arXiv (All)
open access
Measuring and Exploiting Implicit Trust in LLM Tool-Calling Pipelines
The Model Context Protocol (MCP) enables LLMs to invoke external tools, but every tool interaction exposes the model to attacker-controlled text through multiple input channels (tool descriptions, tool results, sampling messages) that share a single context window without privilege separation. In th
Conceptio Open Archive
Analyze & explore related research in Conceptio
Connect this record directly into your research workflow or AI agent. Explore citations across open repositories, query full text, and export structured proof bundles.
This document is indexed with metadata only: full text is not available in the archive for this record. Open the official source ↗
Related documents
- Measuring and Exploiting Implicit Trust in LLM Tool-Calling Pipelines#965349
- SpliTEE: Improving LLM Inference on Trusted Hardware with Differentially Private GPU Outsourcing#1084933
- Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Review#1063864
- When Single-User-Oriented LLM-based Assistants Involve Others: A Scoping Review of Pathways, Risks, and Responses#1083538
- From Rookie to Pro: Social Engineering LLMs for Automated Vulnerability Exploitation in Enterprise Software#819283
Record · ID 1012417
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Bring this data into your agent: Connect via MCP or API · 20 free credits to start · no card required
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive