“The 'agent mode' in AI browsers like Perplexity Comet and OpenAI Atlas is vulnerable to prompt injection attacks, where a malicious website can embed hidden instructions to take over the agent.”