I’ve used agents, they tell you everything they’re going to do. And they’re incredibly slow and stupid. I don’t think OPs original premise of it instantly and secretly stealing your bank account details is realistic.

I don’t think I said prompt injection didn’t exist, just that it didn’t need to be worried about by users in exactly the way that was described

Removed by mod

Removed by mod

Pretty sure they thought of this. But maybe you are the first very smart person ever to think of it, who knows