Skip to content
← All scenarios
Attack → Patch web-agentindirect-injectionbounded-navigationlink-walk

Build the Memory Heist, then defeat it

Build a cloaking site that makes a web agent spell its memory into your logs one link at a time, then harden the agent by killing the crawl.

Prefer to read first? The Memory Heist: How a Coffee Shop Made Claude Confess walks through the same attack, step by step.