AI Agents, Engineered

Home / Figures / Chapter 17

Figure 17.1: The confused deputy: a diligent, credentialed worker tricked into spending your authority on a stranger’s note

You give an agent your credentials, a stranger writes a note into content the agent reads, and the agent spends your authority on the stranger's order against your own tools and data.
Figure 17.1 The confused deputy: a diligent, credentialed worker tricked into spending your authority on a stranger's note. Anyone who can write to what it reads can leave an order on its desk.