Author

Zhuoxin Zhan

View on Semantic Scholar

1 paper indexed here

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Preprint Aug 2026

StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection

This paper introduces multi-step indirect prompt injection, a new attack class against CUAs in which the adversarial goal is decomposed into multiple innocuous-looking sub-steps and distributed across a chain of pages referenced along the agent's navigation path.

Zhuoxin Zhan, Akbar Rafiey, A. Ma et al. · 1 citation