@misc{indiciae357c06a40006,
  title = {Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection},
  author = {Rahul Deivasigamani and Sayeda Faatin Alvi and Derqui Andrea and Kaushal Punjabi and Stjepan Picek},
  year = {2026},
  url = {https://arxiv.org/abs/2608.08939},
  note = {Source identifier: 2608.08939}
}