Related articlesPrompt injection and task hijackingOne of the five web-safety domains covered by the SafeWebWorld benchmark.Web World Models Can Predict Plausibly Without Being Safe Enough, Preprint Argues