{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T10:47:10Z","timestamp":1779101230246,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":88,"publisher":"ACM","funder":[{"name":"National Science Foundation","award":["CNS-2154930, CNS-2229427"],"award-info":[{"award-number":["CNS-2154930, CNS-2229427"]}]},{"name":"Army Research Office","award":["W911NF-24-1-0155"],"award-info":[{"award-number":["W911NF-24-1-0155"]}]},{"name":"Office of Naval Research","award":["N00014-24-1-2663"],"award-info":[{"award-number":["N00014-24-1-2663"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,28]]},"DOI":"10.1145\/3730567.3732912","type":"proceedings-article","created":{"date-parts":[[2025,10,15]],"date-time":"2025-10-15T17:39:24Z","timestamp":1760549964000},"page":"150-170","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["An In-Depth Investigation of Data Collection in LLM App Ecosystems"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9155-3484","authenticated-orcid":false,"given":"Yuhao","family":"Wu","sequence":"first","affiliation":[{"name":"Washington University in St. Louis, St. Louis, MO, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-3489-0040","authenticated-orcid":false,"given":"Evin","family":"Jaff","sequence":"additional","affiliation":[{"name":"Washington University in St. Louis, St. Louis, MO, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0375-7283","authenticated-orcid":false,"given":"Ke","family":"Yang","sequence":"additional","affiliation":[{"name":"Washington University in St. Louis, St. Louis, MO, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0670-2161","authenticated-orcid":false,"given":"Ning","family":"Zhang","sequence":"additional","affiliation":[{"name":"Washington University in St. Louis, St. Louis, MO, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1416-4113","authenticated-orcid":false,"given":"Umar","family":"Iqbal","sequence":"additional","affiliation":[{"name":"Washington University in St. Louis, St. Louis, MO, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,10,15]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2011. Mining of Massive Datasets. http:\/\/infolab.stanford.edu\/~ullman\/mmds\/ch3.pdf. http:\/\/infolab.stanford.edu\/~ullman\/mmds\/ch3.pdf"},{"key":"e_1_3_2_1_2_1","unstructured":"2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj\/eng. https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj\/eng"},{"key":"e_1_3_2_1_3_1","unstructured":"2018. California Consumer Privacy Act. https:\/\/leginfo.legislature.ca.gov\/faces\/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5. https:\/\/leginfo.legislature.ca.gov\/faces\/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5"},{"key":"e_1_3_2_1_4_1","unstructured":"2023. ChatGPT Plugins: Data Exfiltration via Images & Cross Plugin Request Forgery. https:\/\/embracethered.com\/blog\/posts\/2023\/chatgpt-webpilot-dataexfil-via-markdown-injection\/. https:\/\/embracethered.com\/blog\/posts\/2023\/chatgpt-webpilot-data-exfil-via-markdown-injection\/"},{"key":"e_1_3_2_1_5_1","unstructured":"2023. Create custom versions of ChatGPT with GPTs and Zapier. https:\/\/zapier.com\/blog\/gpt-assistant\/. https:\/\/zapier.com\/blog\/gpt-assistant\/"},{"key":"e_1_3_2_1_6_1","unstructured":"2023. GPTs Example Action:''OpenAI Profile'' failing on Chat Completion endpoint. https:\/\/community.openai.com\/t\/gpts-example-action-openai-profilefailing-on-chat-completion-endpoint\/495052. https:\/\/community.openai.com\/t\/gpts-example-action-openai-prof ile-failing-on-chat-completionendpoint\/495052"},{"key":"e_1_3_2_1_7_1","unstructured":"2023. LinkReader - ChatGPT. https:\/\/chatgpt.com\/g\/g-Hdq2AC858. https:\/\/chatgpt.com\/g\/g-Hdq2AC858"},{"key":"e_1_3_2_1_8_1","unstructured":"2024. Adintelli. https:\/\/adintelli.ai\/. https:\/\/adintelli.ai\/"},{"key":"e_1_3_2_1_9_1","unstructured":"2024. AI Revenue Ops. https:\/\/www.justpaid.io\/. https:\/\/www.justpaid.io\/"},{"key":"e_1_3_2_1_10_1","unstructured":"2024. Create custom versions of ChatGPT with GPTs and Zapier. https:\/\/gapier.com\/. https:\/\/gapier.com\/"},{"key":"e_1_3_2_1_11_1","unstructured":"2024. Google Gemini Custom GPT. https:\/\/gptstore.ai\/gpts\/CB7_BxAKsf-google-gemini-ai. https:\/\/gptstore.ai\/gpts\/CB7_BxAKsf-goo-gle-gemini-ai"},{"key":"e_1_3_2_1_12_1","unstructured":"2024. Introducing the GPT Store. https:\/\/openai.com\/blog\/introducing-the-gptstore."},{"key":"e_1_3_2_1_13_1","unstructured":"2024. Provide information for Google Play's Data safety section. https:\/\/support.google.com\/googleplay\/android-developer\/answer\/10787469?hl=en."},{"key":"e_1_3_2_1_14_1","unstructured":"2024. WebPilot. https:\/\/www.webpilot.ai\/home?lang=en-US. https:\/\/www.webpilot.ai\/home?lang=en-US"},{"key":"e_1_3_2_1_15_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Andow Benjamin","year":"2020","unstructured":"Benjamin Andow, Samin Yaseer Mahmud, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, and Serge Egelman. 2020. Actions Speak Louder thanWords: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck. In 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, 985--1002. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/andow"},{"key":"e_1_3_2_1_16_1","volume-title":"Annual Conference on Neural Information Processing Systems (NeurIPS). NeurIPS.","author":"Brown Tom B","year":"2020","unstructured":"Tom B Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah, Jared Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, Sandhini Agarwal, Ariel Herbert-Voss, Gretchen Krueger, Tom Henighan, Rewon Child, Aditya Ramesh, Daniel M Ziegler, Jeffrey Wu, Clemens Winter, Christopher Hesse, Mark Chen, Eric Sigler, Mateusz Litwin, Scott Gray, Benjamin Chess, Jack Clark, Christopher Berner, Sam McCandlish, Alec Radford, Ilya Sutskever, and Dario Amodei. 2020. Language Models are Few-Shot Learners. In Annual Conference on Neural Information Processing Systems (NeurIPS). NeurIPS."},{"key":"e_1_3_2_1_17_1","unstructured":"Matt Burgess. 2023. ChatGPT Has a Plug-In Problem. https:\/\/www.wired.com\/story\/chatgpt-plugins-security-privacy-risk\/."},{"key":"e_1_3_2_1_18_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Carlini Nicholas","year":"2021","unstructured":"Nicholas Carlini, Florian Tramer, Eric Wallace, Matthew Jagielski, Ariel Herbert-Voss, Katherine Lee, Adam Roberts, Tom Brown, Dawn Song, Ulfar Erlingsson, et al. 2021. Extracting training data from large language models. In 30th USENIX Security Symposium (USENIX Security 21). 2633--2650."},{"key":"e_1_3_2_1_19_1","unstructured":"Software Freedom Conservancy. 2024. Selenium."},{"key":"e_1_3_2_1_20_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Cui Hao","year":"2023","unstructured":"Hao Cui, Rahmadi Trimananda, Athina Markopoulou, and Scott Jordan. 2023. PoliGraph: Automated Privacy Policy Analysis using Knowledge Graphs. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 1037--1054. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/cui"},{"key":"e_1_3_2_1_21_1","unstructured":"Tati Digital. 2024. Document Wizard. https:\/\/document-wizard.com\/."},{"key":"e_1_3_2_1_22_1","unstructured":"Tati Digital. 2024. Document Wizard - Privacy Policy. https:\/\/documentwizard.com\/privacy-policy."},{"key":"e_1_3_2_1_23_1","unstructured":"Marcus S Elola. 2024. ChatGPT - Mortgage Calculator. https:\/\/chatgpt.com\/g\/g-NIGpQi8Rc."},{"key":"e_1_3_2_1_24_1","volume-title":"Online Tracking: A 1-million-site Measurement and Analysis.","author":"Englehardt Steven","year":"2023","unstructured":"Steven Englehardt and Arvind Narayanan. 2023. Online Tracking: A 1-million-site Measurement and Analysis. (2023)."},{"key":"e_1_3_2_1_25_1","unstructured":"Bubeck et. al. 2023. Sparks of Artificial General Intelligence: Early experiments with GPT-4. https:\/\/arxiv.org\/abs\/2303.12712. (2023)."},{"key":"e_1_3_2_1_26_1","unstructured":"OpenAI Forum. 2023. Is there a definitive list of all GPTs on the store?"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.acl-long.295"},{"key":"e_1_3_2_1_28_1","volume-title":"Euclidean embedding of co-occurrence data. Advances in neural information processing systems 17","author":"Globerson Amir","year":"2004","unstructured":"Amir Globerson, Gal Chechik, Fernando Pereira, and Naftali Tishby. 2004. Euclidean embedding of co-occurrence data. Advances in neural information processing systems 17 (2004)."},{"key":"e_1_3_2_1_29_1","unstructured":"Google. [n.d.]. Google Privacy Sandbox. https:\/\/privacysandbox.com."},{"key":"e_1_3_2_1_30_1","unstructured":"Google. 2018. Improve extension security. https:\/\/developer.chrome.com\/docs\/extensions\/develop\/migrate\/improve-security."},{"key":"e_1_3_2_1_31_1","unstructured":"Google. 2023. Google Gemini. https:\/\/gemini.google.com\/."},{"key":"e_1_3_2_1_32_1","unstructured":"Google. 2023. Trustworthy chrome extensions. https:\/\/blog.chromium.org\/2018\/10\/trustworthy-chrome-extensions-by-default.html."},{"key":"e_1_3_2_1_33_1","volume-title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. arXiv preprint arXiv:2302.12173","author":"Greshake Kai","year":"2023","unstructured":"Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz, and Mario Fritz. 2023. Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. arXiv preprint arXiv:2302.12173 (2023)."},{"key":"e_1_3_2_1_34_1","unstructured":"IETF OAuth Working Group. 2023. The OAuth 2.1 Authorization Framework. https:\/\/www.ietf.org\/archive\/id\/draft-ietf-oauth-v2--1-09.html."},{"key":"e_1_3_2_1_35_1","volume-title":"Polisis: Automated Analysis and Presentation of Privacy Policies Using Deep Learning. arXiv:1802.02561 [cs.CL]","author":"Harkous Hamza","year":"2018","unstructured":"Hamza Harkous, Kassem Fawaz, R\u00e9mi Lebret, Florian Schaub, Kang G. Shin, and Karl Aberer. 2018. Polisis: Automated Analysis and Presentation of Privacy Policies Using Deep Learning. arXiv:1802.02561 [cs.CL]"},{"key":"e_1_3_2_1_36_1","unstructured":"Apple Inc. 2024. WebKit Tracking Prevention Policy. https:\/\/webkit.org\/trackingprevention-policy\/."},{"key":"e_1_3_2_1_37_1","volume-title":"ACM Internet Measurement Conference (IMC).","author":"Iqbal Umar","year":"2023","unstructured":"Umar Iqbal, Pouneh Nikkhah Bahrami, Rahmadi Trimananda, Hao Cui, Alexander Gamero-Garrido, Daniel Dubois, David Choffnes, Athina Markopoulou, Franziska Roesner, and Zubair Shafiq. 2023. Tracking, Profiling, and Ad Targeting in the Alexa Echo Smart Speaker Ecosystem. In ACM Internet Measurement Conference (IMC)."},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings of the 2024 AAAI\/ACM Conference on AI, Ethics, and Society (AIES).","author":"Iqbal Umar","year":"2024","unstructured":"Umar Iqbal, Tadayoshi Kohno, and Franziska Roesner. 2024. LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins. In Proceedings of the 2024 AAAI\/ACM Conference on AI, Ethics, and Society (AIES)."},{"key":"e_1_3_2_1_39_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Iqbal Umar","year":"2022","unstructured":"Umar Iqbal, CharlieWolfe, Charles Nguyen, Steven Englehardt, and Zubair Shafiq. 2022. Khaleesi: Breaker of advertising and tracking request chains. In 31st USENIX Security Symposium (USENIX Security 22). 2911--2928."},{"key":"e_1_3_2_1_40_1","unstructured":"Muhammad Junaid. 2024. Cal AI. https:\/\/caxgpt.vercel.app."},{"key":"e_1_3_2_1_41_1","unstructured":"Harsha Vardhan Khurdula. 2024. KhurdhulaHarshavardhan X-ray Analysis Service. https:\/\/khurdhulaharshavardhan-jhvvqrbzyq-uc.a.run.app."},{"key":"e_1_3_2_1_42_1","unstructured":"Harsha Vardhan Khurdula. 2024. Pneumonia Symptom Inquiry and X-Ray Analysis GPT. https:\/\/chatgpt.com\/g\/g-OMMTGHdSv-pneumonia-symptom-inquiryand-x-ray-analysis-gpt."},{"key":"e_1_3_2_1_43_1","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Lerner Ada","year":"2016","unstructured":"Ada Lerner, Anna Kornfeld Simpson, Tadayoshi Kohno, and Franziska Roesner. 2016. Internet jones and the raiders of the lost trackers: An archaeological study of web tracking from 1996 to 2016. In 25th USENIX Security Symposium (USENIX Security 16)."},{"key":"e_1_3_2_1_44_1","volume-title":"Xiang Yue, and Wenhu Chen.","author":"Li Tianle","year":"2024","unstructured":"Tianle Li, Ge Zhang, Quy Duc Do, Xiang Yue, and Wenhu Chen. 2024. Long-context LLMs Struggle with Long In-context Learning. arXiv preprint arXiv:2404.02060 (2024)."},{"key":"e_1_3_2_1_45_1","volume-title":"Privacy Enhancing Technologies Symposium (PETS).","author":"Liu Zengrui","year":"2024","unstructured":"Zengrui Liu, Umar Iqbal, and Nitesh Saxena. 2024. Opted Out, Yet Tracked: Are Regulations Enough to Protect Your Privacy?. In Privacy Enhancing Technologies Symposium (PETS)."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179300"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00076"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354198"},{"key":"e_1_3_2_1_49_1","volume-title":"PURL: Safe and Effective Sanitization of Link Decoration. In USENIX Security Symposium.","author":"Munir Shaoor","year":"2024","unstructured":"Shaoor Munir, Patrick Lee, Umar Iqbal, Zubair Shafiq, and Sandra Siby. 2024. PURL: Safe and Effective Sanitization of Link Decoration. In USENIX Security Symposium."},{"key":"e_1_3_2_1_50_1","unstructured":"NLTK. [n.d.]. NLTK Tokenization. https:\/\/www.nltk.org\/api\/nltk.tokenize.html."},{"key":"e_1_3_2_1_51_1","volume-title":"Sheng Zhang, Dean Carignan, Richard Edgar, Nicolo Fusi, Nicholas King, Jonathan Larson, Yuanzhi Li, Weishung Liu, et al.","author":"Nori Harsha","year":"2023","unstructured":"Harsha Nori, Yin Tat Lee, Sheng Zhang, Dean Carignan, Richard Edgar, Nicolo Fusi, Nicholas King, Jonathan Larson, Yuanzhi Li, Weishung Liu, et al. 2023. Can generalist foundation models outcompete special-purpose tuning? case study in medicine. arXiv preprint arXiv:2311.16452 (2023)."},{"key":"e_1_3_2_1_52_1","unstructured":"OpenAI. 2022. Introducing ChatGPT. https:\/\/openai.com\/blog\/chatgpt."},{"key":"e_1_3_2_1_53_1","unstructured":"OpenAI. 2023. Actions in production. https:\/\/platform.openai.com\/docs\/actions\/production."},{"key":"e_1_3_2_1_54_1","unstructured":"OpenAI. 2023. Can I charge people money for my plugin? https:\/\/community.openai.com\/t\/exploring-ways-to-monetize-free-chatgpt-plugins\/331899."},{"key":"e_1_3_2_1_55_1","unstructured":"OpenAI. 2023. Creating a GPT - OpenAI. https:\/\/help.openai.com\/en\/articles\/8554397-creating-a-gpt"},{"key":"e_1_3_2_1_56_1","unstructured":"OpenAI. 2023. Data Controls FAQ. https:\/\/help.openai.com\/en\/articles\/7730893-data-controls-faq."},{"key":"e_1_3_2_1_57_1","unstructured":"OpenAI. 2023. Getting started. https:\/\/help.openai.com\/en\/articles\/8554402-gpts-data-privacy-faqs."},{"key":"e_1_3_2_1_58_1","unstructured":"OpenAI. 2023. Plugins and Actions Terms. https:\/\/openai.com\/policies\/pluginterms\/."},{"key":"e_1_3_2_1_59_1","unstructured":"OpenAI. 2024. Getting Started with Actions. https:\/\/platform.openai.com\/docs\/actions\/getting-started. Accessed: 2024-06-07."},{"key":"e_1_3_2_1_60_1","unstructured":"OpenAI. 2024. GPT Actions. https:\/\/platform.openai.com\/docs\/actions\/introduction."},{"key":"e_1_3_2_1_61_1","unstructured":"OpenAI. 2024. GPT Editor. https:\/\/chatgpt.com\/gpts\/editor."},{"key":"e_1_3_2_1_62_1","unstructured":"OpenAI. 2024. GPTs. https:\/\/chatgpt.com\/gpts."},{"key":"e_1_3_2_1_63_1","unstructured":"OpenAI. 2024. Introducing GPTs. https:\/\/openai.com\/blog\/introducing-gpts."},{"key":"e_1_3_2_1_64_1","unstructured":"OpenAI. 2024. Memory and new controls for ChatGPT. https:\/\/openai.com\/index\/memory-and-new-controls-for-chatgpt\/"},{"key":"e_1_3_2_1_65_1","unstructured":"OpenAI. 2024. Usage Policies. https:\/\/openai.com\/policies\/usage-policies."},{"key":"e_1_3_2_1_66_1","unstructured":"OpenAI. 2024. Usage Policies. https:\/\/openai.com\/policies\/usage-policies\/."},{"key":"e_1_3_2_1_67_1","volume-title":"The Web Conference (WWW).","author":"Papadopoulos Panagiotis","unstructured":"Panagiotis Papadopoulos, Nicolas Kourtellis, and Evangelos P. Markatos. 2019. Cookie Synchronization: Everything You Always Wanted to Know But Were Afraid to Ask. In The Web Conference (WWW)."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23353"},{"key":"e_1_3_2_1_69_1","unstructured":"Reddit. 2024. There are already 51 unofficial GPT stores being discovered."},{"key":"e_1_3_2_1_70_1","unstructured":"Johann Rehberger. 2023. Plugin Vulnerabilities: Visit a Website and Have Your Source Code Stolen. https:\/\/embracethered.com\/blog\/posts\/2023\/chatgpt-pluginvulns-chat-with-code\/. https:\/\/embracethered.com\/blog\/posts\/2023\/chatgptplugin-vulns-chat-with-code\/"},{"key":"e_1_3_2_1_71_1","volume-title":"Sentence-BERT: Sentence Embeddings using Siamese BERTNetworks. arXiv preprint arXiv:1908.10084","author":"Reimers N","year":"2019","unstructured":"N Reimers. 2019. Sentence-BERT: Sentence Embeddings using Siamese BERTNetworks. arXiv preprint arXiv:1908.10084 (2019)."},{"key":"e_1_3_2_1_72_1","unstructured":"Sapientor.net. 2024. ChatGPT - Knowledge Base GPT. https:\/\/chatgpt.com\/g\/grGJvqSptw."},{"key":"e_1_3_2_1_73_1","volume-title":"Correlation coefficients: appropriate use and interpretation. Anesthesia & analgesia 126, 5","author":"Schober Patrick","year":"2018","unstructured":"Patrick Schober, Christa Boer, and Lothar A Schwarte. 2018. Correlation coefficients: appropriate use and interpretation. Anesthesia & analgesia 126, 5 (2018), 1763--1768."},{"key":"e_1_3_2_1_74_1","unstructured":"Muhammad Junaid Shaukat. 2024. Cax TaskPal. https:\/\/chatgpt.com\/g\/gfC8sZoDCi-cax-taskpal."},{"key":"e_1_3_2_1_75_1","volume-title":"The Twelfth International Conference on Learning Representations. https:\/\/openreview.net\/pdf?id=kmn0BhQk7p\/","author":"Staab Robin","year":"2024","unstructured":"Robin Staab, Mark Vero, Mislav Balunovic, and Martin Vechev. 2024. Beyond Memorization: Violating Privacy via Inference with Large Language Models. In The Twelfth International Conference on Learning Representations. https:\/\/openreview.net\/pdf?id=kmn0BhQk7p\/"},{"key":"e_1_3_2_1_76_1","volume-title":"Gpt store mining and analysis. arXiv preprint arXiv:2405.10210","author":"Su Dongxun","year":"2024","unstructured":"Dongxun Su, Yanjie Zhao, Xinyi Hou, Shenao Wang, and Haoyu Wang. 2024. Gpt store mining and analysis. arXiv preprint arXiv:2405.10210 (2024)."},{"key":"e_1_3_2_1_77_1","unstructured":"Swagger Group. 2024. OpenAPI Spec 3.1.0."},{"key":"e_1_3_2_1_78_1","unstructured":"Zhaoxuan Tan and Meng Jiang. 2023. User Modeling in the Era of Large Language Models: Current Research and Future Directions. arXiv:2312.11518 [cs.CL]"},{"key":"e_1_3_2_1_79_1","unstructured":"TechCrunch. 2023. Google launches a smarter Bard. https:\/\/techcrunch.com\/2023\/05\/10\/google-launches-a-smarter-bard\/."},{"key":"e_1_3_2_1_80_1","volume-title":"Anastasia Shuba, and Athina Markopoulou.","author":"Trimananda Rahmadi","year":"2022","unstructured":"Rahmadi Trimananda, Hieu Le, Hao Cui, Janice Tran Ho, Anastasia Shuba, and Athina Markopoulou. 2022. {OVRseen}: Auditing network traffic and privacy policies in oculus {VR}. In 31st USENIX security symposium (USENIX security 22). 3789--3806."},{"key":"e_1_3_2_1_81_1","unstructured":"u\/AwkwardAsHell. 2023. This is scary! Posting stuff by itself. - Reddit. https:\/\/www.reddit.com\/r\/OpenAI\/comments\/146xl6u\/comment\/jqt6ezb\/."},{"key":"e_1_3_2_1_82_1","volume-title":"Proceedings on Privacy Enhancing Technologies","author":"Varmarken Janus","year":"2020","unstructured":"Janus Varmarken, Hieu Le, Anastasia Shuba, Athina Markopoulou, and Zubair Shafiq. 2020. The tv is smart and full of trackers: Measuring smart tv advertising and tracking. Proceedings on Privacy Enhancing Technologies (2020)."},{"key":"e_1_3_2_1_83_1","volume-title":"Denny Zhou, et al.","author":"Wei Jason","year":"2022","unstructured":"Jason Wei, Xuezhi Wang, Dale Schuurmans, Maarten Bosma, Fei Xia, Ed Chi, Quoc V Le, Denny Zhou, et al. 2022. Chain-of-thought prompting elicits reasoning in large language models. Advances in neural information processing systems 35 (2022), 24824--24837."},{"key":"e_1_3_2_1_84_1","volume-title":"Network and Distributed System Security Symposium (NDSS).","author":"Wu Yuhao","year":"2025","unstructured":"Yuhao Wu, Franziska Roesner, Tadayoshi Kohno, Ning Zhang, and Umar Iqbal. 2025. IsolateGPT: An execution isolation architecture for llm-based systems. In Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_2_1_85_1","volume-title":"Deployment and Security. In IEEE\/ACM International Conference on Automated Software Engineering.","author":"Yan Chuan","year":"2024","unstructured":"Chuan Yan, Ruomai Ren, Mark Huasong Meng, Liuhuo Wan, Tian Yang Ooi, and Guangdong Bai. 2024. Exploring ChatGPT App Ecosystem: Distribution, Deployment and Security. In IEEE\/ACM International Conference on Automated Software Engineering."},{"key":"e_1_3_2_1_86_1","volume-title":"A first look at gpt apps: Landscape and vulnerability. arXiv preprint arXiv:2402.15105","author":"Zhang Zejun","year":"2024","unstructured":"Zejun Zhang, Li Zhang, Xin Yuan, Anlan Zhang, Mengwei Xu, and Feng Qian. 2024. A first look at gpt apps: Landscape and vulnerability. arXiv preprint arXiv:2402.15105 (2024)."},{"key":"e_1_3_2_1_87_1","volume-title":"Attacks on Third-Party APIs of Large Language Models. In ICLR Workshop on Secure and Trustworthy Large Language Models.","author":"Zhao Wanru","year":"2024","unstructured":"Wanru Zhao, Vidit Khazanchi, Haodi Xing, Xuanli He, Qiongkai Xu, and Nicholas Donald Lane. 2024. Attacks on Third-Party APIs of Large Language Models. In ICLR Workshop on Secure and Trustworthy Large Language Models."},{"key":"e_1_3_2_1_88_1","volume-title":"Llm app store analysis: A vision and roadmap. arXiv preprint arXiv:2404.12737","author":"Zhao Yanjie","year":"2024","unstructured":"Yanjie Zhao, Xinyi Hou, Shenao Wang, and Haoyu Wang. 2024. Llm app store analysis: A vision and roadmap. arXiv preprint arXiv:2404.12737 (2024)."}],"event":{"name":"IMC '25:ACM Internet Measurement Conference","location":"Madison WI USA","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication","USENIX"]},"container-title":["Proceedings of the 2025 ACM Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3730567.3732912","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,15]],"date-time":"2025-10-15T17:39:52Z","timestamp":1760549992000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3730567.3732912"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,15]]},"references-count":88,"alternative-id":["10.1145\/3730567.3732912","10.1145\/3730567"],"URL":"https:\/\/doi.org\/10.1145\/3730567.3732912","relation":{},"subject":[],"published":{"date-parts":[[2025,10,15]]},"assertion":[{"value":"2025-10-15","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}