Grok bot makes its first real purchase, spots hidden prompt injection at checkout and ignores it
msg · x · 2026-10-27
A user let Grok bot buy something for the first time: it signed up for Spotify's $1 trial, then cancelled immediately to avoid the $12.99 charge. It even detected hidden text on the checkout page instructing AI agents to click an invisible button — and completely ignored the injection. It requested card details via a secure form, confirmed before charging, and by design never sees verification codes or payment methods. The whole flow took a few minutes, hailed as one of the most impressive agentic commerce demos yet.
More from coding & agent
- Marketo MCP Server ships tools to list, clone and approve Marketo forms — modelcontextprotocol · 2026-10-27
- SuperDocs rebrands as Typebar with AI editing and 38 MCP tools — modelcontextprotocol · 2026-10-27
- Design Is Becoming Game Dev: Build Your Own Tools With AI as the Executor — hewarsaber · 2026-10-27
- Dev turns DJI Mavic into local AI security drone built with Opus 5.5 — alexcovo_eth · 2026-10-27
- Microsoft Research: ForkPilot cuts long-horizon agent compute by up to 59% — EliasEskin · 2026-10-27
- Cursor launches Agent SDK: agents as code with Markdown prompts and TypeScript tools — soleio · 2026-10-27