[strken]

The user doesn't need to carefully goad Claude, they just need to send it to an attacker's website. The attacker is the one creating the link traversal merry-go-round.