Threat intelligence / Technique

Poisoned AI Agent Tool

A victim may invoke a poisoned tool when interacting with an AI agent. Invocation may expose the agent to poisoned definitions or responses, execute malicious tool implementation logic, or cause the agent to invoke additional tools. Poisoned tools may be introduced through AI software, installed packages, skills, or connections to remotely hosted services. Poisoned AI agent tools may be introduced into the victim's environment via [AI Supply Chain Compromise: AI Agent Tool](/techniques/AML.T0010.005).

Technique

TypeTechnique

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

A victim may invoke a poisoned tool when interacting with an AI agent. Invocation may expose the agent to poisoned definitions or responses, execute malicious tool implementation logic, or cause the agent to invoke additional tools. Poisoned tools may be introduced through AI software, installed packages, skills, or connections to remotely hosted services. Poisoned AI agent tools may be introduced into the victim's environment via [AI Supply Chain Compromise: AI Agent Tool](/techniques/AML.T0010.005).

4 recorded

Relationships

subtechnique-of

to User Execution

Technique

uses

from Data Exfiltration via Remote Poisoned MCP Tool

Campaign

uses

from Poisoned Postmark MCP Server Email Exfiltration

Campaign

uses

from Supply Chain Compromise via Poisoned ClawdBot Skill

Campaign

1 external

References

mitre-atlas

AML.T0011.002