← Scenario library
The Link That Hired an Insider
One click provisions an attacker-configured agent inside your own workspace
Technique first revealed 23 Jul 2026
Tool-Using Agent
InstructionsDataActionsControl / decisionFeedback / logs⧚crosses a trust boundary
👆 Click a component or flow to inspectSetupStep 1 / 6
An authenticated workspace
You are signed in to an agent-building platform. Your session is trusted: the platform already knows it is you, and it will do things on your behalf without asking you to log in again for every action.
← / → keys