Essentially, invisible prompts on websites could make Comet’s AI assistant do things it wasn’t asked to do.