Why it matters
Report on BioShocking, an attack pattern that steers AI browsers or assistants into copying user credentials and sending them to an attacker. It is relevant because browser agents sit close to sensitive pages, form fields, sessions, and user identity, making action boundaries and sensitive-data handling critical.
My takeaway: Browser agents need explicit protections around credentials, form fields, session data, and outbound sharing. A playful or indirect prompt can still become an exfiltration path if the agent can read and act.