Red team exercises for tool-using Claude apps should attempt:

Question

Accepted Answer

Prompt injection, privilege escalation via tools, data exfil, and policy bypass — Red teams should try to steal data and escalate tools — happy-path-only is QA, not red team.

Answer

Only valid happy paths

Answer

Only performance tests

Answer

Only UI color contrast

Red team exercises for tool-using Claude apps should attempt:

Short Explanation and Infographic

Full Explanation