Meta Muse Prompt Injection: How a Malicious Web Page Can Hijack an AI Agent
Your AI agent doesn't have to be hacked if it can be convinced to hack itself.
That is the fundamental danger of indirect prompt injection.
A traditional application generally treats a webpage as data