Paper Citation Record · LEDGER

Superplatforms Have to Attack AI Agents

As of 9 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 1 inbound Pith citation observation for arXiv:2505.17861.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2505.17861 v1

Coverage vector

measured 32 of 32 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T14:42:38.774308Z

measured 33 of 33 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-05-10T17:40:14.733882Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-11T06:20:59.355124Z

Reference resolution

32 of 32 outbound references displayed

verified exact0
verified fuzzy15
unresolved16
parse uncertain1
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 2b2c09de-5a7c-4f93-8e8b-c81cb79882d7 · outbound

This paper cites From seo to geo: How agencies are navigat- ing llm-driven search.

Superplatforms Have to Attack AI Agents From seo to geo: How agencies are navigat- ing llm-driven search

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:41.676143Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 0c7ef86f-09f8-49d5-b17b-3dfd09a69a17 · outbound

This paper cites Gatekeeping: A critical review.

Superplatforms Have to Attack AI Agents Gatekeeping: A critical review

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:41.266893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 9f5c4307-9121-4ec8-83ab-86af83737893 · outbound

This paper cites The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections.

Superplatforms Have to Attack AI Agents The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:36.620074Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7d46fe16-bfa6-40f4-9786-69e5f7410cb7 · outbound

This paper cites Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks.

Superplatforms Have to Attack AI Agents Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:36.762901Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 579dcae6-f024-4220-a634-0486eb57cf0f · outbound

This paper cites Exploring the adversarial robustness of clip for ai-generated image detection.

Superplatforms Have to Attack AI Agents Exploring the adversarial robustness of clip for ai-generated image detection

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:41.146114Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation e6758710-9f0a-42b5-81cb-1891ec771ad2 · outbound

This paper cites Multi-agent systems: A survey.

Superplatforms Have to Attack AI Agents Multi-agent systems: A survey

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.981986Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 30aa3551-0db0-4627-8802-57cc1f79fe8a · outbound

This paper cites Elshoush.

Superplatforms Have to Attack AI Agents Elshoush

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:36.977320Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ee35236d-2108-49e7-b4d7-6692f6101edd · outbound

This paper cites Clip-guided generative networks for transferable targeted adversarial attacks.

Superplatforms Have to Attack AI Agents Clip-guided generative networks for transferable targeted adversarial attacks

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.808679Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 0dadd785-617b-4413-86fa-ddaa31769ed2 · outbound

This paper cites Build Agent Advocates, Not Platform Agents.

Superplatforms Have to Attack AI Agents Build Agent Advocates, Not Platform Agents

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:37.129735Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f3a082e9-bc92-40ec-abb7-0c054b0d020d · outbound

This paper cites Certifying LLM Safety against Adversarial Prompting.

Superplatforms Have to Attack AI Agents Certifying LLM Safety against Adversarial Prompting

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:37.234824Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e10cd6b7-7dd3-4c75-97cc-58291d7e0220 · outbound

This paper cites Amazon statistics you should know in 2024.

Superplatforms Have to Attack AI Agents Amazon statistics you should know in 2024

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.713297Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation b1e15976-9fe5-4456-b090-21c76996633c · outbound

This paper cites Forces behind food habits and methods of change.

Superplatforms Have to Attack AI Agents Forces behind food habits and methods of change

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.595893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 45cb0ba6-0147-4422-a558-baca1bd18165 · outbound

This paper cites EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage.

Superplatforms Have to Attack AI Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:37.458144Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 603f7876-4bac-4705-bd28-007fd556fde5 · outbound

This paper cites Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions.

Superplatforms Have to Attack AI Agents Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:37.544967Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 15727679-ee79-4228-8675-93d95234f6bb · outbound

This paper cites Future internet and digital ecosystems.

Superplatforms Have to Attack AI Agents Future internet and digital ecosystems

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.443991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 78a8aa81-50c6-4b22-925e-253929bda273 · outbound

This paper cites Shoemaker and Timothy P.

Superplatforms Have to Attack AI Agents Shoemaker and Timothy P

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.338550Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 5f2d040b-a55b-4ca1-be2d-b8a478761cfc · outbound

This paper cites Advertising revenue of google from 2001 to 2023.

Superplatforms Have to Attack AI Agents Advertising revenue of google from 2001 to 2023

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.228287Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation bfc370ec-1bf4-4463-a693-eefd55a130a9 · outbound

This paper cites BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents.

Superplatforms Have to Attack AI Agents BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:37.913404Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 86440856-f42c-47b1-ac4b-918805b7ae7b · outbound

This paper cites Foot-In-The-Door: A Multi-turn Jailbreak for LLMs.

Superplatforms Have to Attack AI Agents Foot-In-The-Door: A Multi-turn Jailbreak for LLMs

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:37.996832Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3f04a8b3-649b-4913-b074-f306e262cdee · outbound

This paper cites Dissecting adversarial robustness of multimodal lm agents.

Superplatforms Have to Attack AI Agents Dissecting adversarial robustness of multimodal lm agents

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:40.068742Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 9d2a9354-7c18-415f-a0b3-f555568db69a · outbound

This paper cites AdvAgent: Controllable Blackbox Red-teaming on Web Agents.

Superplatforms Have to Attack AI Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.101980Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 678edab7-4c6f-421d-81a2-a37b8da780ff · outbound

This paper cites Watch out for your agents! investigating backdoor threats to llm-based agents.

Superplatforms Have to Attack AI Agents Watch out for your agents! investigating backdoor threats to llm-based agents

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:39.894716Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 62cedc44-2bb7-4b86-9e8b-242d17c9a194 · outbound

This paper cites A Survey of AI Agent Protocols.

Superplatforms Have to Attack AI Agents A Survey of AI Agent Protocols

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.256289Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d548796-1c20-41e0-aef4-1ea4611b31e0 · outbound

This paper cites The Dawn of LMMs: Preliminary Explorations with GPT-4V(ision).

Superplatforms Have to Attack AI Agents The Dawn of LMMs: Preliminary Explorations with GPT-4V(ision)

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.276256Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 36fc0658-2c08-4d52-996a-15fcd73dd633 · outbound

This paper cites Infecting llm agents via generalizable adversarial attack.

Superplatforms Have to Attack AI Agents Infecting llm agents via generalizable adversarial attack

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:39.726223Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 86de7c74-515b-45a6-a57b-f7b619b4d408 · outbound

This paper cites Infecting LLM agents via generalizable adversarial attack.

Superplatforms Have to Attack AI Agents Infecting LLM agents via generalizable adversarial attack

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:39.590312Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 22238714-11bd-4127-889b-d1300aafd41c · outbound

This paper cites Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents.

Superplatforms Have to Attack AI Agents Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.501098Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c541b81-f09b-4a46-a46e-7c70374fa605 · outbound

This paper cites Agentic Information Retrieval.

Superplatforms Have to Attack AI Agents Agentic Information Retrieval

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.587824Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a8bb3688-7ea9-44aa-b4e6-28b1a804b001 · outbound

This paper cites Attacking Vision-Language Computer Agents via Pop-ups.

Superplatforms Have to Attack AI Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.645474Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4a4d5c10-e394-457b-b052-811a84c24ac0 · outbound

This paper cites QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models.

Superplatforms Have to Attack AI Agents QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.683682Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3320d65b-2632-434f-8553-443e9fc38ce6 · outbound

This paper cites Data poisoning attacks on multi-task relationship learning.

Superplatforms Have to Attack AI Agents Data poisoning attacks on multi-task relationship learning

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:42:39.444046Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation c2e7949e-aea6-492d-a261-4ff9f255506e · outbound

This paper cites an unresolved cited work.

Superplatforms Have to Attack AI Agents Unresolved cited work

Reference 2024

Resolution: parse uncertain; raw_fallback, observed 2026-08-07T14:42:41.487870Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Pith citing papers

Observation 4b9e5700-0258-42d3-85b0-7291d12574ac · inbound

Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineering cites this paper.

Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineering Superplatforms Have to Attack AI Agents

Reference 85

Resolution: verified exact; arxiv_id, observed 2026-05-11T06:20:59.359921Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.