05 — Glossary · Technology & Operations
Lethal Trifecta
GL-930 · also Toxic Flow
The combination, in one AI agent or session, of access to private data, exposure to content an attacker could control, and a way to send information out. Together they let injected instructions steer the agent into leaking data.
Term coined by Simon Willison. Invariant Labs' toxic flow analysis looks for the same paths across an agent's tools. Removing any one leg breaks the attack; PN-230 asks that no single agent or session hold all three at once.
See also
In the catalog
Read next
The definition above is written in our own words; the source is linked, not copied.