Grok Bot now auto-detects and blocks prompt injection hidden in web pages

heypearlai · x · 2026-11-12

Grok Bot automatically detects and blocks prompt injection attacks hidden inside web pages: when a site tries to sneak commands into the chat (like telling the AI to ignore your request), it surfaces a warning and refuses to follow them while still answering your actual question. The screenshot shows it answering a return-policy question, then flagging "the page had hidden instructions for AI agents, and I didn't follow them."

The author calls prompt injection the #1 vulnerability for web-browsing AI agents, and shipping the defense as a default, automatic behavior a major security upgrade.

Related event: Grok Bot now detects and blocks hidden prompt injection attacks(2 posts)→

Original post →

More from Models

Models channel →