# this includes a response from attacker-controlled page

// The model, having seen the malicious instructions, might then make a tool call like:

â¶ tool:web_search     {"search": "acmecorp valuation?lead_data=%7B%22id%22%3A%22lead%2F42%22%2C%22name%22%3A%22Jane%20Doe%22%2C%22email%22%3A%22jane%40example.com%22%2C...%7D"}