But that still doesn't answer the question of why Claude passes the info to web sites. What if it finds your banking information in a personal file and uses it to achieve its goal, which is not different technically?
Haven't read the details, but is this because of prompt injection when CC reads the site?
Haven't read the details, but is this because of prompt injection when CC reads the site?