Paper Citation Record · LEDGER

ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2408.04870.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2408.04870 v5

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 11 of 11 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 11 of 11 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T14:32:58.142259Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-03T21:28:59.121693Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation cb8b98b8-0102-46c7-8d13-1c1f8179ec3a · inbound

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation cites this paper.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 59

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.142259Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 94d22acf-63de-4e2e-9ce0-ceebb0130e82 · inbound

Security Considerations for Artificial Intelligence Agents cites this paper.

Security Considerations for Artificial Intelligence Agents ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 46

Resolution: verified exact; arxiv_id, observed 2026-05-15T12:40:00.280364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 3cf259b4-80d4-4e7d-9dea-35fe00e847d6 · inbound

RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems cites this paper.

RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 12

Resolution: verified exact; arxiv_id, observed 2026-05-13T23:18:25.892181Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a5099ca0-172d-4559-9ecf-798fd181ac5a · inbound

Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills cites this paper.

Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 29

Resolution: verified exact; arxiv_id, observed 2026-05-12T06:56:27.275598Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation cbeed13a-274a-4c0a-afd1-5ec337e20903 · inbound

Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning cites this paper.

Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 21

Resolution: verified exact; arxiv_id, observed 2026-05-12T07:37:03.994559Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 31b07c9d-2ab5-4148-b991-cbdcdee72ee1 · inbound

SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces cites this paper.

SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 75

Resolution: verified exact; arxiv_id, observed 2026-05-13T05:12:17.885796Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation d1fbc90f-663c-4b16-8a6f-ddb8db223a3c · inbound

SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces cites this paper.

SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 30

Resolution: verified exact; arxiv_id, observed 2026-07-01T13:55:46.235541Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 6bf015e1-ecf5-42f5-aef1-71bf408aaa82 · inbound

Do Coding Agents Understand Least-Privilege Authorization? cites this paper.

Do Coding Agents Understand Least-Privilege Authorization? ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-05-19T16:37:40.099361Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 7d90cce7-a70f-4ab1-a440-5b211f87f444 · inbound

Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems cites this paper.

Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 36

Resolution: verified exact; arxiv_id, observed 2026-07-03T21:28:59.123260Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 3bfbfcb4-d053-4cc4-b692-0a084af6cbf8 · inbound

Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? cites this paper.

Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-01T16:32:04.007867Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b6a1ee41-8a7e-4896-ad24-3152dafd7dea · inbound

Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions cites this paper.

Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 102

Resolution: unresolved; no resolver link, observed 2026-08-06T20:27:13.224775Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.