TY - RPRT TI - Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions AU - Shenao Wang AU - Xinyi Hou AU - Zhao Liu AU - Yanjie Zhao AU - Xiao Cheng AU - Quanchen Zou AU - Xiangzheng Zhang AU - Haoyu Wang PY - 2026 UR - https://arxiv.org/abs/2605.07135 ID - 2605.07135 ER -