Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet