# ASI02 - Tool Misuse & Exploitation

> Agent manipulated into using legitimate tools in unsafe or unintended ways.

- **Category**: Owasp Agentic Ai
- **Subcategory**: top10_2026
- **Canonical URL**: https://designpattern.fyi/owasp_agentic_ai/asi02_tool_misuse/

---

## Description
'**Intent**: Prevent agents from being tricked into abusing their legitimate tool access for malicious purposes.

**Context**: Agents with tool access can be manipulated to use those tools for data exfiltration, unauthorized modifications, or other harmful actions while appearing to operate normally.

**Solution**: Implement strict tool usage policies. Validate tool call parameters. Apply rate limiting on tool invocations. Monitor tool usage patterns. Use allowlists for tool operations. Require confirmation for destructive actions.'



## Use Cases
Use when agents have access to file systems, APIs, databases, or any tools that can affect real-world systems.





## Trade-offs


### Advantages

- Prevents data exfiltration via tools

- Limits tool abuse surface

- Enables usage auditing

- Supports safe tool integration




### Considerations & Drawbacks

- Restrictive policies may limit functionality

- Parameter validation complexity

- Legitimate edge cases may be blocked







---
**Reference**: [Original Source](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026)