Classical security's name for a trusted party tricked into spending its authority on someone else's behalf. An injected agent is exactly this: every tool call it makes is signed, in effect, with your credentials, whether the instruction behind it came from you or from a page it read (Chapter 17).