Tool use is what turns an LLM into an agent — and into a real attack surface. Making function calling safe: capability scoping, argument validation, authorization outside the model, and containment.
LLM tool use safety: giving agents tools without giving away the keys
