Comet AI browser can get prompt injected from any site, drain your bank account