Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-02T01:12:23.933654Z
Paper Citation Record · LEDGER
As of 11 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 0 inbound Pith citation observations for arXiv:2607.14754.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-02T01:12:23.933654Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-11T06:34:44.6726+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
59 of 59 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 8da2e222-b407-408b-9d2a-edc7c9638c38 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCPScan: Security analysis tool for MCP servers,
Reference 1
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation df846fab-1218-4fc4-b486-e0be57ddd384 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Snyk Agent Scan,
Reference 2
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9fcbea15-8d2c-4bd3-a994-0cfb625da628 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection AI-Infra-Guard: A Comprehensive, Intelligent, and Easy-to-Use AI Red Teaming Platform,
Reference 3
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1b3b61af-2e6b-4004-a9b8-402359be74e0 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Model Context Protocol,
Reference 4
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6dfe2038-9886-4679-a179-5d3e8216a487 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection JSON-RPC 2.0 specification,
Reference 5
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 19ffc91f-d1a4-4705-94f2-c4236a00fc69 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Claude Desktop,
Reference 6
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 80ad9cb8-1004-4f0f-b7b7-f348c72f7943 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Cursor: The AI Code Editor,
Reference 7
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 57014866-d484-4edb-8606-ba4cf6700b6b · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Snipuzz: Black-box fuzzing of iot firmware via message snippet inference,
Reference 8
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3c289c50-6a13-4449-aafc-b0353a21f4a9 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Beware of the unexpected: Bimodal taint analysis,
Reference 9
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 60e7da18-bf3d-4721-acf6-fb49b064c6c1 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection OW ASP Benchmark Project,
Reference 10
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0e69a67a-0c0e-4db6-8c52-7c883dd6203a · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Juliet Test Suite v1.3 for C/C++ and Java,
Reference 11
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2b3739f3-ae45-4878-b300-e306090dedbe · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCP security bench (MSB): Benchmarking attacks against model context protocol in LLM agents,
Reference 12
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 93a0e49e-c230-4085-8cc9-1431bf430126 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCPSecBench: A systematic security benchmark and playground for testing model context protocols,
Reference 13
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 24ea9fdd-faa4-45e2-94b2-1afe6242792b · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCP- SafetyBench: A benchmark for safety evaluation of large language models with real-world MCP servers,
Reference 14
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aafd8f11-289e-4bc8-8d77-05238b717749 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection CWE-78: Improper Neutralization of Special Elements used in an OS Command (’OS Command Injection’),
Reference 15
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9ae2ece8-9bfb-49ec-9671-0dd3f4154223 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection CWE-22: Improper Limitation of a Pathname to a Restricted Directory (’Path Traversal’),
Reference 16
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 59a3918a-bec5-4c2a-a794-fd89c09041ff · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection OW ASP Web Security Testing Guide: Testing for Path Traversal (WSTG-ATHZ-01),
Reference 17
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3dd529ba-2ded-4228-b98c-d4a75e503ce7 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers
Reference 18
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c6872dcc-e9d8-44f7-963f-a73742d501fd · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCPZoo: A large-scale dataset of runnable model context protocol servers for ai agent,
Reference 19
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f9cfa3c7-9024-4a9d-b880-aef3c20f0dea · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security
Reference 20
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 33ac838c-e586-4eb7-92de-75e0283b539c · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Prompt injection attack to tool selection in LLM agents,
Reference 21
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 72a9399d-eb2e-4c5b-b257-a74eb8eea54c · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MPMA: Preference manipulation attack against model context protocol,
Reference 22
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5c046c1e-0e4b-4d49-83b9-b679560d8a8e · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCP-ITP: An automated framework for implicit tool poisoning in MCP,
Reference 23
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2f4a1307-4aeb-4953-9aa5-0bea3376b6a7 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Attractive metadata attack: Inducing LLM agents to invoke malicious tools,
Reference 24
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d88d67ab-67de-4306-99be-a6602f5987f7 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Breaking the protocol: Security analysis of the model context protocol specification and prompt injection vulnerabilities in tool-integrated LLM agents,
Reference 25
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8b5ce3b1-e4a7-4561-b935-6454bd2a6167 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Compatibility at a cost: Systematic discovery and exploitation of MCP clause-compliance vulnerabilities,
Reference 26
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4d7b2078-1609-4105-a0e4-35c99c87c3e5 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Don’t believe everything you read: Understanding and measuring MCP behavior under misleading tool descriptions,
Reference 27
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aaf60554-a12c-47ab-8b77-e429c376906c · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents,
Reference 28
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a191708d-7ff2-41a0-a072-656e0ceab2cf · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Identifying the risks of LM agents with an LM-emulated sandbox,
Reference 29
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4fe2b22b-27c3-4f5b-9cd0-85276be12641 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Model context protocol (MCP): Landscape, security threats, and future research directions,
Reference 30
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c819445c-1120-4c2b-8a25-b9179e6d701c · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection A First Look at the Security Issues in the Model Context Protocol Ecosystem
Reference 31
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 37b46aaf-c7c9-4dc3-8994-9d4d9cf875ec · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Automatic red teaming LLM-based agents with model context protocol tools,
Reference 32
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aa7813a3-430f-4f3c-96fe-64344c156442 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection T-MAP: Red-teaming LLM agents with trajectory-aware evolutionary search,
Reference 33
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 309d7031-a777-4122-a466-125157105563 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCP Scanner,
Reference 34
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a0e71696-5866-405e-88d0-23cc9b4e2bad · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Available: https://arxiv.org/abs/2603.22341
Reference 35
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation dc092f63-10a1-49d4-81ce-03655b657ca4 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Mindguard: Intrinsic decision inspection for securing LLM agents against metadata poisoning,
Reference 36
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ff42dfc8-265c-42a9-a1c1-0c4188b832d1 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection mcp-armor: MCP Configuration Scanner with Client- Aware Security Analysis,
Reference 37
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 395193d8-1d30-4351-81cb-8945c9a49a2d · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection CASCADE: A Cascaded Hybrid Defense Architecture for Prompt Injection Detection in MCP-Based Systems
Reference 38
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 32c6e624-c210-46a1-9d03-fb665f9bc01d · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCP-Guard: A multi-stage defense-in-depth framework for securing model context protocol in agentic AI,
Reference 39
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fd7049b5-8199-40c0-ac90-42b99449aa73 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Auditing MCP servers for over-privileged tool capabilities,
Reference 40
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ad1eea2c-eb1f-4260-aa1a-914a6acf4a6a · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits
Reference 41
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c9615c4c-cf8d-43c9-912a-8c5cb2d9bfa9 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers
Reference 42
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 70707f31-365b-4b5a-91ef-abab78b83267 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools
Reference 43
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a3037191-b0ae-40ce-b8f1-f92262ed60e1 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Large language model guided protocol fuzzing
Reference 44
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f20dc58a-5aad-45ee-874b-28a2f1c2333a · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MCPShield: A security cognition layer for adaptive trust calibration in model context protocol agents,
Reference 45
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 11e2a3df-3a11-405c-8fbd-e21cce56a727 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Available: https://arxiv.org/abs/2602.14281
Reference 46
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a91b2771-a7d6-4f5d-8811-c010443ab2de · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection YuraScanner: Leveraging LLMs for task-driven web app scanning,
Reference 47
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 50f61783-b495-4b4a-915d-a7b393cc14d5 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Make agent defeat agent: Automatic detection of {Taint-Style}vulnerabilities in{LLM-based}agents,
Reference 48
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d0398f1f-162b-412b-bc56-1c227a38687c · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Black widow: Blackbox data-driven web scanning,
Reference 49
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 55585531-6119-42bf-b2c2-ca32e751603a · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection MarkItDown,
Reference 51
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e3bda448-a814-4a52-bf19-589cc79b5587 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work
Reference 52
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5d7ae7df-ea9d-4d3e-ba30-a3490667cb4b · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Prefer compact, high-signal probes over generic enumeration
Reference 53
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7c73ca54-f629-4701-990c-f64d5ede9a78 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work
Reference 54
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f458ceda-d5d8-4a8b-968f-ec9d8edc6c40 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work
Reference 55
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4fc82c9e-db0f-4e63-bfb6-0227fa5f5e5a · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection is_system_originated
Reference 56
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8728e79a-6434-4482-a623-483f2f4d14f1 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work
Reference 57
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5884f5bf-1ab7-409c-8c8b-d698e45a067f · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work
Reference 58
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ef75a805-aad3-4923-b5d4-3d631b4afb73 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection decision
Reference 59
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ae60e436-b451-4091-a94c-029ee8c39d83 · outbound
FlowGuard: From Signals to Evidence for MCP Security Detection Available: https://arxiv.org/abs/2603.10163
Reference 2026
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
No inbound Pith citation observations are available.