Verified65% confidenceTradeoffExact time
Permissions that appear harmless when held individually by an agent (such as reading files and calling an HTTP library) can enable data exfiltration when combined, which is the tool-combination emergence problem.
3
Sources
65%
Confidence
Long-term
Relevance
9/6/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAgents may execute arbitrary code (installing dependencies, running scripts, modifying the file system), and without proper isolation may delete critical files, expose secrets, or make unexpected requests to external services.76% similarUnverifiedWhen multiple agents share the same vector store without an isolation mechanism, any agent may retrieve private information from other agents, and once one agent is compromised, the attack surface covers the entire shared store.75% similarUnverifiedMalicious or poorly crafted skills may leak API keys, sensitive data, or execute unexpected operations through an agent's tool-calling permissions.75% similarUnverifiedAccess to private data, exposure to untrusted text, and a channel for exfiltrating data are each safe in isolation; it is only when combined that they constitute a vulnerability.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/865905API
curl https://kongchang.com/api/v1/knowledge/claims/865905MCP
get_claim(id=865905)