Security and governance

Tool poisoning

working definition

Definition

Manipulating a tool's description, schema, implementation, or output so an agent selects unsafe actions or incorporates attacker-controlled instructions.

Distinguish it from nearby terms

Tool poisoning compromises the capability interface; indirect prompt injection is the broader instruction-delivery mechanism often used.

Check your understanding

Pin, attest, review, isolate, and minimize tool capabilities and treat descriptive metadata as untrusted.