· aka: Secret Exfiltration, API Key Theft
Agents can be tricked into revealing credentials, API keys, and other secrets from their environment through carefully crafted prompts or tool interactions.
Complete credential compromise. Lateral movement into connected systems.
Agent with access to environment variables or secrets.