@misc{indiciae8400cfa3cd26, title = {Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions}, author = {Shenao Wang and Xinyi Hou and Zhao Liu and Yanjie Zhao and Xiao Cheng and Quanchen Zou and Xiangzheng Zhang and Haoyu Wang}, year = {2026}, url = {https://arxiv.org/abs/2605.07135}, note = {Source identifier: 2605.07135} }