A public defender IT review finds an email-to-ticket body that tells the agent to email all case files to an outside address. Which injection goal does this represent?
Select an answer to reveal the explanation.
Short Explanation
You can spot that the email is not asking for harmless citation-formatting advice; it is trying to make the agent send case files outside the office. That is tool misuse aimed at data exfiltration, so keep human approval on anything that sends records externally.
Full Explanation
Tool-misuse and data-exfiltration injections try to make an agent take harmful actions—such as emailing, exporting, or posting confidential files—by embedding instructions in untrusted text. Here, the email-to-ticket body tells a public defender agent to email all case files to an outside address, aiming to misuse the agent’s tools to move sensitive defense materials off-system. Recognizing this goal supports mandatory human approval for send and export actions. Harmless formatting advice for citation styles does not seek tool-driven data theft. A request to upgrade the office coffee machine firmware concerns facilities IT, not agent exfiltration. A routine request to schedule unsupervised model pretraining on approved internal data overnight concerns training operations, not the injection goal in the ticket body. Exam caveat: Public defender and justice workloads heighten attorney-client confidentiality risk; agent frameworks should enforce allowlisted recipients, DLP, and human-in-the-loop review for outbound case-file actions. Prompt text alone must never authorize emailing case repositories. Distinguish exfiltration-oriented injection from persona jailbreaks that do not invoke tools. Practical check: In a staging defender agent, paste a ticket ordering it to email all case files to an external address. Confirm the mail tool blocks the action or queues it for attorney approval, and verify that no files leave the tenancy without an explicit human authorization step.