Concepts · Emerging terminology
Tool Poisoning
An attempt to redirect an agent through malicious instructions embedded in tool-facing material, such as descriptions or returned content. The attacker tries to make lower-trust text influence privileged behavior. Success is not inevitable: trust separation, validated inputs and results, limited access and approval controls can constrain the attempted redirection.
Reviewed
Sources
Member lesson
The definition and sources are public. The complete practical lesson is for members.