Browser agents face untrusted content on every page. A reported 1% attack success rate for Opus 4.5 and the Chrome beta show current robustness and remaining risk when giving agents web actions.
Terms in this piece · Glossary
prompt injection — An attack that hides instructions in content an AI will read — a webpage, email, or document — tricking it into following the attacker instead of the user.
