Prismata tackles cross-site prompt injection attacks in AI web agents

Researchers have identified and named cross-site prompt injection (CSPI)—a vulnerability where malicious content in web pages can hijack AI agents' instructions. Prismata proposes containment techniques to prevent agents from following attacker-planted prompts. As more devs build autonomous agents that browse the web, this security model matters.