Security Analysis of AI Agents Reveals Broken Trust Model and High Vulnerability Rates

Security Architecture Breakdown

The analysis demonstrates that the fundamental trust model for AI agents is broken. Unlike traditional security architectures, AI agents process attacks and legitimate instructions through the same context window with no structural differentiation. The control/data plane separation that underpins traditional security doesn't exist in current AI agent implementations.

Key Empirical Findings

• Indirect injection achieves 36-98% attack success rate (ASR) across state-of-the-art models on MCPTox, ASB, and PINT benchmarks
• More capable models are MORE susceptible to tool-layer attacks
• npm MCP ecosystem scan: 2,386 packages examined, with 49% containing security findings
• Attack surfaces grow superlinearly with agent capability

Proposed Solution: Agent Threat Rules (ATR)

The research presents Agent Threat Rules (ATR), the first open detection standard for AI agent threats. The implementation includes:

• 61 detection rules
• 99.4% precision on the PINT benchmark
• Open source with MIT license
• Available on GitHub: https://github.com/Agent-Threat-Rule/agent-threat-rules

The full paper covers 30+ CVEs, 7 benchmarks, and proposes architectural requirements for defenses that can keep pace with AI scaling.