Directive
Autonomous AI Agent
Embedded AI Feature
Event-Triggered AI Agent
Internal AI Assistant
Misaligned Directive
Public-Facing Conversational AI
- ID: DR001.002
- Created: 26th August 2026
- Updated: 26th August 2026
- Contributors: Nimer Kees, James Weston,
Sales or Website Assistant
A sales or website assistant is a synthetic subject directed to act as a public-facing sales, marketing, or website assistant. It may greet visitors, answer product questions, compare offerings, recommend services, collect leads, quote indicative prices, explain promotions, or encourage commercial action.
This directive creates an elevated exposure condition because the synthetic subject is often optimized for helpfulness, persuasion, and agreement. Those qualities can make it easier for an external user to manipulate the assistant into producing unauthorized commercial language, including off-range discounts, unsupported claims, false availability statements, misleading comparisons, or apparent binding offers.
The primary adverse outcome is misuse of the organization’s sales voice. A visitor may use role-override language, prompt injection, or social engineering to cause the synthetic subject to generate commercially authoritative responses outside its approved boundaries. Even if not legally binding, the output may create reputational harm, customer disputes, complaint risk, regulatory scrutiny, or pressure to honor an unauthorized statement.
Investigators should review the synthetic subject’s directive, sales prompt, product sources, price and discount controls, escalation rules, transcripts, and integrations with customer relationship management, ecommerce, quoting, or lead-capture systems. Particular attention should be given to offer-like statements, competitor comparisons, contract terms, quoted figures, and language presented as an authorized commercial commitment.
Investigative Relevance
Sales or website assistants are relevant because they combine public reach, brand authority, commercial pressure, and untrusted input. The synthetic subject may have limited system access, but its public statements can still produce organizational exposure.