Back to Risk Catalogue

Agent Threat Rules (ATR)

Open detection rule format for AI agent threats, MIT licensed. Rules map to MITRE ATLAS, OWASP LLM Top 10, OWASP Agentic AI Top 10, and NIST AI RMF.

ATR-2026-00010 Malicious Content in MCP Tool Response

Risks

AIR-SEC-010Prompt Injection AIR-SEC-025Tool Chain Manipulation and Injection AIR-SEC-026MCP Server Supply Chain Compromise

Mitigations

AIR-PREV-020MCP Server Security Governance

ATR-2026-00011 Instruction Injection via Tool Output

Risks

AIR-SEC-010Prompt Injection AIR-SEC-025Tool Chain Manipulation and Injection

Mitigations

AIR-PREV-019Tool Chain Validation and Sanitization

ATR-2026-00012 Unauthorized Tool Call

Risks

AIR-SEC-024Agent Action Authorization Bypass AIR-SEC-025Tool Chain Manipulation and Injection

Mitigations

AIR-PREV-018Agent Authority Least Privilege Framework AIR-PREV-019Tool Chain Validation and Sanitization

ATR-2026-00013 Tool-Driven Server-Side Request Forgery

Risks

AIR-SEC-025Tool Chain Manipulation and Injection

Mitigations

AIR-PREV-019Tool Chain Validation and Sanitization

ATR-2026-00030 Cross-Agent Attack Detection

Risks

AIR-OP-028Multi-Agent Trust Boundary Violations

Mitigations

AIR-PREV-022Multi-Agent Isolation and Segmentation

ATR-2026-00040 Agent Privilege Escalation

Risks

AIR-SEC-024Agent Action Authorization Bypass

Mitigations

AIR-PREV-018Agent Authority Least Privilege Framework

ATR-2026-00075 Agent Memory Manipulation

Risks

AIR-SEC-027Agent State Persistence Poisoning

ATR-2026-00076 Insecure Inter-Agent Communication

Risks

AIR-OP-028Multi-Agent Trust Boundary Violations

Mitigations

AIR-PREV-022Multi-Agent Isolation and Segmentation

ATR-2026-00098 Unauthorized Financial Action by Agent

Risks

AIR-SEC-024Agent Action Authorization Bypass

Mitigations

AIR-PREV-018Agent Authority Least Privilege Framework

ATR-2026-00113 Credential Theft via Agent Channel

Risks

AIR-SEC-029Agent-Mediated Credential Discovery and Harvesting

Mitigations

AIR-PREV-023Agentic System Credential Protection Framework

ATR-2026-00118 Human Approval Fatigue Exploitation

Risks

AIR-SEC-024Agent Action Authorization Bypass