ContextLeak: Exfiltrating LLM Agent Context Via Malicious Tools

Exfiltrating an LLM agent's runtime context -- such as the user prompt, execution trajectory, and tool list -- poses severe security and privacy risks to users. Such attacks can be carried out via malicious tools and typically require three conditions: 1 the agent selects the malicious tool for...

Gaming Tool Preferences in Agentic LLMs

Large language models LLMs can now access a wide range of external tools, thanks to the Model Context Protocol MCP. This greatly expands their abilities as various agents. However, LLMs rely entirely on the text descriptions of tools to decide which ones to use--a process that is surprisingly...