@article{willtheusereverknowcovertindirectprompti,
  title = {Will the User Ever Know? Covert Indirect Prompt Injection on Tool-Using LLM Agents},
  author = {Yunseok Lee and Yunji Kim and Woojin Lee},
  year = {2026},
  eprint = {2608.30362},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2608.30362},
}