News
In a test, Claude Code agents signed a fictitious user up to an API on the instruction of an llms.txt file.
The file asked to sign the user up and not to tell him.
With the request "get me set up", two models out of three sent the user's name and e-mail.
Out of 62,751 real llms.txt files, only 2 attempt a prompt injection.
Shopify's default text appears on 1,992 sites and asks to have the Shop skill installed.