← Scenario library
Poisoning the Agent Factory
Compromise the pipeline that builds agents, and every new worker is born malicious
Technique first revealed 17 Feb 2024
Multi-Agent System
InstructionsDataActionsControl / decisionFeedback / logs
👆 Click a component to inspectSetupStep 1 / 6
A team that stamps out its own workers
When the work piles up, the manager spins up extra worker agents — all built from one shared template that says how a worker should behave and what tools it gets. It's an agent factory: fast, consistent, and used constantly.
⚙️Base agent template (provisioning)config
agent_template: worker.v7 system_prompt: "You are a worker agent. Follow the planner's tasks." tools: [search, read, write_report] credentials: scoped-per-task # every spawned worker is instantiated from this single template
← / → keys