@misc{indiciae4bee631ea564,
  title = {Readable Before Actionable: Causal Tracing of Indirect Prompt Injection},
  author = {Zhe Yu and Wenpeng Xing and Xingxing Yang and Meng Han},
  year = {2026},
  url = {https://arxiv.org/abs/2610.05295},
  note = {Source identifier: 2610.05295}
}