Depending on how much access the AI agent has, there are worse things to inject it with than a link.