Back to Risk Catalogue

Agent Threat Rules (ATR)

Open detection standard for AI agent threats, Apache-2.0 licensed. Rules map to MITRE ATLAS, OWASP LLM Top 10, OWASP Agentic AI Top 10, and NIST AI RMF.

ATR-2026-00010 Malicious Content in MCP Tool Response

Risks

AIR-SEC-010Prompt Injection AIR-SEC-025Tool Chain Manipulation and Injection AIR-SEC-026MCP Server Supply Chain Compromise

Mitigations

AIR-PREV-020MCP Server Security Governance

ATR-2026-00011 Instruction Injection via Tool Output

Risks

AIR-SEC-010Prompt Injection AIR-SEC-025Tool Chain Manipulation and Injection

Mitigations

AIR-PREV-019Tool Chain Validation and Sanitization

ATR-2026-00012 Unauthorized Tool Call

Risks

AIR-SEC-024Agent Action Authorization Bypass AIR-SEC-025Tool Chain Manipulation and Injection

Mitigations

AIR-PREV-018Agent Authority Least Privilege Framework AIR-PREV-019Tool Chain Validation and Sanitization

ATR-2026-00013 Tool-Driven Server-Side Request Forgery

Risks

AIR-SEC-025Tool Chain Manipulation and Injection

Mitigations

AIR-PREV-019Tool Chain Validation and Sanitization

ATR-2026-00030 Cross-Agent Attack Detection

Risks

AIR-OP-028Multi-Agent Trust Boundary Violations

Mitigations

AIR-PREV-022Multi-Agent Isolation and Segmentation

ATR-2026-00040 Agent Privilege Escalation

Risks

AIR-SEC-024Agent Action Authorization Bypass

Mitigations

AIR-PREV-018Agent Authority Least Privilege Framework

ATR-2026-00075 Agent Memory Manipulation

Risks

AIR-SEC-027Agent State Persistence Poisoning

ATR-2026-00076 Insecure Inter-Agent Communication

Risks

AIR-OP-028Multi-Agent Trust Boundary Violations

Mitigations

AIR-PREV-022Multi-Agent Isolation and Segmentation

ATR-2026-00095 MCP Server Supply Chain Poisoning

Risks

AIR-SEC-026MCP Server Supply Chain Compromise

Mitigations

AIR-PREV-020MCP Server Security Governance

ATR-2026-00098 Unauthorized Financial Action by Agent

Risks

AIR-SEC-024Agent Action Authorization Bypass

Mitigations

AIR-PREV-018Agent Authority Least Privilege Framework

ATR-2026-00113 Credential Theft via Agent Channel

Risks

AIR-SEC-029Agent-Mediated Credential Discovery and Harvesting

Mitigations

AIR-PREV-023Agentic System Credential Protection Framework

ATR-2026-00118 Human Approval Fatigue Exploitation

Risks

AIR-SEC-024Agent Action Authorization Bypass