Pre-filled "Ask AI" links can save vendor domains as trusted sources, potentially biasing future answers without malware or stolen credentials.