AML.T0053

MITRE ATLAS / AI Agent Tool Invocation

Adversaries use their access to an AI agent to invoke the tools that agent is permitted to call. The agent's own permissions become the adversary's, without any credential of their own.

Think of it likePersuading someone with a master key to open the door for you, so your name never appears on the access log.

In plain English

An agent's tools are its hands. Whoever can steer the agent can reach every system, file, and API the agent was trusted with, using the agent's credentials rather than their own.