Rule set sha256:2dd04f614be2
PROMPT_SECURITY_TOOL_CALL_HIJACK_001
One rule of the rule set with digest 2dd04f614be27ad02c913058bc1c1818342ff069ca53753b390042a3b2cdc95d. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | PROMPT_SECURITY_TOOL_CALL_HIJACK_001 |
|---|---|
| Rule version | 9a5fc07b1d9217b10b3759d892bde180663d15ce9595fd7fbf271c33e0a028e1 |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Not approved |
rules/regulations/universal/prompt_security/tool_call_hijack.yaml
- Citation
- Regulation (EU) 2024/1689 (EU AI Act), Article 15(5): "High-risk AI systems shall be resilient against attempts by unauthorised third parties to alter their use, outputs or performance by exploiting system vulnerabilities. The technical solutions aiming to ensure the cybersecurity of high-risk AI systems shall be appropriate to the relevant circumstances and the risks."
- Condition
- Detects tool/function-call hijacking: injected instructions that direct an agent to invoke tools for the attacker (forward secrets, send data to an external address, run commands). EU AI Act Article 15. OWASP LLM01 / LLM07.
- Condition type
- regex
- Status in the file
- No status recorded.