Consent Bypass via Hidden LLM Instructions in Tool Descriptions

Detects tool descriptions that embed instructions directing the LLM to automatically forward data to other tools or external endpoints without user confirmation. These instructions bypass normal consent workflows by telling the LLM to "always pass results directly" or that data "should be sent without user confirmation", enabling unauthorized data exfiltration chains.

建議回應

參考資料