Unverified70% confidenceTradeoffExact time
A single tool call may be safe, but a specific combination of multiple legitimate calls can produce dangerous effects, and this combinatorial explosion makes exhaustive security validation practically impossible.
2
Sources
70%
Confidence
Long-term
Relevance
8/29/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedAgent security risks are often not code vulnerabilities but semantic-level manipulation, which is difficult to cover with conventional penetration testing tools.76% similarUnverified使用他人打包的Skill文件存在安全风险，可能引入恶意指令75% similarUnverified组合多个各自安全的技能模块可能产生意料之外的安全缺口，例如文件读取技能与网络通信技能结合可被利用实现数据外泄72% similarUnverifiedExcessive blocking is itself a security risk because it prevents defenders from testing systems and releasing patches, while malicious actors can still use other models including open-source ones.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/817095API
curl https://kongchang.com/api/v1/knowledge/claims/817095MCP
get_claim(id=817095)