_updated":"2025-02-25T16:49:06Z","snapshot_observed_at":"2026-08-07T17:49:37.440403Z","submitted_at":"2025-02-25T16:49:06Z","title":"Responsible AI Agents","version":1},"cited_work":{"arxiv_id":"2502.18359","doi":"10.48550/arxiv.2502.18359","metadata_source":"pith","pith_arxiv_id":"2502.18359","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Responsible AI Agents","venue":"cs.CY","work_id":"0b8b9281-84c0-4460-a5be-e60b82041329","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.940662Z"},"links":{"cited_paper":"/paper/2502.18359","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4db2aa462b16620ef1a2952501cc578325bd6be030f2a8e52e53dc4c843d99c8","observation_id":"587a1dca-d9e3-4aad-8416-1f25414657cf","resolution":{"observed_at":"2026-08-15T14:23:34.337957Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02077","last_updated":"2026-04-29T10:47:33Z","snapshot_observed_at":"2026-08-14T09:14:00.327752Z","submitted_at":"2025-05-04T12:03:29Z","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02077","snapshot_observed_at":"2026-08-15T14:21:41.946780Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.946780Z"},"links":{"cited_paper":"/paper/2505.02077","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:feac2242074ebeb3cc643fd7b478df6beb38cdd82ec76bb50cfbd37e901686ec","observation_id":"52b8ad62-4dde-4923-afda-80d80d2a378e","resolution":{"observed_at":"2026-08-15T14:21:41.946780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.952668Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.952668Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6d57ea8171703d0d332ccf9adc1e7dc05936e5f47b90aa9f201233d4f4243b48","observation_id":"a32a70cb-59dd-4abc-a863-a5dd275709de","resolution":{"observed_at":"2026-08-15T14:21:41.952668Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.02622","last_updated":"2024-06-03T19:27:46Z","snapshot_observed_at":"2026-08-12T23:51:10.026999Z","submitted_at":"2024-06-03T19:27:46Z","title":"Safeguarding Large Language Models: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.02622","snapshot_observed_at":"2026-08-15T14:21:41.957376Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.957376Z"},"links":{"cited_paper":"/paper/2406.02622","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:fbe39f0dd18078e9251fc79e1206bceb374272a15066b8ecfd22a0d6287d70c7","observation_id":"692f1e92-cfde-4121-a3b6-811b0bb08bd2","resolution":{"observed_at":"2026-08-15T14:21:41.957376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00523","last_updated":"2025-06-24T18:55:29Z","snapshot_observed_at":"2026-08-13T21:05:36.732753Z","submitted_at":"2024-08-01T12:54:46Z","title":"Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00523","snapshot_observed_at":"2026-08-15T14:21:41.963559Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.963559Z"},"links":{"cited_paper":"/paper/2408.00523","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:2a5aae1ab7fac8d46b465ab9649bb9c80d46677f8a3d36d60702ef391f4e58db","observation_id":"ae63b5dc-4936-4c1d-b63e-38e9360641dd","resolution":{"observed_at":"2026-08-15T14:21:41.963559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.969059Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.969059Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:577825ba9ffffd80742a9a0abdddc8a56b89d5c8d88301de71e65fc6cc8e6276","observation_id":"21d800e5-11cb-4603-b43e-4bf802fae26c","resolution":{"observed_at":"2026-08-15T14:21:41.969059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2502.0","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.950424Z","title":null,"venue":null,"work_id":"ccca24d0-9785-439a-a45b-bbf269a1d460","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.974948Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:e19138612f8584a706bebdb1dedb5bd2233e31f662beaeeb6d36500377033167","observation_id":"1e10f1f8-356f-48b7-b6e7-2683ae39999c","resolution":{"observed_at":"2026-08-15T14:23:34.022122Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.07940","last_updated":"2024-06-10T15:51:16Z","snapshot_observed_at":"2026-08-13T00:08:41.289903Z","submitted_at":"2024-05-13T17:15:14Z","title":"RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.07940","snapshot_observed_at":"2026-08-15T14:21:41.988817Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.988817Z"},"links":{"cited_paper":"/paper/2405.07940","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:16b224cf166bbd2fb8a15b17666933f78fdadf6f2a147cdde9df8916c575a844","observation_id":"c5e19eb0-328b-4c68-b63c-f40a6f807a06","resolution":{"observed_at":"2026-08-15T14:21:41.988817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:41.997469Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:41.997469Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0e9ec3ad31865869bd40c76b7f3560724ae8677e6516c9cbb2e285018c375085","observation_id":"f4a7469d-da36-40b0-b7cb-1461e88ddd39","resolution":{"observed_at":"2026-08-15T14:21:41.997469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.004072Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.004072Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:79f3a7138d792a0b83f2798a87be2ec0be76c93fb3a790c75bf19f3322006d54","observation_id":"355cffa6-a04f-4bdf-a975-96e6fd132fca","resolution":{"observed_at":"2026-08-15T14:21:42.004072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06922","last_updated":"2026-04-21T14:06:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-02-10T11:07:24Z","title":"Whispers in the Machine: Confidentiality in Agentic Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06922","snapshot_observed_at":"2026-08-15T14:21:42.011056Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.011056Z"},"links":{"cited_paper":"/paper/2402.06922","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:549db0366dcc088620294c0eecf7f6845f67c5f23b6799ab21c8555b74854cb8","observation_id":"85c31f77-0c33-4dc3-8f3c-64f6754b62f0","resolution":{"observed_at":"2026-08-15T14:21:42.011056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00865","last_updated":"2025-03-02T11:53:55Z","snapshot_observed_at":"2026-08-14T11:10:49.109724Z","submitted_at":"2025-03-02T11:53:55Z","title":"Babel: Open Multilingual Large Language Models Serving Over 90% of Global Speakers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00865","snapshot_observed_at":"2026-08-15T14:21:42.018789Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.018789Z"},"links":{"cited_paper":"/paper/2503.00865","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:995c2661845a4a4bcaebb94561f9de882def4459d990fc2e46414a9f698d4d79","observation_id":"cc3a6c73-6ce5-4d45-97dd-35ec41de697b","resolution":{"observed_at":"2026-08-15T14:21:42.018789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1006.2024","last_updated":"2010-06-11T07:21:59Z","snapshot_observed_at":"2026-08-15T05:16:50.040424Z","submitted_at":"2010-06-10T13:22:15Z","title":"The helium spread in the Globular cluster 47 Tuc","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1006.2024","snapshot_observed_at":"2026-08-15T14:21:42.025204Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.025204Z"},"links":{"cited_paper":"/paper/1006.2024","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:48372907faa2f255fed9e81557eb64c668a75db4ed1615bb142bd85525d0c5a1","observation_id":"9430410b-0750-4e7d-9945-b367c39f9944","resolution":{"observed_at":"2026-08-15T14:21:42.025204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.05075","last_updated":"2022-11-09T18:07:10Z","snapshot_observed_at":"2026-08-13T13:45:51.114750Z","submitted_at":"2022-11-09T18:07:10Z","title":"Supporting AI/ML Security Workers through an Adversarial Techniques, Tools, and Common Knowledge (AI/ML ATT&CK) Framework","version":1},"cited_work":{"arxiv_id":"2211.05075","doi":"10.48550/arxiv.2211.05075","metadata_source":"pith","pith_arxiv_id":"2211.05075","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Supporting AI/ML Security Workers through an Adversarial Techniques, Tools, and Common Knowledge (AI/ML ATT&CK) Framework","venue":"cs.CR","work_id":"910b71bb-c511-40da-a44c-62a1a46672ae","year":2022},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.030720Z"},"links":{"cited_paper":"/paper/2211.05075","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c111b43b97576288bdb5613f63719e4c72c9bbebd6028d252831c216e826f253","observation_id":"573835bf-2a9d-44c6-a6df-351bf2117f76","resolution":{"observed_at":"2026-08-15T14:23:33.843869Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.037533Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.037533Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d906a73eae23f28ac2b9f91e0640d332b11ab16492bd49b0776df5d9f05f4137","observation_id":"5be363e7-bce7-4fc8-9766-c3b1c02a0dc8","resolution":{"observed_at":"2026-08-15T14:21:42.037533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.043932Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.043932Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:71e129e4aeb295927bcfd378d5a762c86e514fa3ad55df71c7d6d20cce0316e5","observation_id":"cca6c6da-7d46-4a19-9ad6-8f97070908dc","resolution":{"observed_at":"2026-08-15T14:21:42.043932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00371","last_updated":"2024-07-04T23:37:40Z","snapshot_observed_at":"2026-08-13T04:29:31.091122Z","submitted_at":"2024-02-01T06:21:19Z","title":"What Does the Bot Say? Opportunities and Risks of Large Language Models in Social Media Bot Detection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00371","snapshot_observed_at":"2026-08-15T14:21:42.049978Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.049978Z"},"links":{"cited_paper":"/paper/2402.00371","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:de50dcde3c085d3f183edced213b0012da7e1a162d9e5a93d5b6bf7090c5c3b3","observation_id":"7afd8002-8b18-41e9-9587-eb61a42cae98","resolution":{"observed_at":"2026-08-15T14:21:42.049978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.056127Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.056127Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:6e7297a631854f4f62f7038195e2462f224c8ed234b5580b9e9293776efc94e2","observation_id":"01e6a189-736f-44b8-807a-78f892f82ea6","resolution":{"observed_at":"2026-08-15T14:21:42.056127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.sysarc.2010.04.005","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.512829Z","title":null,"venue":null,"work_id":"63dbc777-5b10-4616-be8f-15f79bd1f2a2","year":2010},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.063139Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:f51b6d759ffa46f5b79795516e189fea7df6b15700401c753760e4c4a13ff03e","observation_id":"16478b87-196a-4ace-8d89-dc2d3ea89cc5","resolution":{"observed_at":"2026-08-15T14:23:33.606668Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03275","last_updated":"2025-05-06T08:05:35Z","snapshot_observed_at":"2026-08-15T23:53:17.486647Z","submitted_at":"2025-05-06T08:05:35Z","title":"RAG-MCP: Mitigating Prompt Bloat in LLM Tool Selection via Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.03275","snapshot_observed_at":"2026-08-15T14:21:42.068204Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.068204Z"},"links":{"cited_paper":"/paper/2505.03275","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0d710d25cf53eb5903395b82173fa3bc1c7e9ad9641d42a298731324bad91405","observation_id":"a785bded-1e3d-49cf-9003-73025b12f846","resolution":{"observed_at":"2026-08-15T14:21:42.068204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09523","last_updated":"2024-11-14T15:40:04Z","snapshot_observed_at":"2026-08-16T08:51:53.508656Z","submitted_at":"2024-11-14T15:40:04Z","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09523","snapshot_observed_at":"2026-08-15T14:21:42.078865Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.078865Z"},"links":{"cited_paper":"/paper/2411.09523","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:1604ff166a4a846b7ff583c51bda045675ba48d10183f38cd736466584d6ec94","observation_id":"2b7cf3f1-d160-424d-b2f6-0925487d670a","resolution":{"observed_at":"2026-08-15T14:21:42.078865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.083338Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.083338Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:395aaaddc5543e0643e729cf8af17b650130eb0aa9a60c04849990efe1d06d6b","observation_id":"543fd9cb-b289-43d7-b303-79fa0b970848","resolution":{"observed_at":"2026-08-15T14:21:42.083338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03578","last_updated":"2026-01-28T04:55:23Z","snapshot_observed_at":"2026-07-06T17:25:53.950578Z","submitted_at":"2024-02-05T23:06:42Z","title":"LLM Multi-Agent Systems: Challenges and Open Problems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03578","snapshot_observed_at":"2026-08-15T14:21:42.088433Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.088433Z"},"links":{"cited_paper":"/paper/2402.03578","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:dc1719dc59aebcd30c12ebf94d926b869ff852b96746ae9e2c16f1b5085774ee","observation_id":"96fd72ce-cab0-447d-b7f7-a7ff1dd94fb4","resolution":{"observed_at":"2026-08-15T14:21:42.088433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19883","last_updated":"2024-07-20T06:00:22Z","snapshot_observed_at":"2026-08-12T23:54:22.710210Z","submitted_at":"2024-05-30T09:42:54Z","title":"From Words to Actions: Unveiling the Theoretical Underpinnings of LLM-Driven Autonomous Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19883","snapshot_observed_at":"2026-08-15T14:21:42.094467Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.094467Z"},"links":{"cited_paper":"/paper/2405.19883","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:023fbfea00d1b112228ade0bf1c5b79e8124fdf08c15aca99a8d3b17cff93f36","observation_id":"8e259adc-548a-4f8f-b346-b94698fe05b4","resolution":{"observed_at":"2026-08-15T14:21:42.094467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2506.01245","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.373791Z","title":null,"venue":null,"work_id":"e49bbca2-e966-4bf0-8646-b21a148c812a","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.099569Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:80ab1ac48f16f7a0406ac2c9889ce9a2879b272edc594f7a69b77a8ec8e218d0","observation_id":"951220a8-604e-4952-9c87-f0ecc5ba5cbc","resolution":{"observed_at":"2026-08-15T14:23:33.437228Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08689","last_updated":"2024-12-17T21:58:19Z","snapshot_observed_at":"2026-08-14T15:34:26.866806Z","submitted_at":"2024-06-12T23:16:45Z","title":"Security of AI Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.08689","snapshot_observed_at":"2026-08-15T14:21:42.104532Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.104532Z"},"links":{"cited_paper":"/paper/2406.08689","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0e8bde36f103969d7029d99bde12bb8a5471e10e782580dc1977ec94bacde46b","observation_id":"ef56fc60-122a-4274-a7d8-f435274d5c89","resolution":{"observed_at":"2026-08-15T14:21:42.104532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.15476","snapshot_observed_at":"2026-08-15T14:21:42.111376Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.111376Z"},"links":{"cited_paper":"/paper/2510.15476","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:49c14675554778846b5fc588f2b64e6bcb2efa4843cd818ffc2711c70bb64f9a","observation_id":"ca626d7d-baee-4340-9308-ab6edb5fb7a4","resolution":{"observed_at":"2026-08-15T14:21:42.111376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.01604","last_updated":"2024-11-03T15:20:21Z","snapshot_observed_at":"2026-08-12T22:08:50.015165Z","submitted_at":"2024-11-03T15:20:21Z","title":"Large Language Model Supply Chain: Open Problems From the Security Perspective","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.01604","snapshot_observed_at":"2026-08-15T14:21:42.117509Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.117509Z"},"links":{"cited_paper":"/paper/2411.01604","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:a71cdc21d1ffcf058370e2f860269a0450f8a0a3f18db4cb196ea0ec6c019aee","observation_id":"9753bc53-40aa-4071-9f09-a605e9f31257","resolution":{"observed_at":"2026-08-15T14:21:42.117509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14296","last_updated":"2026-05-15T15:43:44Z","snapshot_observed_at":"2026-08-15T05:15:04.246228Z","submitted_at":"2025-02-20T06:20:36Z","title":"On the Trustworthiness of Generative Foundation Models: Guideline, Assessment, and Perspective","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14296","snapshot_observed_at":"2026-08-15T14:21:42.123996Z","title":"Huang et al","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.123996Z"},"links":{"cited_paper":"/paper/2502.14296","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:83a8273479d4063e86a5f57a02183d769f20771b7155324862e95de497c6e4de","observation_id":"df9c3234-fae3-4b0b-83f9-8272f537b082","resolution":{"observed_at":"2026-08-15T14:21:42.123996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09540","last_updated":"2025-04-07T08:55:40Z","snapshot_observed_at":"2026-08-16T02:04:08.340199Z","submitted_at":"2024-11-14T15:56:11Z","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","version":2},"cited_work":{"arxiv_id":"2411.09540","doi":"10.48550/arxiv.2411.09540","metadata_source":"pith","pith_arxiv_id":"2411.09540","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","venue":"cs.CV","work_id":"34e88cb7-aab0-41be-a0f0-135356eee40b","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.130463Z"},"links":{"cited_paper":"/paper/2411.09540","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:1577842e59f6a40846898e877fd56adce486bd4a3cbe585c0a75fe182526c807","observation_id":"2ea066c2-1397-45ab-8bca-43269cf8597d","resolution":{"observed_at":"2026-08-15T14:23:33.257433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2511.15998","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:33.033504Z","title":null,"venue":null,"work_id":"dc0ff642-9aea-4c5a-a5fa-4975a5aaa9cd","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.138463Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:0744cc748bbf1e80300b85a321a1e1a1d301b02e35c5e7d894ace191aa7fa3f8","observation_id":"cd897e72-98a1-4382-ae65-a8f9d6d16901","resolution":{"observed_at":"2026-08-15T14:23:33.111975Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-13T04:10:30.076865Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-15T14:21:42.143512Z","title":"Pappas, Hamed Hassani, Shuicheng Yan, Eric Wong, and Shiyu Chang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.143512Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:f5098eed53e1c63b04a1ec2839c5e756282868f6769ea0bd6b5ebcc6abb55aac","observation_id":"cabab389-55ab-47da-8ee7-8785c95eae69","resolution":{"observed_at":"2026-08-15T14:21:42.143512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18333","last_updated":"2025-05-23T19:39:56Z","snapshot_observed_at":"2026-08-07T14:30:46.734293Z","submitted_at":"2025-05-23T19:39:56Z","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18333","snapshot_observed_at":"2026-08-15T14:21:42.150151Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.150151Z"},"links":{"cited_paper":"/paper/2505.18333","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c60e0c55f76b7f15ebd97eb9301cc823448717b4d84b1f437130c0681f6749d6","observation_id":"bc96a6d4-658e-4a0a-baf7-21b672dc8117","resolution":{"observed_at":"2026-08-15T14:21:42.150151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.70777/si.v2i2.14609","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:23:32.883374Z","title":null,"venue":null,"work_id":"b95dc3a8-2a49-42ea-93b3-1ad98c6e08f8","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.155874Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:30cbbda80cc35b90949994b8441b3118ba7213d7d77b40fd417487a88fac36d2","observation_id":"7efddd07-df96-478b-8d04-e2bf5ae9c0c9","resolution":{"observed_at":"2026-08-15T14:23:32.948785Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-15T01:24:10.205984Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-15T14:21:42.161059Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.161059Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9f096047df49b237ff967e1267bbc9c8584a531fc9cc569cc128f2c56e0be16c","observation_id":"da484228-3a02-49a9-bec2-f19653f480d9","resolution":{"observed_at":"2026-08-15T14:21:42.161059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07791","last_updated":"2024-07-23T01:59:54Z","snapshot_observed_at":"2026-08-13T22:53:55.009344Z","submitted_at":"2024-07-10T16:08:46Z","title":"Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07791","snapshot_observed_at":"2026-08-15T14:21:42.169556Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.169556Z"},"links":{"cited_paper":"/paper/2407.07791","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4f77151897845e50c74e85c7bd9f692d55213aad070c9ed93efe4b8b7f345cde","observation_id":"a98b5659-e3f5-48de-a1cf-559e6d9f37fe","resolution":{"observed_at":"2026-08-15T14:21:42.169556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.08296","last_updated":"2026-04-08T21:31:49Z","snapshot_observed_at":"2026-08-12T20:57:33.174036Z","submitted_at":"2025-12-09T06:52:21Z","title":"Towards a Science of Scaling Agent Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.08296","snapshot_observed_at":"2026-08-15T14:21:42.175394Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.175394Z"},"links":{"cited_paper":"/paper/2512.08296","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4616dd035ee10cec9e87300427e6d05d6ac9ae49b2e9650c1459030596a01991","observation_id":"76b496f9-6cac-46e1-b244-0df97e86ddef","resolution":{"observed_at":"2026-08-15T14:21:42.175394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.19145","last_updated":"2025-06-04T18:25:06Z","snapshot_observed_at":"2026-08-16T07:16:56.580358Z","submitted_at":"2025-02-26T14:00:35Z","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.19145","snapshot_observed_at":"2026-08-15T14:21:42.182513Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.182513Z"},"links":{"cited_paper":"/paper/2502.19145","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:22340d480fd4663e7b70a0c282a281283ee82337feae3be9c7b0eb61c476d767","observation_id":"dc1f3025-e571-4a1e-923d-f8a4ec18ab5d","resolution":{"observed_at":"2026-08-15T14:21:42.182513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.12132","last_updated":"2023-03-21T18:45:09Z","snapshot_observed_at":"2026-08-13T12:19:41.154892Z","submitted_at":"2023-03-21T18:45:09Z","title":"Fundamentals of Generative Large Language Models and Perspectives in Cyber-Defense","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.12132","snapshot_observed_at":"2026-08-15T14:21:42.190210Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.190210Z"},"links":{"cited_paper":"/paper/2303.12132","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4cf9e52a9a531084119db2947182a71ad312c9fe317f065bde5e9dfd2ad9b21b","observation_id":"b9045ec9-b9d4-4229-a3be-417c6812f80f","resolution":{"observed_at":"2026-08-15T14:21:42.190210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15560","last_updated":"2025-03-18T22:30:17Z","snapshot_observed_at":"2026-08-09T12:25:31.655495Z","submitted_at":"2025-03-18T22:30:17Z","title":"Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.15560","snapshot_observed_at":"2026-08-15T14:21:42.199903Z","title":"Kulkarni and Assaf Namer","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.199903Z"},"links":{"cited_paper":"/paper/2503.15560","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:2608348e78121ff188e319d7020547eef208a48a2458acf3036149b19dd9f8e7","observation_id":"0e8edfdc-d6dd-45e2-8003-6b822c637d7f","resolution":{"observed_at":"2026-08-15T14:21:42.199903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.02844","last_updated":"2025-06-18T06:49:09Z","snapshot_observed_at":"2026-08-15T13:30:06.376395Z","submitted_at":"2025-02-05T02:59:23Z","title":"Wolfpack Adversarial Attack for Robust Multi-Agent Reinforcement Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.02844","snapshot_observed_at":"2026-08-15T14:21:42.205816Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.205816Z"},"links":{"cited_paper":"/paper/2502.02844","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:35cff683ef8d27a3e72875f7f80b88cd70b8dc21e7646165433ecd006f8aa287","observation_id":"7f20c2f6-0bcd-4e84-959d-9f3cbededcf3","resolution":{"observed_at":"2026-08-15T14:21:42.205816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.212803Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.212803Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:e69ce841db687d4481e55ce0d4855ea9413203e09b9ff3e1b7c2a9ce4df0415f","observation_id":"9d271585-b974-4107-890a-160eea579338","resolution":{"observed_at":"2026-08-15T14:21:42.212803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18889","last_updated":"2025-08-24T03:15:13Z","snapshot_observed_at":"2026-08-16T02:12:41.000185Z","submitted_at":"2025-05-24T22:22:43Z","title":"Security Concerns for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18889","snapshot_observed_at":"2026-08-15T14:21:42.218395Z","title":"Li and Benjamin C","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.218395Z"},"links":{"cited_paper":"/paper/2505.18889","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:af747841511ae019fe81dd2cd397fdf53bddd3cf00ad3672f9eca96e86791e61","observation_id":"79ff8357-3ae3-4bda-89ad-947a812d98c8","resolution":{"observed_at":"2026-08-15T14:21:42.218395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04415","last_updated":"2024-12-05T18:38:30Z","snapshot_observed_at":"2026-08-14T06:12:22.608403Z","submitted_at":"2024-12-05T18:38:30Z","title":"Targeting the Core: A Simple and Effective Method to Attack RAG-based Agents via Direct LLM Manipulation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04415","snapshot_observed_at":"2026-08-15T14:21:42.223114Z","title":"Li et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.223114Z"},"links":{"cited_paper":"/paper/2412.04415","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:81a01e6da4135bd2cc37c8e5f0374a682997e3884d27d63cb3a1dc580d2301ca","observation_id":"6dbd78a5-83f0-4b92-94e9-d305640d6b60","resolution":{"observed_at":"2026-08-15T14:21:42.223114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.08201","last_updated":"2024-12-11T08:44:15Z","snapshot_observed_at":"2026-08-15T09:51:52.666502Z","submitted_at":"2024-12-11T08:44:15Z","title":"Model-Editing-Based Jailbreak against Safety-aligned Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.08201","snapshot_observed_at":"2026-08-15T14:21:42.227801Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.227801Z"},"links":{"cited_paper":"/paper/2412.08201","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7d387246ada007b2ee709eda5fa2965ff93bbb12292b514be7d27aa5890b71a3","observation_id":"cd7be9f7-9a57-4b53-96a0-3feab9f6d498","resolution":{"observed_at":"2026-08-15T14:21:42.227801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.00976","last_updated":"2025-05-02T03:37:52Z","snapshot_observed_at":"2026-08-16T04:28:01.145316Z","submitted_at":"2025-05-02T03:37:52Z","title":"Attack and defense techniques in large language models: A survey and new perspectives","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.00976","snapshot_observed_at":"2026-08-15T14:21:42.232920Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.232920Z"},"links":{"cited_paper":"/paper/2505.00976","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:3f585a667322b79d5dfd512c91732025b54f52c3ac1296d088def0a4a2e2cd6f","observation_id":"b45ec352-e572-4bcf-abc0-7b9131838e10","resolution":{"observed_at":"2026-08-15T14:21:42.232920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13141","last_updated":"2025-02-18T18:59:00Z","snapshot_observed_at":"2026-08-14T11:12:40.062131Z","submitted_at":"2025-02-18T18:59:00Z","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13141","snapshot_observed_at":"2026-08-15T14:21:42.239461Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.239461Z"},"links":{"cited_paper":"/paper/2502.13141","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:8ba71977316ce0f57b0da9084d650f7797679b54b6ca69dd6aa9091dbf7c89d7","observation_id":"1c461d32-9f0b-4334-a293-d624010e3e3c","resolution":{"observed_at":"2026-08-15T14:21:42.239461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02882","last_updated":"2024-08-06T01:20:12Z","snapshot_observed_at":"2026-08-12T23:08:05.171551Z","submitted_at":"2024-08-06T01:20:12Z","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02882","snapshot_observed_at":"2026-08-15T14:21:42.244876Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.244876Z"},"links":{"cited_paper":"/paper/2408.02882","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4d6326973a23eb9fd8c28900b7e2166952f87bc1444578296b08cfd1f831cfba","observation_id":"d9f855f5-312b-4645-986b-e971b510356d","resolution":{"observed_at":"2026-08-15T14:21:42.244876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.01990","last_updated":"2025-08-02T12:44:02Z","snapshot_observed_at":"2026-08-12T16:45:40.094278Z","submitted_at":"2025-03-31T18:00:29Z","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.01990","snapshot_observed_at":"2026-08-15T14:21:42.256321Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.256321Z"},"links":{"cited_paper":"/paper/2504.01990","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:986c52c9dda64e9d1dee02f18898017ba08906e64837400548ad27a706a4f9d9","observation_id":"8fcd3c26-0180-4152-9ddb-4761c3d8f045","resolution":{"observed_at":"2026-08-15T14:21:42.256321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-16T00:34:08.535360Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-15T14:21:42.261625Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.261625Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:f0c0a897449c989c7b2cbd2241995a821ee2666f67ea686c0eed70bbd96a7cd6","observation_id":"f913ff73-2441-45cb-9540-727e700ff668","resolution":{"observed_at":"2026-08-15T14:21:42.261625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.267490Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.267490Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:d68f9dd0bae062d7ed342cfb766144320e5a5901a365ff4f40bf563268856412","observation_id":"9ba0ece1-70eb-458f-b077-25dfb79d73b7","resolution":{"observed_at":"2026-08-15T14:21:42.267490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11584","last_updated":"2024-04-17T17:32:41Z","snapshot_observed_at":"2026-08-04T23:37:27.678120Z","submitted_at":"2024-04-17T17:32:41Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.11584","snapshot_observed_at":"2026-08-15T14:21:42.279376Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.279376Z"},"links":{"cited_paper":"/paper/2404.11584","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4e823785fc5398ff8af2843ea07c39329fe03d8cb026a3bf7034b5a9a7f662a3","observation_id":"8a64f505-be65-4265-b636-622ad1b61cfc","resolution":{"observed_at":"2026-08-15T14:21:42.279376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.17283","last_updated":"2024-09-25T18:49:21Z","snapshot_observed_at":"2026-08-12T22:37:29.196990Z","submitted_at":"2024-09-25T18:49:21Z","title":"Investigating Privacy Attacks in the Gray-Box Setting to Enhance Collaborative Learning Schemes","version":1},"cited_work":{"arxiv_id":"2409.17283","doi":"10.48550/arxiv.2409.17283","metadata_source":"pith","pith_arxiv_id":"2409.17283","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Investigating Privacy Attacks in the Gray-Box Setting to Enhance Collaborative Learning Schemes","venue":"cs.CR","work_id":"4cbff5a9-1aef-4524-beb6-a28ee313bbfb","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.285658Z"},"links":{"cited_paper":"/paper/2409.17283","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:c7347e49c0f81fd1e8b82b1a38370622e9e71602beb6504da9cbd9b823915b12","observation_id":"67ce1a38-a189-4aa9-b058-c5dc94eb1fcd","resolution":{"observed_at":"2026-08-15T14:21:44.794527Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09880","last_updated":"2024-10-14T02:11:29Z","snapshot_observed_at":"2026-08-14T10:48:24.376975Z","submitted_at":"2024-02-15T11:08:10Z","title":"Inadequacies of Large Language Model Benchmarks in the Era of Generative Artificial Intelligence","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09880","snapshot_observed_at":"2026-08-15T14:21:42.295405Z","title":"McIntosh, Teo Sušnjak, Tong Liu, Paul Watters, and Malka N","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.295405Z"},"links":{"cited_paper":"/paper/2402.09880","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:f3bf775e52b8656da72c7a6fea6941ae84da8e0ef229d53c89ab8b04ecc6f075","observation_id":"f048fec4-5089-41f1-94ff-05cae9564ebe","resolution":{"observed_at":"2026-08-15T14:21:42.295405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.06292","last_updated":"2019-12-02T22:49:28Z","snapshot_observed_at":"2026-08-16T10:58:07.106884Z","submitted_at":"2019-04-12T16:05:21Z","title":"Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.06292","snapshot_observed_at":"2026-08-15T14:21:42.300945Z","title":"Miller, Zhen Xiang, and George Kesidis","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.300945Z"},"links":{"cited_paper":"/paper/1904.06292","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:bc9963dea1ce712337dacd940381885269de1d7731cfccc0ee718350458587fd","observation_id":"b9316548-2dda-4e68-a868-ee1dbba71992","resolution":{"observed_at":"2026-08-15T14:21:42.300945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10196","last_updated":"2024-02-15T18:51:32Z","snapshot_observed_at":"2026-08-16T01:25:23.464251Z","submitted_at":"2024-02-15T18:51:32Z","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10196","snapshot_observed_at":"2026-08-15T14:21:42.307404Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.307404Z"},"links":{"cited_paper":"/paper/2402.10196","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:03661b35e0757056e9788a121ed9b768e101506b8b0137ece25033d607e6a539","observation_id":"541a3df5-9526-46cc-a6a6-86187cdd9bf1","resolution":{"observed_at":"2026-08-15T14:21:42.307404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2506.13324","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:44.701701Z","title":null,"venue":null,"work_id":"997ec35f-d7ee-4e96-a8dd-3d83ab6028a4","year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.312250Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:32bad005562f69f8d9c81a7e291eb444a30b4b94f746967acdc0b9fbe895652d","observation_id":"df3b7f2e-9590-4fca-8279-955a6553fb77","resolution":{"observed_at":"2026-08-15T14:21:44.707023Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21083","last_updated":"2025-03-06T12:38:42Z","snapshot_observed_at":"2026-08-16T08:26:24.738835Z","submitted_at":"2024-10-28T14:48:05Z","title":"Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring","version":2},"cited_work":{"arxiv_id":"2410.21083","doi":"10.48550/arxiv.2410.21083","metadata_source":"pith","pith_arxiv_id":"2410.21083","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring","venue":"cs.CL","work_id":"e445c181-e867-468c-9dee-c2ab9eb297e6","year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.316820Z"},"links":{"cited_paper":"/paper/2410.21083","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:63dcbedb6fdde23480d0862b681f52f315df05ea10b76bc5002c67b8cf00cb89","observation_id":"06888835-5ea9-4eb8-b93b-09692e559ce2","resolution":{"observed_at":"2026-08-15T14:21:44.640548Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19956","last_updated":"2025-05-02T18:42:42Z","snapshot_observed_at":"2026-08-16T05:36:44.756300Z","submitted_at":"2025-04-28T16:29:24Z","title":"Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19956","snapshot_observed_at":"2026-08-15T14:21:42.322122Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.322122Z"},"links":{"cited_paper":"/paper/2504.19956","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:a4bfecdc55d1ee6609aef2c508b50bea01f8a584fc7af34e88ea44d4226efc89","observation_id":"18c21100-5fc1-433b-896b-5d2b3b548701","resolution":{"observed_at":"2026-08-15T14:21:42.322122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-15T07:47:42.680001Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-15T14:21:42.327871Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.327871Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:5ded6e3bdaf09281410301e094a10df876e6bc1b2a58e9e8f456314a16a47a27","observation_id":"fbca349d-659a-47a0-bdae-45ef47e6c78c","resolution":{"observed_at":"2026-08-15T14:21:42.327871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.11824","last_updated":"2025-08-15T22:13:54Z","snapshot_observed_at":"2026-08-16T10:38:42.982674Z","submitted_at":"2025-08-15T22:13:54Z","title":"Rethinking Autonomy: Preventing Failures in AI-Driven Software Engineering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.11824","snapshot_observed_at":"2026-08-15T14:21:42.332980Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.332980Z"},"links":{"cited_paper":"/paper/2508.11824","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:fbfa652ad93105cacafcaa2235915ca10af5e3d484a1cc524c90fb3d6cc3d8a0","observation_id":"3e11afc6-f838-496f-ab1a-d73fc134f262","resolution":{"observed_at":"2026-08-15T14:21:42.332980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.3390/s23136067","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:44.563154Z","title":null,"venue":null,"work_id":"1fabd0be-a73d-4f60-b4ca-02100a29566b","year":2023},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.338582Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:a396633b887e1e5190bbba65d3f9844b71f639b86cc8d6099b9993180f756b01","observation_id":"0c8956ca-4400-48ee-aa9e-7dce832e5ced","resolution":{"observed_at":"2026-08-15T14:21:44.568139Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03391","last_updated":"2024-07-03T14:52:09Z","snapshot_observed_at":"2026-08-15T07:16:57.942618Z","submitted_at":"2024-07-03T14:52:09Z","title":"Soft Begging: Modular and Efficient Shielding of LLMs against Prompt Injection and Jailbreaking based on Prompt Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.03391","snapshot_observed_at":"2026-08-15T14:21:42.343240Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.343240Z"},"links":{"cited_paper":"/paper/2407.03391","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:9ee4b862c9a18baa25305aea619c34a38a09f1c4ac31dfd772048c75c6c6b368","observation_id":"b18b2425-c7e8-4444-9bcd-ae47ba148e1f","resolution":{"observed_at":"2026-08-15T14:21:42.343240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.04123","last_updated":"2026-06-04T19:57:38Z","snapshot_observed_at":"2026-08-15T15:06:48.125460Z","submitted_at":"2025-12-02T16:45:10Z","title":"Measuring Agents in Production","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.04123","snapshot_observed_at":"2026-08-15T14:21:42.352678Z","title":"Pan, Negar Arabzadeh, Riccardo Cogo, et al","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.352678Z"},"links":{"cited_paper":"/paper/2512.04123","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:de94b5d92a3b6040e4617cf87b396ccf06c7ef5eadbd672e728a97e86e9740b5","observation_id":"8f781612-17fc-4adc-aa2c-0469ebb6f462","resolution":{"observed_at":"2026-08-15T14:21:42.352678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:21:42.362515Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.362515Z"},"links":{"citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:899911d38379857957c950ef0f2f0dc57a5e0c2e00116220033fefa58d6efeca","observation_id":"cdcca64c-652a-48ba-a4a5-6e7b2989e000","resolution":{"observed_at":"2026-08-15T14:21:42.362515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16248","last_updated":"2025-07-09T01:38:20Z","snapshot_observed_at":"2026-08-15T22:00:16.397160Z","submitted_at":"2025-03-20T15:44:31Z","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16248","snapshot_observed_at":"2026-08-15T14:21:42.368091Z","title":"Ashwin Hebbar, Prateek Mittal, and Pramod Viswanath","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.368091Z"},"links":{"cited_paper":"/paper/2503.16248","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:7ba894cc9ed8aba8877a2e7a54f8b925fc6a24f798ce456fc36b1df957a54e89","observation_id":"b2c992ca-c444-48b4-983d-fb121bc47cbb","resolution":{"observed_at":"2026-08-15T14:21:42.368091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.05710","last_updated":"2024-07-08T08:10:18Z","snapshot_observed_at":"2026-08-16T07:08:39.124522Z","submitted_at":"2024-07-08T08:10:18Z","title":"Saltzer & Schroeder for 2030: Security engineering principles in a world of AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.05710","snapshot_observed_at":"2026-08-15T14:21:42.374359Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.374359Z"},"links":{"cited_paper":"/paper/2407.05710","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:877fee0538c8208ee9f0e1607417518eedfa845804c44e4f530f61b39d25a708","observation_id":"b5cef070-7067-4065-bab4-b7de93fae92f","resolution":{"observed_at":"2026-08-15T14:21:42.374359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01606","last_updated":"2024-10-02T14:47:05Z","snapshot_observed_at":"2026-08-12T22:32:29.046663Z","submitted_at":"2024-10-02T14:47:05Z","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01606","snapshot_observed_at":"2026-08-15T14:21:42.380858Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.380858Z"},"links":{"cited_paper":"/paper/2410.01606","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:8f1d55834d66bd0599ff58c00a928f02eece9bb15e47ee3a783d1098cd151f68","observation_id":"d7920fdf-1b26-4147-be22-94e46feba56d","resolution":{"observed_at":"2026-08-15T14:21:42.380858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12926","last_updated":"2024-07-17T18:01:07Z","snapshot_observed_at":"2026-08-16T05:09:56.335382Z","submitted_at":"2024-07-17T18:01:07Z","title":"Single-Pulse Gamma-Ray Bursts have Prevalent Hard-to-Soft Spectral Evolution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12926","snapshot_observed_at":"2026-08-15T14:21:42.386268Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.386268Z"},"links":{"cited_paper":"/paper/2407.12926","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:b1718ec29da7982f79c03bbf9dff5908a846c3e504875043ba3851e936f9f80b","observation_id":"94a50cff-1756-4361-9ace-c98b10786de1","resolution":{"observed_at":"2026-08-15T14:21:42.386268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15236","last_updated":"2026-05-27T16:38:46Z","snapshot_observed_at":"2026-08-14T15:17:01.627689Z","submitted_at":"2024-10-20T00:00:56Z","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15236","snapshot_observed_at":"2026-08-15T14:21:42.392917Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.392917Z"},"links":{"cited_paper":"/paper/2410.15236","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:8283e60c1aa4faeb250d8a225ee6cc2fd58db2a41aa3f06cc16cafdb1eea47a7","observation_id":"e329e801-7a61-407c-8d7e-23ed80723be2","resolution":{"observed_at":"2026-08-15T14:21:42.392917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-08-15T06:26:47.552378Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-15T14:21:42.399009Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.399009Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4cda444dbbd2c82609ff4f583f0434a1a1217c9dbab62b0d15e5ce7a12207536","observation_id":"0010ba4e-613a-4d4a-bdcd-ef865102bc15","resolution":{"observed_at":"2026-08-15T14:21:42.399009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.06512","last_updated":"2021-05-13T18:59:15Z","snapshot_observed_at":"2026-08-16T10:54:02.704994Z","submitted_at":"2021-05-13T18:59:15Z","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","version":1},"cited_work":{"arxiv_id":"2105.06512","doi":"10.48550/arxiv.2105.06512","metadata_source":"pith","pith_arxiv_id":"2105.06512","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","venue":"cs.LG","work_id":"b47a6158-ce0c-485e-a3bd-d4ff4c0bb02a","year":2021},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":103,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.405967Z"},"links":{"cited_paper":"/paper/2105.06512","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:760ee5093cce323491beae06279c41676ad6170a94920978df0a50f605390cf2","observation_id":"e090ee1f-c6f8-4399-8b75-25b814ed7eb2","resolution":{"observed_at":"2026-08-15T14:21:44.418131Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-13T11:34:39.546416Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-15T14:21:42.411193Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":104,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.411193Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:4390174ebd9e4622dc47c7d79083194ad83b8e0481c82f4c028e44ceab411a3a","observation_id":"df73cb37-0c7b-4e25-9751-b931ded22cc1","resolution":{"observed_at":"2026-08-15T14:21:42.411193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":80,"verified_exact":19,"verified_fuzzy":0},"total_outbound_references":162},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 100 of 162 outbound references and 0 inbound Pith citation observations for arXiv:2608.10530."}