Tríade Letal: could your AI agent leak your data?
A checklist and MCP inventory to help identify data leak risks from AI agents.
The Lethal Trifecta is the combination of three capabilities in an AI agent: accessing private data, reading content written by other people, and sending information outside. Each capability can be normal; the risk appears when all three are present in the same agent. For example, hidden text in an email could try to get the agent to retrieve data and send it somewhere else.
The Tríade Letal kit includes a script and a checklist to help identify this combination in agents that use MCP, a format for connecting to tools. The script reads configuration files without accessing the network, installing programs, or printing secrets. It creates a matrix that also covers built-in tools such as a browser and shell. This helps users see which tools access data, receive outside content, or allow information to be sent.
To get started, you can try the demo mode and then create a matrix from your machine’s own settings. For each tool, ask whether it accesses private data, reads third-party content, and lets the model freely choose where to send information. If all three capabilities are combined, the checklist suggests steps such as fixing the destination in code or limiting the data available. Run the inventory again when you install a new tool.
The link opens the original content; some require a subscription.
Go further on INEMA.CLUB
More news
- 06/10Auditar Skills: validate Claude Code and Codex skillsChecks skills against 46 rules, highlights the five weakest and lets you test them with and without a validation hook.
- 05/10SIL Loop R 1.1: adopted rules carry over to the next sessionPromotes rules to a monitored block in AGENTS.md and flags when it is outdated or a rule leaks.
- 05/10Which AI draws a capybara on a bicycle best?A guide presents a competition between AIs to draw a capybara on a bicycle.
- 05/10filmarca: turn your website into your brand filmCreates a script and scenes with subscription AI for review before rendering, in 16:9, 9:16 and 1:1, in PT, EN and ES.
- 05/10Atende Nutrição: meal plans and alerts on WhatsAppA plan kit for tracking meals with a food diary and health alerts on WhatsApp; includes 99 tests and /goal.