Poisoned AI Agent Tool
Sub-technique of AML.T0011 User Execution
Description
A victim may invoke a poisoned tool when interacting with an AI agent. Invocation may expose the agent to poisoned definitions or responses, execute malicious tool implementation logic, or cause the agent to invoke additional tools. Poisoned tools may be introduced through AI software, installed packages, skills, or connections to remotely hosted services.
Poisoned AI agent tools may be introduced into the victim's environment via AI Supply Chain Compromise: AI Agent Tool.
- ATLAS ID
- AML.T0011.002
- Maturity
- RealizedUsed by real adversaries against AI systems in the wild.
- Platforms
- Agentic AI
Mitigations
ATLAS 2026.09 lists no mitigation for this technique; see the parent technique.