@misc{indiciae126971f94a25,
  title = {Labels Are Not Endpoints: Treatment Leakage and Construct Validity in MCP Agent Security Evaluation},
  author = {Rana Muhammad Ahmed and Sabahat Abbas},
  year = {2026},
  url = {https://arxiv.org/abs/2608.12880},
  note = {Source identifier: 2608.12880}
}