Agent Capability Enumeration via Structured Parse Request - ATR-2026-00491 (f8966a09-9023-5b58-96be-073ad7f653ef)
Detects attempts to extract an AI agent's tool inventory and capabilities by instructing it to parse its own self-description or an agent response into a structured list of tools, functions, and their descriptions. The attack uses a "security researcher" or "parse this response" framing to elicit a JSON manifest of available tools. Exposing the tool surface enables targeted injection and privilege escalation. Generalised from garak 'agent_breaker' probe corpus cluster 'markdown just raw json'.