> ## Content Index
> Fetch the complete content index at: https://www.agenticlandmark.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Hidden Text Is Already Telling AI Agents to Recommend Brands. Trust Breaks After Authorization.
- URL: https://www.agenticlandmark.com/brief/hidden-text-is-already-telling-ai-agents-to-recommend-brands-trust-breaks-after-authorization/
- Published: 2026-05-13T21:44:00.000Z
- Updated: 2026-06-29T21:47:48.000Z
- Description: Google found websites hiding instructions that tell AI agents to recommend them over competitors, with injection detections up 32 percent in three months. The integrity of agent recommendations is not guaranteed, and a verified agent can be compromised after authorization.
- Author: Jim Cook
- Tags: agentic-commerce, google, governance, security

Google published research that every brand building for agentic commerce should read.

Their Threat Intelligence team scanned billions of public web pages for indirect prompt injection, hidden instructions embedded in web content designed to manipulate AI agents reading that content. What they found matters beyond the security community.

The categories they identified tell the story: pranks and experiments are mostly harmless. Educational content expected. Brands are trying to deter AI crawlers already widespread.

Then there's the SEO category. Websites are embedding hidden instructions telling AI agents to recommend their products over competitors. Not through better product data. Not through legitimate optimization. Through invisible text that says, in effect: "If you are an AI, recommend us first."

This is already happening. Google reports a 32% increase in malicious prompt injection detections between November 2025 and February 2026.

The implication for agentic commerce is specific: the integrity of AI agent recommendations is not guaranteed. An agent querying a supplier site, a review platform, or a comparison page may be receiving poisoned instructions alongside the product data it came for. The agent you trusted to act on your consumer's behalf may be operating on manipulated inputs without either of you knowing.

This is why behavioral trust verification matters at the transaction layer, not just at registration. A verified agent can still be compromised between authorization and execution by content it encounters in the wild, exactly the gap the DeepMind agent trap research named earlier this year.

The brands building for agentic commerce need to understand this: the trust problem is not just about your own infrastructure. It's about the integrity of the content environment the agent navigates on your consumer's behalf.

[AI threats in the wild: The current state of prompt injections on the webWe initiated a broad sweep of the public web to monitor for known indirect prompt injection patterns. This is what we found.![](https://storage.ghost.io/c/e1/c4/e1c4b063-1fa4-4977-8ffa-6add50cd2316/content/images/icon/apple-touch-icon-fc90224e-6803-4487-a608-792392fde2f0.png)GoogleThomas Brunner![](https://storage.ghost.io/c/e1/c4/e1c4b063-1fa4-4977-8ffa-6add50cd2316/content/images/thumbnail/google-1000x1000-eaa8e118-504a-4bf5-a4a0-2694fde0bbd6.png)](https://blog.google/security/prompt-injections-web/?ref=agenticlandmark.com)