Delayed Tool Invocation via Prompt Injection (Time-Shifted Execution) - ATR-2026-00510 (4f68489a-fe3e-5071-b4e6-216c08c4bb28)
Detects prompt injections that instruct an agent to defer malicious actions to a future interaction or tool call, bypassing immediate security controls. The attack plants instructions in current context that activate on a subsequent turn, email-send event, or browse action. MITRE ATLAS AML.CS0038 (Gemini Workspace attack). Pattern: deferred execution instruction combined with malicious action payload — temporal-shift verbs ("next time", "when you next", "on your next response", "schedule for next run") co- occurring with high-risk action targets (credential access, context exfiltration, forwarding, browsing to external URLs).