StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection

Zhuoxin Zhan, Akbar Rafiey, Avery Ma +2

Computer-use agents (CUAs) face a growing threat from indirect prompt injection, where adversarial instructions are planted in the environment such as web pages. In this paper, we…