Security vulnerability where attackers exploit semantic matching to inject malicious tools into agent workflows.