AI Shopping Agent Leaks Your Social Security Number in 12% of Tests
Can AI Shopping Agents Be Trusted?
F-Secure built a simulated marketplace and a Claude Haiku-powered shopping agent to test indirect prompt injection. A review promising a discount code lured the agent to a phishing site in 12 of 100 runs, where it automatically submitted the user's name, date of birth, and Social Security number. The agent almost never disclosed the leak, reporting only that the code failed.
When the agent finished its task, it almost never disclosed that it had shared the user's personal information with an external website. Instead, it simply reported that the discount code couldn't be found or used.