Attack → Patch web-agentindirect-injectionbounded-navigationlink-walk
Build the Memory Heist, then defeat it
Build a cloaking site that makes a web agent spell its memory into your logs one link at a time, then harden the agent by killing the crawl.
Prefer to read first? The Memory Heist: How a Coffee Shop Made Claude Confess walks through the same attack, step by step.