Paper Citation Record · LEDGER

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems

As of 11 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 1 inbound Pith citation observation for arXiv:2607.14611.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.14611 v1

Coverage vector

measured 34 of 34 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-02T01:38:42.190666Z

measured 35 of 35 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-11T06:34:44.6726+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-08T00:51:38.000729Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-08T00:51:38.474275Z

Reference resolution

34 of 34 outbound references displayed

verified exact0
verified fuzzy0
unresolved34
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 394d86cd-4f2f-4a84-a769-1d9535ec6785 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.415658Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9c8f3deb-ec4a-46ee-8d40-e90d205af83b · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.521573Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1195f7af-dfc3-4b54-ac03-8d025b1709c9 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.576354Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30357494-4087-4327-8c3d-5091fc4dc23a · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.650508Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e7178069-6458-4999-b2d8-a067566f20f6 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.714552Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e09c0414-30e7-4e5b-bcf4-7604be4cd2eb · outbound

This paper cites Evaluating Large Language Models Trained on Code.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Evaluating Large Language Models Trained on Code

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.871820Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3fb7ef7f-f33b-4ccf-8ff7-46233ac65399 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.934981Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 78f2ebc9-791b-4d12-8c92-465b0bd53a96 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.993250Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6bd6e3fe-71ff-4f05-b71b-3a6de9c9a32b · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.031138Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9cb6e3ee-b8ef-4778-b0df-6e2c108ef6ed · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.141656Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7a0187c3-a05b-4925-981a-82559cbe96e6 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.196448Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 64b6b926-0297-46c1-8c3f-bf2c3b1b5851 · outbound

This paper cites Memory in the Age of AI Agents.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Memory in the Age of AI Agents

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.249137Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dd55892d-e96b-478a-a10d-47dd95cb148e · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Prompt Injection attack against LLM-integrated Applications

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.355319Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f9580984-538d-4053-828c-d590a223bed8 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.454209Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c847647a-97bd-4df9-9810-67857c7bc19b · outbound

This paper cites Large Language Model Agent: A Survey on Methodology, Applications and Challenges.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Large Language Model Agent: A Survey on Methodology, Applications and Challenges

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.521080Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 26ea6e2f-17e2-457d-b3da-81739546947d · outbound

This paper cites Schulhoff, Jamie Hayes, Michael Ilie, Juliette Pluto, Shuang Song, Harsh Chaudhari, Ilia Shumailov, Abhradeep Thakurta, Kai Yuanqing Xiao, Andreas Terzis, and Florian Tramèr.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Schulhoff, Jamie Hayes, Michael Ilie, Juliette Pluto, Shuang Song, Harsh Chaudhari, Ilia Shumailov, Abhradeep Thakurta, Kai Yuanqing Xiao, Andreas Terzis, and Florian Tramèr

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.607618Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3eec05e3-8e76-4479-8025-8e899a0f10d9 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.744238Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fcff7774-b5a8-49d9-b04a-6cead1e34586 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.835040Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2735e0bb-93ae-45bb-900a-ac93cf5b03fc · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.907392Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1e803452-bf98-489e-a7aa-97b23d136df6 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.970352Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 066cb70d-db21-4d78-83ed-edb8ff68ac79 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Ignore Previous Prompt: Attack Techniques For Language Models

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.015466Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4a4adbae-600e-47b7-9586-8649e8a1717e · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.114927Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 120890a6-00de-4eb5-b551-833ab6fbd565 · outbound

This paper cites Under the Hood of SKILL.md: Semantic Supply-chain Attacks on AI Agent Skill Registry.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Under the Hood of SKILL.md: Semantic Supply-chain Attacks on AI Agent Skill Registry

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.268672Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 248f53ce-28ff-4691-ab9c-ff5177047dfe · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.358239Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4679481d-b57b-4e5a-905f-e358d2ec715e · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.437486Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation abd51365-523c-48a1-abe9-29d460eb10bc · outbound

This paper cites 2025.OpenClaw: Your own personal AI assistant.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems 2025.OpenClaw: Your own personal AI assistant

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.580691Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation db277dd7-70f5-480d-938b-0c441fda82d1 · outbound

This paper cites From Recall to Forgetting: Benchmarking Long-Term Memory for Personalized Agents.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems From Recall to Forgetting: Benchmarking Long-Term Memory for Personalized Agents

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.621430Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 26d71db8-b615-4e38-a6d2-2ba28dd7cc2c · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.708295Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e26f733f-8ec2-4e2a-9324-a2c87c4d29d6 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.834300Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2bafec05-d8ec-4987-b00d-777246fdff5a · outbound

This paper cites ReAct: Synergizing Reasoning and Acting in Language Models.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems ReAct: Synergizing Reasoning and Acting in Language Models

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:41.970171Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d2186340-4102-428b-9b91-bf40d13d5d75 · outbound

This paper cites an unresolved cited work.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems Unresolved cited work

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:42.059223Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bea4b5e2-8de0-43ac-87d5-07bc2f5d1ff0 · outbound

This paper cites The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:40.675882Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dbd711fe-8c21-41f4-b20c-ab848d07c292 · outbound

This paper cites A vailable at SSRN 6377518(2026).

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems A vailable at SSRN 6377518(2026)

Reference 2026

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:39.812264Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2cffee07-7596-421d-8724-c0b6a24f58a8 · outbound

This paper cites I'm not sure about X -- want me to check ?.

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems I'm not sure about X -- want me to check ?

Reference 3248

Resolution: unresolved; no resolver link, observed 2026-08-02T01:38:42.190666Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation d801fd05-9d4b-4757-9fb9-54ceb9d0c655 · inbound

AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection cites this paper.

AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems

Reference 36

Resolution: metadata mismatch; local_arxiv, observed 2026-08-08T00:51:38.479075Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.