AI / Agentic AI Interview Questions
What is Tool Injection?
Tool injection is an attack where an attacker manipulates the instructions or metadata an agent receives about a tool, tricking it into executing a malicious function or targeting the wrong resource.
- Can exploit the fact that an agent typically trusts a tool's name and description without verifying its actual implementation
- Has been compared to a malicious macro in a document, hidden in plain sight and executed automatically once the agent processes it
- Can subvert human-in-the-loop guardrails, since the malicious instruction may execute before a human ever reviews the agent's output
Defenses generally focus on restricting which tools an agent can discover and call in the first place, rather than trying to detect malicious intent after the fact.
What does tool injection manipulate?
What is tool injection often compared to?
More Related questions...
