Skip to content

Hide Navigation Hide TOC

Agent Capability Enumeration via Structured Parse Request - ATR-2026-00491 (f8966a09-9023-5b58-96be-073ad7f653ef)

Detects attempts to extract an AI agent's tool inventory and capabilities by instructing it to parse its own self-description or an agent response into a structured list of tools, functions, and their descriptions. The attack uses a "security researcher" or "parse this response" framing to elicit a JSON manifest of available tools. Exposing the tool surface enables targeted injection and privilege escalation. Generalised from garak 'agent_breaker' probe corpus cluster 'markdown just raw json'.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Plugin Compromise (adbb0dd5-ff66-4b2f-869f-bfb3fdb45fc8) MITRE ATLAS Attack Pattern Agent Capability Enumeration via Structured Parse Request - ATR-2026-00491 (f8966a09-9023-5b58-96be-073ad7f653ef) Agent Threat Rules 1