AI agents with browser automation capabilities are vulnerable to indirect prompt injection attacks, where malicious instructions hidden in web pages can override the agent's original intent. An attacker can embed invisible text (like black text on black background) instructing the agent to ignore preferences, overpay for items,

10m watch time

Sort: