跳到主要内容
// ContextLeak in AI Agents //
The whole attack surface here is a tool name and a tool description.
Stealing an LLM agent's runtime context, meaning the user prompt, the execution trajectory and the tool list, needs three things to line up.
The agent has to pick the malicious