Unverified50% confidenceFactExact time
Tool calls introduce the Confused Deputy problem: the agent holds legitimate credentials and, once induced, will use its own credentials to perform unauthorized operations on behalf of the attacker.
1
Sources
50%
Confidence
Long-term
Relevance
9/21/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedInternal agents that are maliciously prompt-injected or misled may execute dangerous operations while holding legitimate permissions.74% similarUnverifiedAgent的安全性问题比对话更复杂，Skills设计需内置权限控制（最小权限原则）、执行沙箱和人机协作审批机制67% similarUnverified智能体可能通过看似合法的操作组合绕过单点检测，或防护规则对新型攻击模式缺乏覆盖67% similarUnverified工具审批机制在智能体调用具有副作用的工具时暂停执行并向人类发起确认请求，体现Human-in-the-Loop与最小权限原则66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/938869API
curl https://kongchang.com/api/v1/knowledge/claims/938869MCP
get_claim(id=938869)