Tool Calling

Prompt injection explained for practitioners: direct vs. indirect attacks, why tool-calling agents make it worse, real attack patterns, and the defenses — treat tool output as data, scan it, and constrain what agents can do.

A defensive brief on a fast-rising risk class: malicious or compromised LLM routers and MCP gateways that inject unintended tool calls, steal credentials in transit, and pivot across hosts. What the attack looks like, why it scales, and the controls that actually contain it.