Paper Citation Record · LEDGER

AdvAgent: Controllable Blackbox Red-teaming on Web Agents

As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 29 inbound Pith citation observations for arXiv:2410.17401.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2410.17401 v4

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 29 of 29 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 29 of 29 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-16T10:12:01.082250Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-07-10T12:27:04.225516Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation f0945ce6-f0f6-4775-9887-602df82b7143 · inbound

Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey cites this paper.

Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 64

Resolution: unresolved; no resolver link, observed 2026-08-12T20:53:14.904442Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 51c834a0-bcc7-4ef8-ae66-97d23a97fdcf · inbound

MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents cites this paper.

MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-08T20:06:58.358737Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9c106925-bb18-4564-b5d7-683637fa0ab3 · inbound

Progent: Securing AI Agents with Privilege Control cites this paper.

Progent: Securing AI Agents with Privilege Control AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 70

Resolution: verified exact; arxiv_id, observed 2026-05-22T21:12:08.473581Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8efa1122-4a08-46d9-9fd6-c6128614394a · inbound

Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks cites this paper.

Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 221

Resolution: unresolved; no resolver link, observed 2026-08-16T10:12:01.082250Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eae67553-0fd5-4e6c-85af-cd745f00c8bc · inbound

AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents cites this paper.

AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-15T22:59:53.438670Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3e968913-e5f0-440f-ab50-4695e34851d6 · inbound

A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron? cites this paper.

A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron? AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 7

Resolution: metadata mismatch; arxiv_id, observed 2026-05-22T15:24:57.825168Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4eac4d0e-9c69-4fad-9581-b2bf0dea19b2 · inbound

Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction cites this paper.

Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-15T21:05:35.065547Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 494eb1e6-f899-4489-bfc5-f15213e909f3 · inbound

From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents cites this paper.

From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-15T20:28:15.532767Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0055c883-c31b-40e4-a78d-ea4dc6ea41eb · inbound

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks cites this paper.

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-07T15:41:24.769802Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d2a9354-7c18-415f-a0b3-f555568db69a · inbound

Superplatforms Have to Attack AI Agents cites this paper.

Superplatforms Have to Attack AI Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.101980Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dea2d02b-e66d-4933-afd6-4ec4a4e03765 · inbound

AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery cites this paper.

AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-07T13:32:47.362113Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b86ad2e5-c65e-46e7-9070-49f6da456177 · inbound

On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling cites this paper.

On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 82

Resolution: unresolved; no resolver link, observed 2026-08-06T22:23:48.692001Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d554829c-d246-4a8d-ba50-f2c560642faa · inbound

LLM Agents Are the Antidote to Walled Gardens cites this paper.

LLM Agents Are the Antidote to Walled Gardens AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 101

Resolution: verified exact; arxiv_id, observed 2026-05-22T00:44:29.385051Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation edb5e66b-55fd-4313-b530-04c568e6292a · inbound

Mobile GUI Agents under Real-world Threats: Are We There Yet? cites this paper.

Mobile GUI Agents under Real-world Threats: Are We There Yet? AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 33

Resolution: verified exact; arxiv_id, observed 2026-05-19T07:02:07.912856Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 10569b72-f8b6-470e-b0a8-8290ce82ad5a · inbound

WebGuard: Building a Generalizable Guardrail for Web Agents cites this paper.

WebGuard: Building a Generalizable Guardrail for Web Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.111978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 93533467-36d7-41de-9837-9439022d3a6a · inbound

MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them cites this paper.

MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-06T13:06:39.378280Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 10e90b88-ef6f-40a2-8efb-f88a6454f95b · inbound

Agentic Web: Weaving the Next Web with AI Agents cites this paper.

Agentic Web: Weaving the Next Web with AI Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 237

Resolution: unresolved; no resolver link, observed 2026-08-06T13:05:40.441993Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9c655096-f07b-42c1-b1cc-3548e9f88d27 · inbound

Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment cites this paper.

Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-05T05:09:39.975185Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8af6d729-c9ed-4f2f-9f76-ca0858ec5dc5 · inbound

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges cites this paper.

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 70

Resolution: verified exact; arxiv_id, observed 2026-05-18T03:42:22.033296Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b149cb52-69c8-4166-9817-38d256c2f88f · inbound

Agents at Risk: How Users Unwittingly Undermine LLM Safety cites this paper.

Agents at Risk: How Users Unwittingly Undermine LLM Safety AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-03T10:45:19.642964Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e104e959-3b76-41c6-8dae-fc303042de65 · inbound

ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems cites this paper.

ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-05-10T21:55:52.954590Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 16532d4d-f6ef-4fd1-85f5-bd52dbd3b549 · inbound

SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems cites this paper.

SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 16

Resolution: verified exact; arxiv_id, observed 2026-05-11T06:31:02.019262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 5f421e42-7406-4f35-88fa-7c4b5930ca08 · inbound

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections cites this paper.

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 72

Resolution: verified exact; arxiv_id, observed 2026-07-01T14:35:47.827461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2463621c-1a0e-4eca-af75-b74831448b05 · inbound

HLL: Can Agents Cross Humanity's Last Line of Verification? cites this paper.

HLL: Can Agents Cross Humanity's Last Line of Verification? AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 53

Resolution: verified exact; arxiv_id, observed 2026-07-01T22:56:19.639725Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3d91a8ab-2976-40cd-80b9-2f318ec326d7 · inbound

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents cites this paper.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 14

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T21:08:58.366599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fa67aa11-7fb1-4ed2-bc83-b5857ffef034 · inbound

FORGE: Research-Trajectory Hijacking Attacks on Deep Research Agents cites this paper.

FORGE: Research-Trajectory Hijacking Attacks on Deep Research Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 98

Resolution: unresolved; no resolver link, observed 2026-07-11T14:39:55.782891Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c9a13f31-a8b4-478e-9db2-77d30dd93cac · inbound

Prismata: Confining Cross-Site Prompt Injection in Web Agents cites this paper.

Prismata: Confining Cross-Site Prompt Injection in Web Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 88

Resolution: verified exact; local_arxiv, observed 2026-07-10T12:27:04.226700Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f49a09b2-52bf-44b8-93c4-5ef84f5a5a29 · inbound

Agent Security Needs Redefinition through a Holistic Framework cites this paper.

Agent Security Needs Redefinition through a Holistic Framework AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 283

Resolution: unresolved; no resolver link, observed 2026-08-01T06:04:46.674969Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d0f18767-8e0b-4614-a88e-25f9002adb60 · inbound

Software Engineering for and with GUI Agent cites this paper.

Software Engineering for and with GUI Agent AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 265

Resolution: unresolved; no resolver link, observed 2026-08-11T20:19:16.134509Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.