To ensure complete security and user control, the AskMyWebsite AI concierge is engineered to guide visitors rather than act for them. In text guidance, our assistant does not click buttons, fill out forms, change pages, or submit data on a visitor’s behalf. Instead, it guides visitors using a visual spotlight-a highlight ring drawn directly around the relevant element on your page-accompanied by clear, step-by-step explanations. The spotlight itself is completely non-interactive and cannot intercept clicks, and the page is never dimmed or blocked. This ensures your website remains fully usable at all times, with the visitor’s own click on the highlighted element being the only trigger that advances the guidance to the next step.
This division of labor is enforced directly at the protocol level. The action vocabulary for text guidance contains no instructions for clicking, filling, or navigating, so neither a model error nor a malicious prompt injection hidden in your page content can make the assistant perform them. Features that do more are optional, off by default, and turned on separately by the site owner.
For a complete look at the security architecture behind our visual spotlight and the design of our guidance protocol, read the full technical details in our research analysis: Guiding, Not Clicking: A Browser–LLM Guidance Protocol.