Analysis · curated 31 Jul 2026
The lethal trifecta for AI agents: private data, untrusted content, and external communication
First reported simonwillison.net
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
The lethal-trifecta framing gives defenders a concrete mental model for why tool-enabled LLM agents can be tricked into exfiltrating private data, and what capability separations break the attack chain.
Nexius Labs' concept guide on Human Control and Mission Control frames AI agent governance around the 'lethal trifecta' — access to private data, exposure to untrusted content, and external communication — and describes attack classes like prompt injection and tool poisoning. Building on Simon Willison's original lethal-trifecta framework, it prescribes controls such as agent identity, evidence logging, risk-based human approval, capability constraints, and treating external content as evidence rather than authority.