· aka: Secret Extraction
Agent is tricked into revealing API keys, tokens, or credentials stored in its environment variables or configuration.
Full credential exposure enabling infrastructure compromise.
Agent with access to credentials in its runtime environment.