Activation Triggers
Sub-technique of AML.T0084 Discover AI Agent Configuration
Description
Adversaries may discover keywords or other triggers (such as incoming emails, documents being added, incoming message, or other workflows) that activate an agent and may cause it to run additional actions.
Understanding these triggers can reveal how the AI agent is activated and controlled. This may also expose additional paths for compromise, as an adversary could attempt to trigger the agent from outside its environment and drive it to perform unintended or malicious actions.
- ATLAS ID
- AML.T0084.002
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Agentic AI
Mitigations
- AML.M0000Limit Public Release of Information
Avoid publicly disclosing agent activation keywords, events, and workflows.