% AwesomeCUA: {"catalog_id": "arxiv:2511.20597", "catalog_review_status": "curated", "catalog_scope": "core", "identifiers": {"arxiv": "2511.20597"}}
@misc{arxiv_2511_20597,
  title = {{BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents}},
  author = {{Kaiyuan Zhang} and {Mark Tenenholtz} and {Kyle Polley} and {Jerry Ma} and {Denis Yarats} and {Ninghui Li}},
  year = {2025},
  eprint = {2511.20597v2},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2511.20597v2},
  note = {First published: 2025-11-25; Recorded arXiv version: v2; Recorded version updated: 2026-08-12T00:08:22Z.}
}