CRITICALCWE-20
CM-009 Tool Memory Poisoning
Context Manipulation — Attempts to poison agent context or memory
Description
Attempts to poison tool/function memory
Remediation
Do not allow runtime tool reconfiguration via user input.
Run this test
$ npx hackmyagent attack --payload CM-009