All Lessons

A fintech company is building an AI agent with tools that can read account balances, transfer funds, delete transactions, and update account details. The security team is reviewing the tool design before production deployment. They are particularly concerned about unauthorized transfers or data deletion. What is the most important security consideration when implementing tool use for this financial agent?

1 / 3
advanced 25 min

Tool Security

Loading lesson content...

A developer builds a 'send_email' tool. Claude calls it with an email that contains prompt injection (user input telling Claude to ignore previous instructions). How should this be handled?

1 / 4

A file system tool allows reading any file path. A user asks Claude to 'read /etc/passwd'. Claude calls the tool. What's the security gap?

1 / 5