Article
X's new terms put you on the hook for its AI agents
RuntimeWire (Ryan Merket) · runtimewire.com
A news report on what X's 9 October terms change for anyone letting an agent act through their account.
The question it answers
Read with it
- The clearest explanation of when an agent can be tricked into leaking your data, and the one combination to avoid. simonwillison.net Article The lethal trifecta for AI agents: private data, untrusted content, and external communication Simon Willison
- A worked demonstration of a hidden Reddit comment steering an AI browser into a signed-in email account. brave.com Article Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet Brave (Artem Chaikin and Shivan Kaul Sahib)
- Practical advice such as a separate browser profile for agent work, plus which sites Claude will not open. support.claude.com Guide Use Claude in Chrome safely Claude Help Center
- What Claude in Chrome can do on a page, why it now acts without approving every step, and how its checks are tested. claude.com Article Claude in Chrome is generally available Anthropic
- OpenAI's plain-language explainer of prompt injection, likened to phishing, and the layers it uses against it. openai.com Article Understanding prompt injections OpenAI
- Anthropic's research note on how it trains and screens a browsing agent against hidden instructions. anthropic.com Article Mitigating the risk of prompt injections in browser use Anthropic
eChai Partner Brands
The partnership →
