Equation 3 · Part 1 · How a Tool Description Becomes an Attack Surface
Symbol E
What this part means
E is a part of this expression. Its role is fixed by the surrounding article and by the operations shown in the formula.
Its job in the formula
E is a part of this expression. Its role is fixed by the surrounding article and by the operations shown in the formula.
Full expression→Symbol E→Article meaning
The passage around this formula
Both incidents are instances of the same underlying condition, and it is worth writing that condition down rather than leaving it as a slogan. Call A the proposition that an agent has access to data worth stealing, U the proposition that untrusted content reaches its context, and E the proposition that some channel back out to the world is available to it. Willison’s name for the combination is useful because it states a falsifiable structural claim: exploitable exfiltration requires all three at once.
Learn the underlying idea
A variable is a named place for a value. Its letter is a local label: x can mean position in one formula and a data point in another.
Open the illustrated variables: a letter stands for a value guide →
See this notation across published equations →
Sources cited in the article section
- [7] GitHub MCP Exploited: Accessing Private Repositories via MCP ↗
- [8] The Lethal Trifecta for AI Agents: Private Data, Untrusted Content, and External Communication ↗
- [9] Defense in Depth for MCP Servers ↗
These citations provide research context; check each source for the exact claim it supports.