StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection
DGX agentarXiv:2608.06477v1 Announce Type: cross Abstract: Computer-use agents (CUAs) face a growing threat from indirect prompt injection, where adversarial instructions are planted in the environment such as