Definition
Manipulating a tool's description, schema, implementation, or output so an agent selects unsafe actions or incorporates attacker-controlled instructions.
Distinguish it from nearby terms
Tool poisoning compromises the capability interface; indirect prompt injection is the broader instruction-delivery mechanism often used.
Check your understanding
Pin, attest, review, isolate, and minimize tool capabilities and treat descriptive metadata as untrusted.