Confused deputy
A privileged program is tricked into exercising its authority for an attacker. This is the core security problem of agent payments: the agent can spend, the attacker cannot.
RELATED TERMS
- Prompt injectionHiding malicious instructions inside content an agent will r…
- MandateThe boundary within which an agent may spend — typically a p…

