Unverified50% confidenceFactExact time
Tool abuse refers to an Agent being induced to call legitimate tools with parameters desired by the attacker, often by combining first querying PII and then sending data out via email or webhook, which boundary defenses typically do not intercept.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.79% similarUnverifiedDependency confusion attacks exploit the characteristic of package managers to check public sources first when resolving dependencies, allowing attackers to register package names used internally by enterprises in order to trick build systems into downloading malicious code.76% similarVerifiedIndirect prompt injection attacks plant hidden instructions within normal business data to induce Agents into executing unauthorized operations, representing a security risk at the semantic level rather than the code level.74% similarUnverifiedPrompt injection or abnormal user input may allow an Agent to access data that should have been blocked or perform operations that should not have been executed, which is an architectural-layer vulnerability where permission checks are bypassed.74% similarUnverifiedThe runtime proxy firewall is deployed as a reverse proxy, screening every tool call and returned result in real time, and enforcing SSRF protection, OAuth tampering detection, PII protection, threat intelligence matching, and auditable logging.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1033965API
curl https://kongchang.com/api/v1/knowledge/claims/1033965MCP
get_claim(id=1033965)