Mitigating the risk of prompt injections in browser use
Nov 24, 2025
Summary
This post details significant advancements in mitigating prompt injection risks for AI agents, specifically within browser-based contexts. It introduces Claude Opus 4.5's improved robustness, new safeguards implemented for the Claude for Chrome extension, and outlines the technical approaches: reinforcement learning for direct model resistance, improved classifiers for scanning untrusted content, and scaled expert human red teaming. The post quantifies progress with a 1% attack success rate and highlights the ongoing nature of this security challenge.
More from the AI Code Generation and Software Engineering Agents trail
- Using Claude Science to produce the first complete map of the sky in UV light
- Project Swap: What happens when agents trade for us?
- Automated researchers can reliably mitigate alignment failures
- How Claude is accelerating protein design and analytical chemistry
- Patterns and problems in multiagent systems