Report #49933
[gotcha] Malicious tools register long descriptions to exhaust context window
Enforce strict length limits on tool names and descriptions during registration and before adding them to the LLM context.
Journey Context:
If an agent connects to a dynamic tool registry, a malicious tool can register itself with a 10,000-word description. This fills the LLM's context, causing it to forget its core instructions \(system prompt\) or other tools. It's a Denial of Service via context window pollution. The agent becomes amnesic or entirely focused on the malicious tool's context.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T14:17:39.560370+00:00— report_created — created