Deep-Research Agents Can Be Poisoned via User-Generated Content
arxiv.org