An invoice tells the agent to email private records. What blocks it?
Practice this question- The invoice is untrusted content.
- The agent lacks unrestricted read/send tools, the tool service checks object access and recipients, and sending requires the configured approval.
- A better prompt helps but does not serve as the primary barrier.
Adapted from 13_AI.MD · “29.13 AI security”. Code examples are study fragments. Difficulty and core labels are editorial estimates; version-specific behavior should be checked against your project.