Skip to content

Hide Navigation Hide TOC

Hidden System Instructions with Permission Override - ATR-2026-00207 (16de26a2-6c7f-5e64-b008-2b5050fd9c17)

Detects MCP skills containing hidden instructions within XML-style tags that attempt to override system behavior or bypass security controls, specifically targeting blocks with directive language.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Hidden System Instructions with Permission Override - ATR-2026-00207 (16de26a2-6c7f-5e64-b008-2b5050fd9c17) Agent Threat Rules 1