Agents Deep dive
A scan of 217 million web responses found few prompt-injection headers
The scan found 30 injection attempts among 7,959 sites with AI-targeted headers; in tests, models obeyed 7 of 9 times only when the user prompt gave the site authority. The more actionable risk is sites identifying AI clients and potentially serving them different content.
- WhatAI-targeted HTTP headers are rare: 30 of 7,959 sites sending AI-directed headers tried to give an agent orders.
- HowFetch tools differ: some pass headers into model context, while body-only tools drop them; tested Claude Code models obeyed only when users gave sites authority.
- Why it mattersEngineers should check what their agent’s fetch tools expose and whether sites can identify AI clients by user-agent.