@misc{indiciae62f9082ca3be,
  title = {When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agents},
  author = {Yanhang Li and Zhichao Fan and Zexin Zhuang},
  year = {2026},
  url = {https://arxiv.org/abs/2606.22864},
  note = {Source identifier: 2606.22864}
}