FEAT: MaliciousToolCallInjection — indirect prompt injection via crafted tool-call response - #2242

Closed

manjunath bhaskar (manjunathbhaskar) wants to merge 6 commits into

microsoft:mainfrom

manjunathbhaskar:feat/malicious-tool-call-injection

Commits on Jul 22, 2026

FEAT: add MaliciousToolCallInjection single-turn attack strategy
manjunath bhaskar (manjunathbhaskar)
committed
66fb497
FEAT: fix review issues in MaliciousToolCallInjection
manjunath bhaskar (manjunathbhaskar)
committed
30a3ac2
fix: use json.dumps for objective escaping; fix type: ignore codes
manjunath bhaskar (manjunathbhaskar)
committed
5956e14
style: fix ruff formatting, docstrings, quotes, unused import
manjunath bhaskar (manjunathbhaskar)
committed
88d64ad
fix(test): set next_message before patching _setup_async in continuation test
manjunath bhaskar (manjunathbhaskar)
committed
77ae079
fix: use full UUID hex for tool_call_id to eliminate collision risk
manjunath bhaskar (manjunathbhaskar)
committed
903f6ba