A hands-on AI agent tool abuse lab. An internal helper with three harmless tools reads cloud keys and posts them to an attacker. Then we fix the tools in code.
My AI Agent Leaked Its Own Cloud Keys (Three Harmless Tools, One Chat Message)
Related
My AI Agent Leaked Its Own Cloud Keys (Three Harmless Tools, One Chat Message)
A hands-on AI agent tool abuse lab. An internal helper with three harmless tools reads cloud keys and posts them to an attacker. Then we fix the tools in code.
A Hidden Paragraph on a Web Page Made My AI Agent Email My Secrets
A hands-on indirect prompt injection lab. An AI assistant summarises a blog post and quietly emails private notes to an attacker. Then we fix it in code.
One Message Made This AI Support Bot Give 100% Off (and How to Fix It in Code)
A hands-on prompt injection lab. One message gets a support chatbot to apply a 100% discount and leak its system prompt. Then we fix it in code and run the same attack again.