Prompt-Forcing: Invisible Script-Injected Prompts to Browser AI Agent

Ibrahim Saud@tektrix

•updated Sep 17, 2026•4•0•5

Detects instances where browser extensions interact with specific AI-driven websites (Gemini, Perplexity, Claude) in a manner that bypasses user input or interacts with hidden DOM elements. This pattern is indicative of malicious browser extensions injecting scripts or manipulating content in the background without explicit user authorization, potentially for data exfiltration or automated session interaction.