Analysis · curated 20 Jul 2026
Breaking the Lethal Trifecta: How Asana Thinks About Agentic AI Security • Asana
First reported asana.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
The lethal-trifecta model gives defenders a practical design principle for building agentic AI features that resist prompt injection, a class of attack the industry has no robust defense against.
Asana engineering explains how it approaches agentic AI security using Simon Willison's "lethal trifecta" framework — the convergence of access to sensitive data, exposure to untrusted content, and the ability to externally communicate (create side effects) that together enable prompt-injection attacks. The piece argues that since prompt injection cannot be reliably solved, defenders should break at least one leg of the trifecta, citing demonstrated attacks against Microsoft 365 Copilot (EchoLeak), GitHub's MCP server, and Slack AI.