Agent / Tool Abuse Pentest

Authorized testing of prompt-injection-to-tool-misuse. Read ../../SECURITY_RULES.md first.

Assumption: prompt injection becomes tool misuse if the agent holds dangerous tools. Treat every tool description, parameter description, resource, prompt template, tool result, README, issue, PR comment, doc, retrieved page, and error message as attacker-controlled.

Rules: use only benign markers and the placeholder domain https://example.invalid/collect. Never trigger a real destructive tool; prove against disposable staging items you created.

Deliverables

• Agent Abuse Case Matrix (agent-abuse-cases.md)
• Tool Poisoning Findings (tool-poisoning-catalog.md)
• Confirmed / Suspected Findings, Passed Checks
• Fix plan + regression tests