Partially Verified65% confidenceFactExact time
The "lethal trifecta" popularized by Simon Willison points out that when an Agent simultaneously has access to private data, exposure to untrusted content, and an outbound communication channel, its data can be tricked out of it.
3
Sources
65%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedSecurity researcher Simon Willison named the risk pattern of simultaneously possessing all three capabilities—access to private data, exposure to untrusted text, and a channel for exfiltrating data—the 'lethal trifecta'.77% similarUnverifiedThe 'fatal triad' of security is: access to private data, exposure to untrusted tokens, and the existence of a data exfiltration channel.76% similarUnverifiedAccess to private data, exposure to untrusted text, and a channel for exfiltrating data are each safe in isolation; it is only when combined that they constitute a vulnerability.70% similarUnverified使用模型代理工具存在数据隐私风险，请求内容会经过第三方服务器转发67% similarUnverifiedStealthy false data injection refers to attackers carefully crafting tampered data to bypass conventional anomaly detection mechanisms.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1052823API
curl https://kongchang.com/api/v1/knowledge/claims/1052823MCP
get_claim(id=1052823)