#prompt-injection

The Confused Deputy in Your Agent: When the Tool Trusts the Model Too Much

Your refund tool checks whether the agent is allowed to issue refunds. Nothing checks whether the customer asking for one is entitled to it — and that gap opens without any jailbreak at all.