Prompt injection via hidden page content

ClickFix operators moved the payload into text only the summarizer can see

Forcepoint's X-Labs found short-lived ClickFix domains carrying white-on-white characters and zero-width spaces, which puts the trust boundary for any agent you point at the open web inside your own extraction code.