Agentic browsers like ChatGPT Atlas and Comet automate the web - but prompt injection may never be solved. What they do …