TY  - RPRT
TI  - When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agents
AU  - Yanhang Li
AU  - Zhichao Fan
AU  - Zexin Zhuang
PY  - 2026
UR  - https://arxiv.org/abs/2606.22864
ID  - 2606.22864
ER  -