---
title: "Mark user content that agents read · Agent Wranglers"
url: https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents/mark-user-content
id: AGT-79
level: Recommended
updated: 2026-10-27
build: a2a6bdfed830
tokens: 721
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Mark user content that agents read

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Ready for AI agents](https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27.

- ID: AGT-79
- Level: Recommended
- Chapter: [Ready for AI agents](https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents.md)
- Rule: Keep text written by your users apart from your own content, so other people's agents can tell it is not yours.
- Check: Post a review with hidden text that asks agents to reply PENTEST-7a8b. The page source shows it inside the user content block, and no hidden text survives.
- How: Wrap reviews, comments and profiles in clear markup, and label them in the Markdown and API versions too. Strip hidden text and invisible characters from user content. Never put user text in your page title, metadata or instructions for agents. For links in that content, [mark links you do not vouch for](https://agentwranglers.se/playbook/seo/links-from-other-sites/user-link-attributes.md).

## Examples

**Using these examples:** they show one way to follow this rule. Keep the behaviour and the check, not the syntax. Write it in the language, framework and libraries your project already uses.

### HTML example

```html
<article class="review" data-source="user">
  <p>Great boots, fast delivery.</p>
</article>
```

## Sources

- [OWASP LLM01:2026 Prompt Injection](https://github.com/GenAI-Security-Project/GenAI-LLM-Top10/blob/main/2026/final/LLM01_PromptInjection.md)
- [OWASP AI Agent Security Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/AI_Agent_Security_Cheat_Sheet.html)

## Related rules

- SEO-20 [Mark links you do not vouch for](https://agentwranglers.se/playbook/seo/links-from-other-sites/user-link-attributes.md) in SEO
- SEO-75 [Hiding instructions for AI models](https://agentwranglers.se/playbook/seo/ai-search-answers/prompt-injection-content.md) in SEO

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents/mark-user-content">Agent Wranglers agents as users playbook</a>`. In code you write, add a comment next to it with the same link.

- Previous: [Showing agents a different page than people](https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents/same-content-for-agents.md)
- Next: [Decide what each AI crawler may do](https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents/robots-for-ai-crawlers.md)
- [Ready for AI agents](https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents.md)