— Simon WillisonI strongly expect that the entire concept of an agentic browser extension is fatally flawed and cannot be built safely.
Replicated under Fair Use from Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet by Simon Willison.