A vulnerability in Anthropic’s Claude for Chrome browser extension could allow a malicious extension to simulate user clicks and trigger predefined AI actions. This flaw could enable the malicious extension to abuse Claude’s access to connected services like Gmail, Google Docs, and Salesforce. This ‘PromptFiction’ vulnerability, now fixed, highlighted a new vector for AI agent manipulation.