Can an AI Agent Exfiltrate Data Through a Markdown Image or URL?
Yes. If the client fetches images or links in the agent's output on its own, data in the URL leaves the session. Check how output is rendered.
Research topic
markdown injection
Research on markdown injection: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.