I was responding to someone earlier saying a user agent should respect robots.txt. An LLM powered user-agent wouldn't follow links, invisible or not, because it's not crawling.

It very feasibly could. If I made an LLM agent that clicks on a returned element, and then the element was this trap doored link, that would happen