Task Injection

An attack against a Computer-Use Agent in which a malicious step is disguised as a legitimate part of the user's task, tricking the agent into carrying it out as though it were an intended instruction rather than an attacker's payload.