Skip to content

ToolLeak

Named by 2 kept items in this workspace.

Search every workspace for ToolLeak. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Top 10 attacks on Claude Code and what each one actually broke
    writeup2026-09-23It is written here as ToolLeak (MCP schema-based system prompt exfiltration and RCE).

    An attacker-registered MCP tool defines an argument that the agent fills with its own system prompt during normal argument generation (no jailbreak needed); phase two chains this into remote code execution via a two-channel injection split across the tool description and tool return value. Succeeded

  • ToolLeak: Tool-Invocation Attacks on Coding Agents
    paper2026-09-21

    A vulnerability allowing malicious prompt exfiltration through benign argument retrieval during tool invocation, used in prompt leakage reconnaissance to recover system prompts.

All techniques in this workspace.