Fetches a domain's homepage and checks for content patterns that could constitute
prompt injection attacks against AI agents that visit and ingest the page. Signals
include hidden text, invisible divs, `<!-- AI: ignore -->` style comments, and
known injection patterns.
Use this tool when:
- You are vetting a domain before feeding its content into an LLM context.
- You want to assess the prompt injection risk of a URL before browsing it with an agent.
- You are auditing a set of domains for adversarial AI content.
Do NOT use this tool when:
- You want tracker surveillance data — use `get_domain` instead.
- You want AI training opt-out signals — use `intel_optout` instead.
- You want the agent surface (MCP/OpenAPI) — use `intel_agent` instead.
Inputs:
- `domain` (query, required): Domain to scan.
Returns:
- `injection_signals`: list of signal types detected (e.g., `hidden_text`,
`ai_instruction_comment`, `invisible_div`).
- `risk_level`: `none`, `low`, `medium`, or `high` based on signal count and type.
Cost:
- Free. No API key required.
Latency:
- Typical: 2-4s (HTML fetch), p99: 7s.
Connector