{
 "generated": "2026-11-01",
 "node": {
  "id": "event:perplexity-comet-prompt-injection",
  "type": "Event",
  "name": "Perplexity Comet 浏览器注入（两轮）",
  "slug": "perplexity-comet-prompt-injection",
  "kind": "incident",
  "kind_zh": "安全事故 / 漏洞披露",
  "summary": "Brave 披露 Perplexity Comet 浏览器的提示词注入问题：网页内容直接喂给 LLM、未做指令与数据隔离，可窃取凭据；第二轮发现连截图 OCR 通道也能被隐形文字攻击。",
  "evidence": [
   {
    "kind": "own",
    "url": "https://xiaopingfeng.com/landscape/agent-security/#player-comet-injection",
    "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」的卡片「Perplexity Comet 浏览器注入（两轮）」：网页内容直接喂给LLM未做指令/数据隔离，可窃取凭据"
   }
  ],
  "entry": "agent",
  "by": "landscape-facts",
  "at": "2026-11-01T11:19:35Z",
  "landscape": [
   {
    "map": "agent-security",
    "map_title": "Agent 安全攻击面",
    "card": "player-comet-injection",
    "title": "Perplexity Comet 浏览器注入（两轮）",
    "layer": "提示词 注入",
    "layer_id": "layer:agent-security--2",
    "role": "primary"
   }
  ],
  "landscape_maps": [
   "agent-security"
  ],
  "landscape_n": 1,
  "degree": 0
 },
 "page": "https://xiaopingfeng.com/graph/e/event/perplexity-comet-prompt-injection/",
 "out": [
  {
   "type": "involves",
   "sentence": "Perplexity Comet 浏览器注入涉及Perplexity",
   "direction": "out",
   "id": "org:perplexity",
   "name": "Perplexity",
   "role": "vendor",
   "note": "受影响产品为 Perplexity 的 Comet 浏览器",
   "status": "agent",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」的卡片「Perplexity Comet 浏览器注入（两轮）」：Perplexity Comet 浏览器注入（两轮）",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-comet-injection"
    }
   ]
  },
  {
   "type": "involves",
   "sentence": "Perplexity Comet 浏览器注入涉及Brave",
   "direction": "out",
   "id": "org:brave",
   "name": "Brave",
   "role": "discloser",
   "note": "Brave 披露两轮注入问题",
   "status": "agent",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」的卡片「Perplexity Comet 浏览器注入（两轮）」：真实事故 · Brave披露",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-comet-injection"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Perplexity Comet 浏览器注入出现在 Landscape 的「提示词注入」",
   "direction": "out",
   "id": "layer:agent-security--2",
   "name": "提示词注入",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「Perplexity Comet 浏览器注入（两轮）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-comet-injection"
    }
   ]
  }
 ],
 "in": []
}