Attack library
Real agent workflows, the attack each one invites, and how the guardrails stop it. Finance first.
Finance
AI agent that answers “is my invoice paid?” emails safelyHidden text in an email

Stop supplier bank-detail fraud in AI-automated financeSupplier record: change the IBAN
AI accounts payable: process vendor bills without approving fakesInvoice memo in a PDF

Overdue invoice reminders drafted by an AI agentControl case
Handle Intercom refund requests with an AI agent, without unauthorised credit notesSupport conversation from the public
Prompt injection in shared finance documentsShared document
