Hm, interesting avenue for prompt injection.
How is that different from today where agents just do searches and ingest web pages?
How is that different from today where agents just do searches and ingest web pages?